Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D4400C00290811ED988A2999F1222468.roa
File: D4400C00290811ED988A2999F1222468.roa (raw, json)
Hash identifier: GLvpm3G0wK9C/Hsp61Vs0/k50vtSxIgexrQRrqEftJ0=
Subject key identifier: 3E:05:5A:BE:5F:90:5E:59:39:4E:1D:48:D2:BF:77:92:F2:7F:F2:50
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 07BC
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D4400C00290811ED988A2999F1222468.roa
Signing time: Wed 31 Aug 2022 08:42:22 +0000
ROA not before: Wed 31 Aug 2022 08:42:16 +0000
ROA not after: Thu 31 Aug 2023 08:42:16 +0000
asID: 209854
IP address blocks: 102.165.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1980 (0x7bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 31 08:42:16 2022 GMT
Not After : Aug 31 08:42:16 2023 GMT
Subject: CN=630f1eed-c8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:68:94:96:40:9d:af:ab:59:50:27:32:17:79:
4f:f8:6d:c6:0a:4a:8f:c8:88:93:a6:39:b1:d7:6b:
3a:11:74:91:19:09:3f:16:78:b0:30:ec:5d:42:53:
ac:df:89:d0:00:6b:1b:20:66:f3:40:7b:e3:64:28:
1b:20:dd:fb:32:05:ef:16:30:18:7f:45:7a:2d:e2:
da:e7:af:66:73:f1:52:9a:33:ba:4e:1a:e4:9b:54:
84:30:a6:8d:0b:6b:90:79:2c:36:75:16:61:65:5b:
cb:4c:71:d7:47:86:7c:03:c7:7a:00:ac:5b:c5:60:
23:73:c3:a9:f5:be:c9:3d:e6:8a:60:a4:05:05:69:
1c:d1:57:2b:b4:3d:d0:05:c4:3a:10:0e:d9:61:77:
25:85:7c:ee:c4:e8:59:d8:82:b2:6d:76:46:84:06:
50:ca:84:72:30:ed:74:ec:d4:ca:1a:c1:be:0a:e5:
d6:c8:da:bf:4b:be:17:58:7c:7b:63:4b:31:e6:20:
ab:da:87:77:78:5a:66:97:0d:88:10:e7:59:e6:d7:
1f:1a:78:49:3b:fa:93:ec:a0:c8:0e:94:83:d2:04:
65:85:d7:c3:12:31:d3:6e:6b:9f:1c:ce:33:da:91:
5b:7c:b7:65:6f:a1:cc:da:1c:14:8d:8b:36:07:3b:
00:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:05:5A:BE:5F:90:5E:59:39:4E:1D:48:D2:BF:77:92:F2:7F:F2:50
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D4400C00290811ED988A2999F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.39.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:59:5e:65:c4:e5:97:8d:08:45:d9:b7:7a:fb:b6:94:3c:78:
55:61:2b:24:99:1e:3a:cd:b5:3d:b3:27:b8:93:06:14:55:17:
4f:6e:d9:78:48:25:29:14:87:73:c4:30:19:07:8f:02:35:6c:
81:cf:55:65:8c:51:80:1f:12:72:71:77:14:a2:7c:9f:5b:eb:
8d:db:49:c0:ec:c5:82:d5:a8:d5:3c:ed:2e:d2:cf:0f:14:dc:
42:e4:ce:1a:1d:71:e5:20:ce:1c:4d:e5:69:f8:4d:d3:71:b2:
f6:55:02:e7:e1:88:44:16:a9:9e:a6:e7:27:ce:3b:6a:01:fa:
8a:03:b1:44:50:dc:29:d2:25:a8:ee:03:e1:84:7b:c3:78:5d:
b0:b4:ca:cd:f3:b1:e9:f0:93:18:da:6e:4e:05:1b:1a:a4:ec:
e6:d4:4f:a1:18:d0:2a:1d:7e:93:3e:60:a0:ea:06:48:28:a7:
fd:82:5f:e1:5d:57:01:2e:6a:31:19:e1:d9:aa:e0:6c:82:72:
b4:6b:1f:95:37:86:a5:99:31:65:42:b1:cb:4d:da:ca:94:a9:
b1:9d:b8:41:68:0e:4e:4a:df:f0:01:6d:ad:62:77:20:42:a0:
bf:4a:ff:0f:c0:cd:b8:7f:aa:8c:af:fc:05:89:82:9f:7c:ab:
9a:c5:4c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org