Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C2F6A814558111ED8680A5DEF1222468.roa
File: C2F6A814558111ED8680A5DEF1222468.roa (raw, json)
Hash identifier: Jop7bDMEUp3gQILrvA0cy0hRw6fxtQc0K4NNqcQKCmI=
Subject key identifier: 57:16:0C:85:32:2C:E2:6C:F9:C1:3F:1B:52:38:15:F7:DB:34:35:D6
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 08B2
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C2F6A814558111ED8680A5DEF1222468.roa
Signing time: Wed 26 Oct 2022 22:58:53 +0000
ROA not before: Thu 27 Oct 2022 22:58:48 +0000
ROA not after: Fri 27 Oct 2023 22:58:48 +0000
asID: 49581
IP address blocks: 102.129.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2226 (0x8b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 27 22:58:48 2022 GMT
Not After : Oct 27 22:58:48 2023 GMT
Subject: CN=6359bbad-7141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:2d:d0:d2:a2:dc:38:31:1b:ab:95:d1:29:
e9:91:7a:36:a2:13:23:d6:83:e9:9f:27:c1:d7:17:
7c:a1:fb:b2:89:96:6b:f1:ef:1f:4d:34:0f:e1:d1:
5e:57:16:88:0a:e3:81:20:f8:ff:5f:e3:e8:b2:29:
46:38:9d:0c:b9:ba:90:e6:f7:4b:2b:34:31:e3:65:
94:af:9d:84:78:9b:5e:b4:be:38:e4:4f:c1:34:2c:
86:48:35:0f:45:78:5a:37:a8:c4:85:78:68:ee:d7:
8c:8e:b9:87:93:2b:49:f1:79:fb:eb:82:db:23:ef:
20:40:5c:5b:6c:8f:54:d3:85:9f:83:d9:9f:8f:fd:
b3:99:0f:99:e8:25:c4:40:76:27:ae:b2:27:69:1e:
5c:2a:49:c1:8c:b7:13:a1:35:78:44:4e:49:5c:af:
96:06:40:a8:bc:50:ff:88:c3:c2:c0:62:df:58:10:
b9:67:75:b0:21:c1:5c:a7:cf:12:44:62:fa:19:99:
b0:0f:af:b3:35:d9:98:c0:a2:4a:e9:0a:c5:c3:94:
fb:81:bc:98:de:f3:8e:21:47:fd:f3:97:33:d7:a9:
7b:f8:1e:c9:b0:d5:cf:c5:e6:af:03:b7:9a:68:4d:
8d:d9:1f:41:ec:bd:27:22:ae:81:46:e4:88:70:21:
f8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:16:0C:85:32:2C:E2:6C:F9:C1:3F:1B:52:38:15:F7:DB:34:35:D6
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C2F6A814558111ED8680A5DEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.140.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:7c:ef:fc:43:23:61:f1:96:18:f9:88:b8:e8:95:80:06:21:
c0:70:74:00:d3:f4:0d:07:05:75:de:95:65:a3:f6:b5:df:17:
cc:8f:56:90:a4:e9:94:10:c5:99:d0:94:a7:01:8e:bb:b8:a0:
45:7a:8a:6a:a5:d9:a3:af:2e:27:63:ea:54:b0:f4:5f:a0:ac:
e1:2e:c9:11:43:73:83:d8:4e:e4:30:a8:92:4b:c2:9c:0d:c5:
d1:97:fc:f7:a6:92:5a:98:17:3c:2d:af:57:1f:7a:8d:e3:74:
b5:d6:84:49:18:ca:e8:2c:99:8b:2f:78:b0:9c:77:f1:20:55:
4a:f2:b0:67:fa:28:ac:91:e7:68:1b:6c:05:d7:dd:3e:df:3d:
e3:ae:f3:91:63:78:5c:31:7f:c3:23:0b:76:1b:24:42:44:85:
4e:f7:ce:d1:24:19:f3:21:f1:6a:82:fa:c4:46:77:ad:f1:c3:
6b:0b:6e:60:d0:ce:7e:8a:98:7c:a7:f4:90:81:e4:40:c9:cb:
98:47:62:27:6b:03:db:a4:45:73:8a:28:35:6e:39:46:cb:6f:
44:4c:40:10:94:5c:24:7e:63:a4:66:8c:f9:2b:eb:f6:62:40:
74:c4:02:2f:20:cd:92:68:40:ca:47:43:ee:a4:f7:01:d3:a5:
6c:26:0a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org