Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/1C6C9850971711EDACB7F8BCF1222468.roa
File: 1C6C9850971711EDACB7F8BCF1222468.roa (raw, json)
Hash identifier: i999KTjuHSYUE1XAiFlvS/zQ03YTNRfOHu1pHhwQlkU=
Subject key identifier: 0E:71:2B:A3:F2:45:2F:A2:E1:8C:57:81:1B:56:1B:DB:40:2E:9C:53
Certificate issuer: /CN=F36B583CAF/serialNumber=293E5CFF530308B7F0F6B89E13F70C64F5E1099A
Certificate serial: 02
Authority key identifier: 29:3E:5C:FF:53:03:08:B7:F0:F6:B8:9E:13:F7:0C:64:F5:E1:09:9A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/1C6C9850971711EDACB7F8BCF1222468.roa
Signing time: Wed 18 Jan 2023 10:01:44 +0000
ROA not before: Wed 18 Jan 2023 10:01:38 +0000
ROA not after: Wed 17 Jan 2024 10:01:38 +0000
asID: 328615
IP address blocks: 197.215.130.0/24 maxlen: 24
197.215.131.0/24 maxlen: 24
197.215.132.0/24 maxlen: 24
2c0f:3200:6000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B583CAF/serialNumber=293E5CFF530308B7F0F6B89E13F70C64F5E1099A
Validity
Not Before: Jan 18 10:01:38 2023 GMT
Not After : Jan 17 10:01:38 2024 GMT
Subject: CN=63c7c387-c872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:9d:f8:15:1d:de:fb:f3:19:bf:73:61:f7:
6c:e0:54:17:1e:af:84:8f:d4:51:f0:59:b5:41:c5:
21:47:e6:6f:6d:32:a0:39:ef:9c:7a:45:98:f5:36:
2e:3f:01:f1:f8:6d:83:65:df:53:39:ae:6e:2c:e0:
75:c2:c7:5c:31:1e:0c:37:32:10:54:b5:74:90:0d:
02:64:a9:ff:60:08:7f:b4:90:d2:bb:e0:ea:cb:45:
62:c8:48:e4:a1:32:64:2f:67:df:81:11:b7:47:6f:
0c:c1:ed:56:7e:0f:9d:81:7a:52:4c:09:77:f4:2f:
e1:64:c2:57:41:e4:f4:dc:f3:e7:cc:a1:a4:6e:46:
f3:91:63:2d:6f:9d:06:7c:9f:20:3a:3c:f4:af:21:
fa:4e:52:03:3e:a7:f2:04:a4:20:0b:dd:15:21:4f:
8d:d5:c7:40:2f:b8:37:9c:4e:dd:84:5b:32:d8:36:
94:9f:55:9b:fb:6e:8e:e2:f0:e6:37:6e:f5:a6:bb:
27:d3:f8:d9:f6:2c:42:46:48:5c:5c:b6:db:ea:bb:
52:9f:7e:fc:6b:9d:2c:d4:1f:8e:aa:bd:20:19:90:
5c:3e:61:da:b5:70:a9:f6:ea:e5:63:de:89:c8:46:
21:c5:8c:e6:6e:bf:27:0d:d5:f1:46:e3:78:90:04:
dd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:71:2B:A3:F2:45:2F:A2:E1:8C:57:81:1B:56:1B:DB:40:2E:9C:53
X509v3 Authority Key Identifier:
keyid:29:3E:5C:FF:53:03:08:B7:F0:F6:B8:9E:13:F7:0C:64:F5:E1:09:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/1C6C9850971711EDACB7F8BCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.215.130.0-197.215.132.255
IPv6:
2c0f:3200:6000::/36
Signature Algorithm: sha256WithRSAEncryption
30:25:a0:ec:8a:c3:e1:f7:50:13:68:7c:c3:c7:e3:21:20:37:
10:10:6b:2f:3d:e0:73:04:60:87:c2:45:20:19:8e:cb:49:2a:
49:51:5f:68:ec:41:a4:61:22:79:f9:cd:f6:2c:9c:e8:23:be:
60:69:c1:fd:de:01:f3:4c:ce:54:e3:75:26:4e:7a:61:bb:cc:
ea:b9:d5:8b:88:3c:7b:cc:89:91:f8:68:7e:f9:a5:72:d6:ce:
a9:c9:aa:6d:43:24:20:5d:e5:f9:ec:cb:83:78:f1:83:86:03:
76:31:88:5f:52:e0:29:64:36:21:1a:74:2e:66:49:52:d4:21:
54:bf:01:c6:b3:2b:3b:85:27:94:46:98:9b:6e:c9:b3:d5:76:
cd:11:ec:75:ae:81:52:52:9c:b8:db:0c:1b:62:c4:85:9d:ba:
58:e7:7a:26:a0:b6:9a:e7:99:c8:6b:40:73:a2:3e:f8:71:22:
43:d4:00:d9:c6:76:63:af:1b:70:a8:19:5e:c3:2b:61:89:d6:
17:51:62:f5:0a:a7:f6:90:3a:f9:29:53:3f:1a:0f:ab:9f:2b:
6f:4d:09:84:07:da:28:f6:db:ee:09:35:bc:64:df:47:57:ed:
09:1e:a2:fc:54:c0:2e:39:98:04:61:a4:fd:9f:3c:ca:0b:41:
1c:32:27:7e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org