Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF36BE96F36011EC9D8F7B8EF1222468.roa
File: AF36BE96F36011EC9D8F7B8EF1222468.roa (raw, json)
Hash identifier: Oyo6/dR3jChXHzv2uhLQFUDPNeKNkVhALg8yFakO4c8=
Subject key identifier: 49:6C:3E:B7:43:BF:F6:EC:5D:2A:97:18:83:5B:DD:D9:EA:F1:6F:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1502
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF36BE96F36011EC9D8F7B8EF1222468.roa
Signing time: Fri 24 Jun 2022 01:55:12 +0000
ROA not before: Fri 24 Jun 2022 01:55:08 +0000
ROA not after: Fri 30 Jun 2023 01:55:08 +0000
asID: 135391
IP address blocks: 45.202.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5378 (0x1502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 01:55:08 2022 GMT
Not After : Jun 30 01:55:08 2023 GMT
Subject: CN=62b51980-c83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:65:64:3c:f1:16:e1:5d:61:90:a0:a2:e1:
08:be:ce:27:5b:b2:9d:18:51:92:b3:c7:99:b0:ff:
69:0f:dd:fd:60:28:38:9f:dd:21:d1:0a:ad:c7:b2:
6f:53:5c:60:e5:5d:f8:8c:40:a1:a4:6e:56:fc:a5:
71:5d:1c:87:d4:d2:6a:aa:5a:78:76:bb:a5:5a:0b:
a3:23:f9:fc:7d:47:fc:df:d6:5e:89:7a:69:71:b7:
a6:5a:52:bf:48:c2:c8:93:de:01:1f:47:a4:c5:11:
64:32:62:d7:89:2e:bf:2f:b1:8d:04:c6:e2:2a:10:
af:93:89:81:db:b4:7b:f9:63:f9:24:8c:4b:7f:88:
0f:e2:08:15:89:75:36:c3:c1:35:22:3f:42:ba:aa:
81:4d:eb:1d:fc:b4:10:44:21:4d:b3:86:b4:ed:12:
04:94:98:92:5d:6f:9d:13:41:a1:00:a8:98:c6:56:
f1:e5:99:28:db:71:7f:47:38:e2:40:d7:80:15:e6:
80:73:02:11:d8:ec:12:21:4a:ca:cd:d7:48:a5:a5:
e9:b3:f7:fa:6f:0c:c7:7a:62:aa:41:f4:fe:cc:dd:
44:b8:d0:ae:49:58:05:0e:e2:4a:51:63:10:98:ec:
0e:7b:d8:3b:6b:24:74:4a:b1:a8:d9:c2:d8:da:ce:
1d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6C:3E:B7:43:BF:F6:EC:5D:2A:97:18:83:5B:DD:D9:EA:F1:6F:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF36BE96F36011EC9D8F7B8EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.12.0/22
Signature Algorithm: sha256WithRSAEncryption
52:72:78:d1:93:a5:d6:24:f0:b6:58:ed:fa:ec:53:8c:0a:58:
94:6c:17:56:64:d3:14:89:18:47:be:63:4a:05:d9:f7:7f:09:
52:f9:59:91:02:ef:10:79:8c:0e:30:88:73:cb:c7:5a:c0:6f:
ea:9e:73:23:ff:a8:9e:34:8b:89:5f:8e:f7:87:2a:7f:b4:a3:
66:a7:41:97:7e:e7:39:fa:76:26:b4:fc:12:17:60:c4:1f:32:
7e:ae:b8:3a:d7:bb:0e:58:e7:cd:50:13:ee:54:2d:cb:66:8d:
00:d1:cb:1d:ad:1b:c4:e4:69:94:18:91:fc:66:e4:43:ed:10:
e6:1c:97:c9:d9:49:0d:21:6a:04:76:eb:dd:cc:0a:a1:ce:c3:
b4:f3:20:ef:8a:ac:3a:dc:89:48:18:20:bb:17:05:79:f2:ce:
14:38:f4:80:2c:ef:d6:51:25:e6:78:88:ff:80:2b:ee:18:fe:
f2:e8:0e:22:c8:d9:67:7c:41:13:27:3a:ee:bb:7b:54:6b:1e:
f7:26:ed:ff:41:40:3f:49:39:3e:15:3c:0c:f5:0f:00:ac:cf:
0e:62:e0:93:21:fc:9f:bc:f5:ea:7f:d9:6d:72:ed:cb:80:76:
1a:8d:83:89:03:27:29:cb:9f:c2:e6:42:12:1b:91:1e:9d:d5:
60:53:88:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-ams.rpki-client.org