Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/D13A1E90959E11EC8B05D8C35A40D577.roa
File: D13A1E90959E11EC8B05D8C35A40D577.roa (raw, json)
Hash identifier: UHD2mowomKYWPyYHGYWGkuvPv30osnNo96M3BDXds64=
Subject key identifier: 3F:C2:AC:7B:25:76:53:8E:EC:10:A2:68:E2:3F:39:F2:84:18:DD:73
Certificate issuer: /CN=F36797C7AF/serialNumber=F4171D4EA249CA147AB8DEC205DCB51F49988B50
Certificate serial: 03
Authority key identifier: F4:17:1D:4E:A2:49:CA:14:7A:B8:DE:C2:05:DC:B5:1F:49:98:8B:50
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9BcdTqJJyhR6uN7CBdy1H0mYi1A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/D13A1E90959E11EC8B05D8C35A40D577.roa
Signing time: Thu 24 Feb 2022 18:23:09 +0000
ROA not before: Thu 24 Feb 2022 18:23:05 +0000
ROA not after: Wed 31 Jan 2024 18:23:05 +0000
asID: 328964
IP address blocks: 102.217.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36797C7AF/serialNumber=F4171D4EA249CA147AB8DEC205DCB51F49988B50
Validity
Not Before: Feb 24 18:23:05 2022 GMT
Not After : Jan 31 18:23:05 2024 GMT
Subject: CN=6217cd0d-a5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:89:8b:e0:2c:36:68:33:8e:4d:bb:43:02:fd:
ff:77:5b:7b:66:18:e3:eb:fc:07:01:5c:6b:8a:93:
fa:0e:b5:b5:d1:f0:72:cb:3d:df:8f:12:5c:3c:84:
a0:99:6b:06:90:82:7d:37:3e:a4:5c:bd:af:de:64:
5b:9c:a8:16:92:1f:c5:13:dd:82:5c:d3:11:9f:fc:
34:45:8c:91:34:bb:eb:35:cf:08:c8:05:7b:04:4b:
41:bd:0a:ea:69:c5:83:18:d6:e9:48:8f:67:26:cc:
15:05:21:1a:36:b2:4d:e5:d4:45:b9:90:4b:23:70:
f6:eb:8f:38:45:b7:44:2a:ff:8d:3e:ca:18:02:d8:
21:fa:32:a3:44:80:43:cb:7b:47:d7:8f:a6:81:ec:
3b:78:5f:f2:51:91:f4:d3:a9:ba:3f:d8:db:35:8f:
b0:04:e3:95:bf:33:13:f8:b7:f6:6c:b5:3f:bf:4a:
32:26:00:c9:b4:29:c5:71:73:1a:ec:e3:11:b7:aa:
66:86:b7:00:8e:18:f0:fd:b0:c5:dd:87:93:d1:b4:
a3:00:59:72:ba:d0:b5:28:93:3d:44:27:b8:cf:92:
6f:5d:77:e3:15:0c:0d:74:50:1b:b4:dd:37:b5:c9:
b8:d0:52:c1:c9:03:ae:b8:da:f7:59:16:d5:17:7a:
e6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C2:AC:7B:25:76:53:8E:EC:10:A2:68:E2:3F:39:F2:84:18:DD:73
X509v3 Authority Key Identifier:
keyid:F4:17:1D:4E:A2:49:CA:14:7A:B8:DE:C2:05:DC:B5:1F:49:98:8B:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/9BcdTqJJyhR6uN7CBdy1H0mYi1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9BcdTqJJyhR6uN7CBdy1H0mYi1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/D13A1E90959E11EC8B05D8C35A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.253.0/24
Signature Algorithm: sha256WithRSAEncryption
96:cf:c2:84:b7:62:c2:7e:92:72:25:8d:5d:a5:be:05:24:c7:
8f:f8:9e:fd:85:27:fe:74:4e:1c:3a:aa:10:59:5f:d0:c3:25:
2b:62:cd:4d:e0:09:f9:f4:ca:a8:00:7b:78:bd:4c:4e:17:d1:
e0:ab:f1:7a:b5:8a:da:14:5f:ea:40:81:4a:36:14:45:08:f1:
a2:2b:5f:77:a5:2b:db:bd:b8:12:c9:07:bb:41:a7:79:29:56:
67:e3:99:c4:d7:5e:0a:ea:8e:48:03:89:2b:15:70:3c:f3:0c:
94:21:1e:ba:f1:ab:30:84:04:25:da:e0:4a:f5:5c:71:a2:73:
5d:ad:be:fa:de:e4:92:86:57:21:2a:b5:49:cf:23:36:40:61:
4a:f3:29:b0:54:bb:0b:43:17:cb:76:0e:e7:59:15:15:25:5f:
bb:35:3a:32:14:5d:f5:10:3a:a7:3b:97:f6:20:19:c7:85:c1:
60:09:82:c2:c7:f2:51:c0:e8:e3:ba:9f:cc:c9:8b:75:01:5a:
3a:5d:2b:c6:1e:05:82:d2:7c:96:bc:f5:25:d5:48:84:34:72:
41:c6:60:76:fd:54:58:37:39:37:99:da:f8:cb:ea:27:8e:8e:
77:e1:3d:4b:43:7d:1f:b3:0b:a6:a7:e8:3f:d7:d3:92:00:75:
25:37:f6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org