Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/A190BF28444911EDB73D8FC6F1222468.roa
File: A190BF28444911EDB73D8FC6F1222468.roa (raw, json)
Hash identifier: Yx86rA34iiBek2Hu/bi7ZQD4RciekptyJwlFFrMh294=
Subject key identifier: 99:E8:AC:1C:CA:07:2E:30:DA:5B:2B:7C:14:39:46:F8:C2:F4:BE:86
Certificate issuer: /CN=F36C3E3DAF/serialNumber=8B229E847C23325D4CC26F408F1D33E557A79D6D
Certificate serial: 05
Authority key identifier: 8B:22:9E:84:7C:23:32:5D:4C:C2:6F:40:8F:1D:33:E5:57:A7:9D:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/A190BF28444911EDB73D8FC6F1222468.roa
Signing time: Wed 05 Oct 2022 01:04:15 +0000
ROA not before: Wed 05 Oct 2022 01:04:12 +0000
ROA not after: Thu 05 Oct 2023 01:04:12 +0000
asID: 328549
IP address blocks: 102.36.184.0/22 maxlen: 22
102.36.184.0/24 maxlen: 24
102.36.185.0/24 maxlen: 24
102.36.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C3E3DAF/serialNumber=8B229E847C23325D4CC26F408F1D33E557A79D6D
Validity
Not Before: Oct 5 01:04:12 2022 GMT
Not After : Oct 5 01:04:12 2023 GMT
Subject: CN=633cd80f-2a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:c2:34:6e:88:64:43:30:5d:ef:c1:49:b7:
eb:f8:5a:e7:5c:1c:e8:6f:c3:c6:09:2c:5c:42:ae:
47:e5:9e:80:fa:b5:3a:89:5b:a6:90:8b:23:21:b0:
86:36:9c:bb:41:91:c1:52:6d:f2:f8:54:e9:d7:b9:
6c:52:62:9a:37:fb:90:13:82:8b:d2:2f:3d:fb:de:
0f:54:e0:67:ac:5b:52:cd:d1:9a:1b:3f:d5:d1:97:
62:1a:5a:7e:b0:67:b8:f4:51:4e:f4:3b:a9:6f:e3:
75:e4:f8:26:00:31:92:ac:c9:f4:7a:35:62:95:bf:
98:aa:da:fa:5a:92:41:d4:54:19:8f:c8:0c:b5:21:
fd:ed:83:f9:b4:97:c5:23:9f:a0:2f:4a:bc:52:16:
ae:27:34:3d:29:42:78:e8:5f:83:74:f6:19:e1:0d:
63:7b:a6:00:05:97:82:c6:52:a1:94:06:e0:03:1d:
03:fa:83:58:2e:51:3d:1d:47:0b:77:9d:e9:9b:7b:
da:07:78:1a:ed:e4:71:27:88:77:2a:88:2e:40:2d:
b9:c6:93:f6:c4:52:36:05:65:5c:c7:46:8d:45:47:
83:e9:29:dc:2c:a0:9b:33:55:29:d5:b8:63:1c:c2:
6a:e8:74:a5:46:30:fb:a8:b8:4b:0f:82:58:31:db:
53:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E8:AC:1C:CA:07:2E:30:DA:5B:2B:7C:14:39:46:F8:C2:F4:BE:86
X509v3 Authority Key Identifier:
keyid:8B:22:9E:84:7C:23:32:5D:4C:C2:6F:40:8F:1D:33:E5:57:A7:9D:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/A190BF28444911EDB73D8FC6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.36.184.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:57:e7:03:da:7b:c4:8b:60:9a:51:26:85:5c:32:8b:00:14:
85:4b:33:bd:df:cf:c3:00:00:40:84:c9:c8:84:13:12:46:6a:
72:6f:64:02:63:6c:13:1e:5b:7e:c6:cf:b2:f2:e6:07:84:57:
f3:5a:f6:7c:02:35:e1:c9:19:09:21:fb:63:f9:bc:95:15:cc:
66:a6:2e:c2:f3:d0:73:87:9e:90:45:56:c5:5b:bf:f2:db:2a:
ca:6d:e3:53:30:41:04:b8:a4:04:ee:91:67:b5:c4:b1:1e:95:
c7:f7:a3:92:d1:3d:39:26:16:26:3f:b3:32:f4:50:ba:c2:ba:
03:b0:1e:44:39:0a:65:98:74:e4:14:46:00:f8:4d:33:41:ac:
d2:cd:5b:dd:2b:c0:5a:be:29:e8:b0:97:29:b0:c0:17:06:56:
aa:a3:f8:c6:40:d7:6d:c7:d6:06:6c:79:07:94:66:a5:09:88:
88:82:1c:fc:23:68:e3:68:3e:91:1f:98:51:31:68:06:be:1f:
24:1e:bf:a7:40:96:14:96:99:9d:42:25:1d:5b:89:d8:3c:2c:
11:34:7c:f9:7a:4f:45:f7:33:e7:b5:3f:7d:0d:4a:6c:2f:c5:
18:de:53:ec:da:63:dd:c8:d3:a3:71:c5:e1:cb:03:68:60:fa:
54:1a:b4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 5 02:26:48 2023 by rpki-client on console-fra.rpki-client.org