Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/3B32293063FB11EC899B57A15A40D577.roa
File: 3B32293063FB11EC899B57A15A40D577.roa (raw, json)
Hash identifier: qtd+rk9U83tbflZungHCI3sPEs+8Sk7oceCVHIOy3sY=
Subject key identifier: C9:F7:EC:54:8E:2A:58:FB:FC:D7:EE:B9:C1:62:3A:25:A4:1F:2C:FF
Certificate issuer: /CN=F36AC99EAF/serialNumber=41453416F04E8F6DB116AFBFF9719751A7BDBCF7
Certificate serial: 07
Authority key identifier: 41:45:34:16:F0:4E:8F:6D:B1:16:AF:BF:F9:71:97:51:A7:BD:BC:F7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QUU0FvBOj22xFq-_-XGXUae9vPc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/3B32293063FB11EC899B57A15A40D577.roa
Signing time: Thu 23 Dec 2021 14:18:42 +0000
ROA not before: Thu 23 Dec 2021 14:18:38 +0000
ROA not after: Fri 23 Dec 2022 14:18:38 +0000
asID: 14618
IP address blocks: 102.221.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AC99EAF/serialNumber=41453416F04E8F6DB116AFBFF9719751A7BDBCF7
Validity
Not Before: Dec 23 14:18:38 2021 GMT
Not After : Dec 23 14:18:38 2022 GMT
Subject: CN=61c48542-ab48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:71:4f:a8:ac:42:e7:ae:f6:2e:5c:46:09:
ff:60:ad:be:46:81:b0:70:a4:08:d1:b5:43:3d:be:
ff:63:03:c1:15:6c:17:68:f3:e5:b6:3b:8e:31:a7:
c4:56:01:3e:77:a7:e8:77:92:38:e5:f3:d0:04:23:
96:96:44:2d:51:51:9a:9b:2c:59:e2:dd:bd:f4:2e:
23:74:49:49:64:18:9c:30:c9:65:88:b3:9b:aa:59:
a9:44:0e:72:11:05:b5:1b:58:69:b0:b6:c1:f8:70:
41:77:21:70:21:22:dd:e8:51:67:dd:4d:ad:f0:5f:
c3:d0:f0:96:e9:5f:16:d6:f2:70:44:f2:d5:37:ab:
b1:69:e1:8e:c0:e1:97:f2:57:54:7b:a7:9e:e9:e5:
f2:fd:53:a9:fc:c3:28:f3:bf:ca:34:27:f6:8e:5e:
78:c4:cd:0a:82:3f:53:f4:e0:bc:19:80:fa:e2:61:
d5:1d:4f:e3:79:85:a6:93:ce:ef:f5:d9:a7:44:51:
00:cd:17:42:35:49:c0:48:4f:b0:b3:c9:39:9b:25:
35:b8:b4:b2:19:19:25:ea:6e:34:11:7c:e8:b9:13:
89:9c:9e:33:eb:3c:e1:d7:32:0d:a6:91:15:7b:40:
07:c2:50:97:e6:b9:7f:4f:e0:74:8d:e8:00:b2:6c:
08:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F7:EC:54:8E:2A:58:FB:FC:D7:EE:B9:C1:62:3A:25:A4:1F:2C:FF
X509v3 Authority Key Identifier:
keyid:41:45:34:16:F0:4E:8F:6D:B1:16:AF:BF:F9:71:97:51:A7:BD:BC:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QUU0FvBOj22xFq-_-XGXUae9vPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/3B32293063FB11EC899B57A15A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.184.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:6d:a9:d6:34:76:9d:dd:3f:cc:54:da:8d:14:ce:f1:1c:dc:
46:fc:82:e1:99:16:93:fa:bd:84:72:45:a4:33:74:41:da:29:
a3:7d:d9:1f:b6:50:ea:f8:1b:99:be:21:4b:06:9d:87:48:e4:
59:60:18:c5:e1:3f:af:15:2f:cc:7a:fd:9c:89:53:50:7c:3f:
ba:bc:93:e1:34:2b:80:d8:2f:94:36:62:9f:c1:cc:95:f8:f9:
6a:88:7c:59:26:77:ce:98:0f:8d:bb:a5:6c:14:eb:66:33:e7:
a7:33:e1:fa:43:e5:b7:26:38:55:43:08:1a:4c:91:7f:6f:10:
70:d6:7d:61:b3:4c:51:a2:9b:a4:26:bd:2e:fc:45:49:07:4a:
e2:72:db:42:bf:f3:d3:a5:4a:27:c8:bf:71:ad:18:4f:f5:8f:
6e:3a:b1:0e:ae:a4:a6:0e:9a:9d:47:6d:b9:c6:36:c9:eb:12:
45:27:8e:ff:24:cd:fa:8c:6f:34:7c:06:f1:90:55:d9:a9:e0:
99:36:61:74:ce:d1:1c:b3:be:45:07:a3:60:e0:d5:2a:ad:a9:
aa:da:cc:c3:4f:77:25:63:6b:6b:ca:ab:11:d0:8a:b3:4a:36:
d3:6b:fa:ef:b5:a6:f6:89:ae:77:ce:55:39:3a:ed:9b:b1:04:
b7:83:a1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org