Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/64389B22D85C11ECBB0E3F88F1222468.roa
File: 64389B22D85C11ECBB0E3F88F1222468.roa (raw, json)
Hash identifier: vQIhnBC1PDj7VddanClILwo8i2WcrXJE1iyERz/h9q4=
Subject key identifier: B3:9F:E9:01:28:89:4F:88:BA:90:B0:82:EC:A8:11:25:0D:0A:4E:EE
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0669
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/64389B22D85C11ECBB0E3F88F1222468.roa
Signing time: Fri 20 May 2022 16:46:27 +0000
ROA not before: Fri 20 May 2022 16:46:24 +0000
ROA not after: Sat 20 May 2023 16:46:24 +0000
asID: 135375
IP address blocks: 102.165.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1641 (0x669)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 20 16:46:24 2022 GMT
Not After : May 20 16:46:24 2023 GMT
Subject: CN=6287c5e3-58a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:04:ba:cf:73:b2:ca:99:28:a7:1a:c3:b2:b5:
aa:94:96:04:85:9a:a6:25:47:05:4a:7f:10:d6:4e:
8a:e3:97:f2:be:73:e0:00:36:8c:94:e3:55:e1:2d:
da:ee:59:47:9b:4a:ff:2f:46:74:6f:a4:4e:07:a0:
1c:b3:b8:26:dc:49:87:b0:4c:5a:3a:15:10:7f:89:
c9:db:e5:dc:fe:fe:8a:e5:0c:dd:29:12:2a:60:8b:
0e:95:49:5c:c9:ac:6b:1c:44:5c:b2:9a:4f:e1:1e:
e2:8c:65:2b:8a:14:a6:02:c9:85:d3:8d:e9:32:83:
b5:0f:e2:c4:7d:a8:2d:8a:1d:02:3f:9a:31:38:d7:
cc:75:fa:2e:f9:33:5a:d9:63:3d:35:94:c2:3c:0f:
30:f0:7e:3a:1a:90:b1:5f:2d:cb:4f:c3:03:ef:8a:
9b:72:55:78:41:67:39:5f:5d:73:6e:5d:7d:f2:7d:
21:e8:86:4c:8a:4d:23:f3:a1:b1:a5:80:5c:50:15:
64:16:96:c3:1e:9d:b1:6a:fe:ee:95:a5:48:41:0f:
c6:55:a1:ae:ae:1d:c1:1c:18:b9:cb:2d:2b:aa:66:
5d:54:10:79:d6:3d:4d:b1:18:c4:41:7f:8e:0b:ad:
8f:9b:9b:ed:ee:6f:11:7e:8b:eb:4a:b4:34:70:53:
25:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9F:E9:01:28:89:4F:88:BA:90:B0:82:EC:A8:11:25:0D:0A:4E:EE
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/64389B22D85C11ECBB0E3F88F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.58.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:2e:da:1e:a2:4b:a9:df:e6:2d:79:b3:c3:d6:79:77:b6:68:
9e:10:f6:e5:a0:4b:3a:31:64:31:96:d6:d7:2b:a8:3f:86:ab:
2e:9a:b1:5f:ca:15:80:50:c3:f1:f5:c7:34:91:fc:88:b6:83:
4e:74:0b:da:e7:03:f3:75:94:c5:75:0d:2a:cd:a5:05:64:c9:
9e:9c:94:4c:ce:55:c4:95:bc:a6:10:78:dc:1f:b1:d0:58:ac:
e2:4d:15:d1:04:ad:61:46:ba:e9:91:04:f8:f5:13:8f:5f:7a:
61:dd:16:f4:47:38:cd:9e:fe:12:34:26:4f:32:f1:cd:0e:a6:
df:5f:e5:52:1d:65:25:69:3c:93:2a:be:f8:81:97:2d:20:af:
8c:2e:c9:6a:2b:15:8c:07:52:62:ca:4e:72:4d:9f:fb:42:9f:
d7:98:9d:73:7f:be:29:48:e7:52:03:96:e0:4e:f5:36:00:2d:
9e:34:9c:37:63:62:cf:8e:b2:d6:f9:65:fc:91:8f:96:5a:2e:
29:4d:17:65:ac:7b:05:3e:62:cf:fb:86:99:5f:18:06:3a:ca:
5d:35:d2:27:12:d0:1b:88:3d:53:fe:fa:84:16:6d:01:dc:33:
0d:f8:92:ff:3d:f8:05:28:fd:0e:0d:98:6d:4a:e8:b4:68:3a:
25:3d:fd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org