Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/802753FC955711EC9FD391775A40D577.roa
File: 802753FC955711EC9FD391775A40D577.roa (raw, json)
Hash identifier: unuGXq0JWtooSpxkDi7xpC6Kw/VrYSijDvv/Hdyxev0=
Subject key identifier: 73:66:C3:5E:38:D2:DD:8E:86:68:55:96:7A:96:8D:BD:72:F9:D2:0D
Certificate issuer: /CN=F36B49FAAF/serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
Certificate serial: 0866
Authority key identifier: FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/802753FC955711EC9FD391775A40D577.roa
Signing time: Thu 24 Feb 2022 09:52:39 +0000
ROA not before: Thu 24 Feb 2022 09:52:35 +0000
ROA not after: Fri 24 Feb 2023 09:52:35 +0000
asID: 37728
IP address blocks: 196.60.86.0/24 maxlen: 24
2001:43f8:41::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2150 (0x866)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B49FAAF/serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
Validity
Not Before: Feb 24 09:52:35 2022 GMT
Not After : Feb 24 09:52:35 2023 GMT
Subject: CN=62175567-7c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ad:99:77:31:d9:37:1f:71:ff:04:85:79:4e:
e9:13:00:a6:f9:99:5e:00:28:a2:df:b0:05:ae:94:
9a:55:7c:2c:cb:83:c3:19:4d:8f:25:de:39:20:8a:
42:26:1e:76:11:45:d9:08:61:55:8e:d7:e8:e8:c6:
a3:b4:a8:d6:ad:0a:ca:b9:79:36:36:83:be:f3:5a:
ca:a5:09:78:0d:ca:73:32:4e:49:96:db:2f:d6:ba:
6d:91:70:5f:58:b2:e5:e2:0a:58:5f:08:16:68:8b:
8c:d0:ae:e9:80:85:5a:07:18:eb:4e:77:e6:26:fc:
d1:a8:c2:0e:f9:2d:df:86:e1:0b:a2:39:1e:65:99:
34:39:a5:2a:36:e3:c2:c3:0d:03:ee:98:49:b9:cf:
45:4b:45:c7:7e:e5:d5:4c:56:17:2d:c2:d8:30:61:
a5:73:6e:b6:2a:2f:4c:68:ae:83:61:08:f2:8b:0f:
b7:09:50:b6:0d:c7:19:d6:a7:f2:45:f2:f5:fc:e9:
0a:f2:f0:d4:81:c9:56:76:63:7b:08:f1:74:c2:5d:
df:2a:ae:6e:09:8f:b2:49:91:02:56:c2:24:c6:02:
9f:8a:75:e1:5c:3d:c4:e6:d9:5d:fc:ea:d3:01:67:
75:90:e1:06:a2:66:d0:1b:ff:58:a7:5e:ab:c2:57:
9b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:66:C3:5E:38:D2:DD:8E:86:68:55:96:7A:96:8D:BD:72:F9:D2:0D
X509v3 Authority Key Identifier:
keyid:FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/802753FC955711EC9FD391775A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.60.86.0/24
IPv6:
2001:43f8:41::/64
Signature Algorithm: sha256WithRSAEncryption
33:a9:4f:d5:53:d2:9e:9b:e5:9b:91:ba:0d:35:be:9c:f8:9d:
22:51:7f:84:cf:5f:50:af:35:02:63:3b:4d:d7:08:c4:be:53:
77:cf:c6:0a:29:1a:9f:00:ec:71:a2:0e:40:35:ef:4c:36:ae:
6c:cf:8d:9c:26:6c:bc:5b:ce:6e:37:37:e3:af:5a:ec:74:d0:
e4:c3:ef:b6:c8:6d:05:d6:1a:fe:f7:32:2c:dc:14:15:6e:92:
a7:76:cc:a4:0f:78:2e:af:3d:e0:14:f9:93:f1:3c:d9:aa:39:
2d:4f:0b:22:fd:42:48:02:18:a7:e3:fe:ea:1a:1d:75:b6:3d:
a7:6d:d3:ec:44:19:23:29:95:7e:4d:4a:a0:a9:10:38:0f:13:
c2:17:39:37:64:1d:6f:0a:27:a2:c1:dd:cd:9b:f3:ab:ea:ae:
77:78:2c:c4:59:12:d6:20:7a:c3:58:8b:e8:53:59:b6:06:8a:
39:02:51:fa:6d:ff:51:b2:1e:b9:51:b9:e8:01:ad:32:7c:f9:
11:8f:ac:69:2c:2e:0c:48:bc:a4:d7:d9:97:92:c9:5e:99:57:
f9:c3:8f:1d:43:8c:4b:5d:79:44:41:94:1d:05:d1:3f:b4:31:
7e:77:b3:12:ec:e2:81:c1:bc:9b:b8:82:ba:af:e0:49:f3:97:
8d:9f:80:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org