Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/53F35756B20011EDB4184FC1F1222468.roa
File: 53F35756B20011EDB4184FC1F1222468.roa (raw, json)
Hash identifier: ZF/5aiHKHh0wJ1x6NJAW0tExfv8xpUVOETUqT/kr7v8=
Subject key identifier: E6:11:37:FF:A9:57:4F:0B:40:41:15:83:A7:41:E7:EC:35:3D:DF:FA
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A3E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/53F35756B20011EDB4184FC1F1222468.roa
Signing time: Tue 21 Feb 2023 15:56:40 +0000
ROA not before: Tue 21 Feb 2023 15:56:36 +0000
ROA not after: Wed 21 Feb 2024 15:56:36 +0000
asID: 61317
IP address blocks: 102.165.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2622 (0xa3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 21 15:56:36 2023 GMT
Not After : Feb 21 15:56:36 2024 GMT
Subject: CN=63f4e9b8-ec7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:78:0e:36:2c:7e:36:93:d7:fe:2d:1e:f9:ca:
8d:ae:64:7a:3f:63:06:55:5f:fb:55:2e:32:07:a7:
28:aa:00:37:b0:a9:08:6d:d5:27:19:67:87:89:19:
f8:ce:99:a6:e4:36:ea:fe:8b:13:87:d4:84:53:77:
d9:1a:6c:cd:90:92:2e:09:1a:2a:b7:96:3f:7c:7f:
7c:d6:1c:b2:cf:98:7f:fb:68:26:95:c3:e0:f6:14:
55:f7:37:e5:8b:36:de:dc:e3:80:11:18:c0:5c:50:
3d:cd:06:82:a6:ad:a3:c0:00:d1:5f:ee:14:99:7d:
67:f2:45:4b:a0:d4:72:e7:d0:f4:d9:6f:13:4d:be:
a4:f0:46:56:b5:20:75:5e:36:38:96:3c:a4:2a:06:
b7:0b:39:fe:60:77:e7:b2:05:5e:3a:45:9a:8f:66:
c9:9e:ac:74:d5:6a:4d:17:d5:af:4b:78:80:ad:7b:
31:c4:f1:e9:f2:14:70:53:ca:6a:3f:ef:53:68:8f:
2b:bb:43:e5:67:40:c1:8d:24:e1:a5:f4:cc:15:c1:
b6:3a:fc:22:d2:77:99:1d:00:42:22:4c:3e:5f:ab:
b0:94:8f:0c:ac:71:4f:e0:4b:6c:94:d0:8f:a1:7d:
fb:b6:d7:3d:55:8d:bd:c1:e5:f1:24:1e:3c:c6:a0:
ee:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:11:37:FF:A9:57:4F:0B:40:41:15:83:A7:41:E7:EC:35:3D:DF:FA
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/53F35756B20011EDB4184FC1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:7f:8b:82:c1:a3:2c:2f:2f:16:33:16:ce:47:46:ad:41:e1:
88:f5:08:f4:b9:ab:11:6a:32:33:2e:6c:0f:d9:28:db:df:2b:
5e:63:fb:63:62:fe:ae:ef:c8:4e:8e:c5:c1:f4:33:a1:f7:6b:
68:57:d2:ef:15:68:fd:ac:0f:66:90:71:19:56:20:43:16:33:
14:26:84:e4:e0:99:3e:77:ef:e5:04:65:dd:d4:47:b6:1a:5a:
55:f4:9f:b3:98:74:3e:0d:99:da:e5:8e:65:bf:ac:e2:52:e3:
4a:68:57:ba:27:1e:8d:a9:8c:74:c8:dc:df:20:de:7e:8b:02:
b6:23:c5:e0:49:c5:65:52:55:19:c1:52:e9:9d:b5:4d:e4:2a:
d0:db:bd:71:04:7b:69:8f:d3:61:a5:17:ad:07:08:bb:1c:82:
b1:99:04:c5:66:7b:dc:dc:a7:a2:44:9f:11:67:61:30:fe:a7:
76:3c:d6:10:66:c0:a3:85:0c:b2:7b:06:61:2e:da:34:b7:51:
b3:eb:78:60:6d:0a:03:e3:bc:88:ed:1f:d0:3f:e0:7b:01:d8:
2b:f6:27:76:75:4c:c5:1b:0a:37:d4:a2:c0:1d:d4:59:3b:b8:
17:55:83:58:45:1f:83:d1:9c:4d:1a:ea:a4:4b:a3:08:ab:4e:
b6:f8:9a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 04:41:51 2024 by rpki-client on console-ams.rpki-client.org