Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367A972/02153F04536411EC85B02637D8A014CE/D14C4F728D9A11EC819A38BA5A40D577.roa
File: D14C4F728D9A11EC819A38BA5A40D577.roa (raw, json)
Hash identifier: SOvq6at4r4MNKQYdrIofdZ47+jwfv+buZrkUj/nIiNY=
Subject key identifier: D0:2A:47:AD:D1:75:A5:59:6C:61:C2:AC:7B:0D:5A:A2:0D:53:70:CF
Certificate issuer: /CN=F367A972AF/serialNumber=AD1E740C65B53510CED065A9244D1ED498C103B0
Certificate serial: 56
Authority key identifier: AD:1E:74:0C:65:B5:35:10:CE:D0:65:A9:24:4D:1E:D4:98:C1:03:B0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rR50DGW1NRDO0GWpJE0e1JjBA7A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367A972/02153F04536411EC85B02637D8A014CE/D14C4F728D9A11EC819A38BA5A40D577.roa
Signing time: Mon 14 Feb 2022 13:34:22 +0000
ROA not before: Mon 14 Feb 2022 13:34:18 +0000
ROA not after: Wed 14 Feb 2024 13:34:18 +0000
asID: 327904
IP address blocks: 2001:43f8:aa0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367A972AF/serialNumber=AD1E740C65B53510CED065A9244D1ED498C103B0
Validity
Not Before: Feb 14 13:34:18 2022 GMT
Not After : Feb 14 13:34:18 2024 GMT
Subject: CN=620a5a5e-075d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:53:ee:f8:18:40:fa:bb:4e:3b:54:93:29:
27:6e:33:2d:1a:0c:a5:ef:06:c4:05:94:d6:5b:16:
04:ff:d7:76:71:16:fa:79:ea:f6:6d:51:6f:98:bc:
d1:8a:e7:ea:fa:98:fd:2b:f9:cf:e4:90:ed:c4:9b:
63:20:d4:50:d8:ec:34:0f:15:1a:f1:43:f8:a3:a6:
24:60:79:38:ac:f0:3a:9a:7b:26:31:e0:55:32:3d:
d2:32:d6:ce:94:c0:ff:03:80:ff:da:42:69:36:bd:
ff:af:12:4a:0c:a1:7f:75:a5:b5:87:37:87:66:f4:
30:a9:28:50:16:af:43:b2:b7:9c:2a:3a:5b:f8:8d:
f8:e7:ac:20:e9:f2:60:e9:88:c3:8f:33:04:0e:29:
59:56:0e:4b:f8:be:e0:45:5a:8a:21:68:71:60:32:
d7:b7:42:54:5c:79:bc:78:1c:18:76:79:8c:39:87:
a6:7d:78:e8:0b:61:bc:47:6f:d1:09:ce:f2:c8:36:
a0:c4:f6:96:39:2e:ef:d4:fc:37:8e:88:dd:ee:81:
e6:ec:04:9f:04:ed:1c:95:8a:38:1c:99:2b:f6:d2:
33:19:d9:e2:1a:c9:59:15:83:4e:e8:92:78:62:5e:
24:cf:47:09:d9:5d:e4:47:36:9c:9b:f2:73:15:f3:
b5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2A:47:AD:D1:75:A5:59:6C:61:C2:AC:7B:0D:5A:A2:0D:53:70:CF
X509v3 Authority Key Identifier:
keyid:AD:1E:74:0C:65:B5:35:10:CE:D0:65:A9:24:4D:1E:D4:98:C1:03:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367A972/02153F04536411EC85B02637D8A014CE/rR50DGW1NRDO0GWpJE0e1JjBA7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rR50DGW1NRDO0GWpJE0e1JjBA7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367A972/02153F04536411EC85B02637D8A014CE/D14C4F728D9A11EC819A38BA5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:aa0::/48
Signature Algorithm: sha256WithRSAEncryption
04:16:d8:1c:28:aa:49:a9:88:d8:81:06:fc:88:cb:ed:ec:29:
2c:b6:4a:d6:68:44:7f:27:f8:ee:17:e7:a1:99:d2:fe:5b:67:
45:7a:d5:6e:d7:ac:16:aa:3d:f0:60:0d:09:ca:02:2e:c3:ca:
14:d4:85:6e:6d:d5:20:8b:4d:19:b7:74:df:13:f2:1b:8b:c4:
0e:13:6b:61:f0:35:f9:58:46:a1:ef:6e:00:e5:9c:83:ee:84:
66:99:c7:86:45:f8:f6:ec:36:8e:35:79:2c:f3:99:87:39:c1:
f7:69:43:1c:19:d3:34:43:0a:85:f3:85:50:0f:04:99:ce:e1:
d6:31:0c:72:56:4b:cd:59:9b:de:6e:0a:4e:e0:76:ca:3f:2d:
fb:03:02:94:db:5f:10:bb:ef:ff:63:65:3d:47:1c:5c:0e:20:
30:8e:57:9a:19:ea:0c:c4:6a:71:49:08:c2:73:97:6b:2c:85:
f8:db:6e:5b:66:f6:a5:93:73:be:d0:fb:82:d8:83:a8:61:6b:
fb:a4:38:ec:bc:5c:8b:89:df:70:6b:4b:cd:41:83:d7:e2:65:
10:51:30:d0:85:31:ac:8c:40:04:13:96:1a:dc:df:b6:da:d8:
5d:d9:e3:be:96:a5:7d:df:be:bb:5e:10:6c:ca:00:e4:ba:ff:
e6:b8:9e:f0
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIBVjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY3
QTk3MkFGMTEwLwYDVQQFEyhBRDFFNzQwQzY1QjUzNTEwQ0VEMDY1QTkyNDREMUVE
NDk4QzEwM0IwMB4XDTIyMDIxNDEzMzQxOFoXDTI0MDIxNDEzMzQxOFowGDEWMBQG
A1UEAwwNNjIwYTVhNWUtMDc1ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALxqU+74GED6u047VJMpJ24zLRoMpe8GxAWU1lsWBP/XdnEW+nnq9m1Rb5i8
0Yrn6vqY/Sv5z+SQ7cSbYyDUUNjsNA8VGvFD+KOmJGB5OKzwOpp7JjHgVTI90jLW
zpTA/wOA/9pCaTa9/68SSgyhf3WltYc3h2b0MKkoUBavQ7K3nCo6W/iN+OesIOny
YOmIw48zBA4pWVYOS/i+4EVaiiFocWAy17dCVFx5vHgcGHZ5jDmHpn146AthvEdv
0QnO8sg2oMT2ljku79T8N46I3e6B5uwEnwTtHJWKOByZK/bSMxnZ4hrJWRWDTuiS
eGJeJM9HCdld5Ec2nJvycxXztX8CAwEAAaOCAqgwggKkMB0GA1UdDgQWBBTQKket
0XWlWWxhwqx7DVqiDVNwzzAfBgNVHSMEGDAWgBStHnQMZbU1EM7QZakkTR7UmMED
sDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2N0E5NzIvMDIxNTNGMDQ1MzY0MTFFQzg1QjAyNjM3RDhBMDE0Q0UvclI1MERH
VzFOUkRPMEdXcEpFMGUxSmpCQTdBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvclI1MERHVzFOUkRPMEdXcEpFMGUxSmpCQTdBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0E5NzIvMDIxNTNGMDQ1MzY0MTFFQzg1QjAyNjM3RDhB
MDE0Q0UvRDE0QzRGNzI4RDlBMTFFQzgxOUEzOEJBNUE0MEQ1Nzcucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABQ/gKoDANBgkqhkiG9w0B
AQsFAAOCAQEABBbYHCiqSamI2IEG/IjL7ewpLLZK1mhEfyf47hfnoZnS/ltnRXrV
btesFqo98GANCcoCLsPKFNSFbm3VIItNGbd03xPyG4vEDhNrYfA1+VhGoe9uAOWc
g+6EZpnHhkX49uw2jjV5LPOZhznB92lDHBnTNEMKhfOFUA8Emc7h1jEMclZLzVmb
3m4KTuB2yj8t+wMClNtfELvv/2NlPUccXA4gMI5XmhnqDMRqcUkIwnOXayyF+Ntu
W2b2pZNzvtD7gtiDqGFr+6Q47Lxci4nfcGtLzUGD1+JlEFEw0IUxrIxABBOWGtzf
ttrYXdnjvpalfd++u14QbMoA5Lr/5rie8A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org