Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/5784F80C4B5011EB9EB3220CF8AEA228.roa
File: 5784F80C4B5011EB9EB3220CF8AEA228.roa (raw, json)
Hash identifier: LFciMx5JrOs9bSSQTkxb/6wuTYal5cAw1wfcEO0HQPk=
Subject key identifier: A6:D3:EE:4F:92:F4:11:B0:2B:CC:EA:6F:EE:E5:02:55:DA:83:D8:B7
Certificate issuer: /CN=F369B918AF/serialNumber=6CF6DE5159C7D18F33E081B66F52968BB186380A
Certificate serial: 02
Authority key identifier: 6C:F6:DE:51:59:C7:D1:8F:33:E0:81:B6:6F:52:96:8B:B1:86:38:0A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/5784F80C4B5011EB9EB3220CF8AEA228.roa
Signing time: Thu 31 Dec 2020 10:10:01 +0000
ROA not before: Thu 31 Dec 2020 10:09:57 +0000
ROA not after: Sun 31 Dec 2023 10:09:57 +0000
asID: 37062
IP address blocks: 196.216.248.0/23 maxlen: 32
2001:43f8:400::/40 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369B918AF/serialNumber=6CF6DE5159C7D18F33E081B66F52968BB186380A
Validity
Not Before: Dec 31 10:09:57 2020 GMT
Not After : Dec 31 10:09:57 2023 GMT
Subject: CN=5feda378-3b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:32:90:d5:87:8b:51:23:6b:2a:f2:2d:ea:05:
33:1e:49:e1:78:ed:63:84:31:a8:ac:63:80:02:78:
e9:c0:60:58:5a:a8:11:3b:48:35:b2:c2:dc:18:a0:
a9:d0:4d:0a:d3:df:4f:0b:49:2e:d7:ba:f0:89:cf:
7f:cd:40:0e:69:4b:84:85:29:63:a2:73:7a:53:81:
21:ce:7a:ea:f6:5b:f1:fb:a5:26:40:e6:22:a7:e4:
c3:c2:da:fa:57:0b:a2:64:01:a9:4e:35:62:a5:fe:
7a:c8:77:3c:59:15:a5:80:70:cc:c2:44:63:b9:a3:
1b:c8:cd:bb:84:8e:28:00:70:4c:ac:4f:ad:95:7a:
69:2a:49:cf:0a:48:e9:9d:39:7f:07:80:e2:78:1c:
6b:94:bf:7d:58:0a:16:e1:85:ec:b8:1b:84:f3:71:
2f:bf:b5:48:ee:5c:e1:bb:4d:2b:de:3b:7c:b6:ea:
b5:4c:33:0d:95:b5:28:04:3b:a5:64:7d:27:ec:32:
94:f1:ea:a3:1d:6f:c1:e2:41:32:ef:d4:35:de:ba:
ac:32:87:f1:dd:34:61:68:83:48:67:c4:71:7c:74:
49:4f:99:48:8b:34:76:4f:ce:66:67:ae:26:f1:02:
0c:70:8b:b6:04:4e:d6:d0:e5:47:d0:c4:97:41:99:
7c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D3:EE:4F:92:F4:11:B0:2B:CC:EA:6F:EE:E5:02:55:DA:83:D8:B7
X509v3 Authority Key Identifier:
keyid:6C:F6:DE:51:59:C7:D1:8F:33:E0:81:B6:6F:52:96:8B:B1:86:38:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/5784F80C4B5011EB9EB3220CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.216.248.0/23
IPv6:
2001:43f8:400::/40
Signature Algorithm: sha256WithRSAEncryption
74:5f:0c:f6:2e:c8:7e:d5:bf:b6:c7:01:0e:bb:12:9b:f1:84:
0b:8f:bf:e6:1f:d4:99:bc:34:26:84:ca:0a:f8:2b:d6:0f:a5:
a4:35:67:5c:d0:10:43:04:f7:d9:f7:30:39:b7:5d:e0:61:b7:
72:6a:5c:cb:bf:8a:bf:85:65:dd:24:bb:fc:75:2d:a3:be:fd:
c5:44:57:d0:77:e2:12:b2:e3:5e:67:84:9b:42:b0:19:fa:48:
b3:8c:22:1e:05:73:bd:3e:07:48:f9:ec:9a:36:b3:4e:95:72:
ba:63:ff:7b:7a:d0:d2:c9:e4:54:9f:e5:a1:4e:4c:35:94:2a:
8d:26:f3:0c:2e:95:51:23:26:15:70:e4:dc:70:7e:5b:24:46:
43:91:18:b0:6a:22:e5:a4:27:93:a0:a9:f0:ea:15:6f:57:36:
3e:72:98:0d:f9:91:62:db:45:f7:6c:88:cb:6c:0d:ea:9e:d9:
93:a9:e8:e7:46:9f:f0:74:f7:a4:6a:dd:4d:89:86:f9:a8:23:
94:9c:73:c1:ab:7b:d9:f0:7f:86:c8:7b:0a:3e:7b:1c:f0:13:
d1:66:86:0e:06:2b:56:d0:0c:41:c4:6c:81:c5:71:d4:ff:51:
b2:0b:4b:88:b6:86:e2:a0:36:71:9b:ef:4c:3a:52:30:f4:92:
7d:d7:5a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org