Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/473581FA92B711EDAB24F57EF1222468.roa
File: 473581FA92B711EDAB24F57EF1222468.roa (raw, json)
Hash identifier: bRHD9jKFUj4EQL2lSP4t8y8ZVyFjjSKDF8sxZNv6FLE=
Subject key identifier: 2C:0F:D2:D3:FD:18:61:A9:73:7C:69:88:B2:FE:C4:0B:70:65:44:3C
Certificate issuer: /CN=F36D96A0AF/serialNumber=2C4973B93083A484AC2D4658278502C788D064F5
Certificate serial: 83
Authority key identifier: 2C:49:73:B9:30:83:A4:84:AC:2D:46:58:27:85:02:C7:88:D0:64:F5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LElzuTCDpISsLUZYJ4UCx4jQZPU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/473581FA92B711EDAB24F57EF1222468.roa
Signing time: Thu 12 Jan 2023 20:25:39 +0000
ROA not before: Thu 12 Jan 2023 20:25:35 +0000
ROA not after: Fri 12 Jan 2024 20:25:35 +0000
asID: 329126
IP address blocks: 102.214.116.0/22 maxlen: 24
2c0f:7280::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D96A0AF/serialNumber=2C4973B93083A484AC2D4658278502C788D064F5
Validity
Not Before: Jan 12 20:25:35 2023 GMT
Not After : Jan 12 20:25:35 2024 GMT
Subject: CN=63c06cc3-5304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:97:54:c3:a3:5a:91:b8:fa:c7:5c:db:0f:23:
7a:32:f9:c6:96:9f:db:33:ce:e6:eb:23:4a:ed:5e:
be:c6:fc:4f:91:e9:98:eb:87:f8:bc:94:83:de:08:
15:56:6d:90:37:53:30:97:04:7d:45:7f:4e:ce:3b:
51:f8:b8:56:dc:ee:19:ff:04:56:03:90:8d:12:68:
16:d5:a3:7e:b5:0f:64:53:49:49:88:29:7c:1a:d1:
34:9a:a9:45:67:35:99:57:3d:3c:4c:cb:8b:0b:c2:
f5:52:69:a5:c3:9e:2f:20:c3:44:92:0c:9b:b2:ca:
fd:2c:86:dc:ea:d1:29:41:f7:bd:41:7e:c6:8e:6a:
33:be:e0:29:17:3d:72:89:26:7f:34:5b:40:52:b7:
b2:9c:01:13:3a:59:15:4b:8f:c3:c4:5f:43:60:2f:
bd:fa:83:61:bd:10:5a:a5:77:84:59:6a:30:25:36:
82:d4:f4:cf:c0:bb:a1:e5:ab:a7:72:c1:cd:89:35:
b5:54:8f:90:49:41:d9:85:52:a6:07:4e:0e:c3:75:
4e:05:b7:18:31:64:f1:ed:05:bd:69:e3:f4:87:b2:
1a:7c:aa:98:2c:6c:a8:21:47:33:41:cb:22:6a:be:
8b:1a:38:b3:ef:e8:9f:50:6c:27:fe:79:f6:e6:b5:
e6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0F:D2:D3:FD:18:61:A9:73:7C:69:88:B2:FE:C4:0B:70:65:44:3C
X509v3 Authority Key Identifier:
keyid:2C:49:73:B9:30:83:A4:84:AC:2D:46:58:27:85:02:C7:88:D0:64:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LElzuTCDpISsLUZYJ4UCx4jQZPU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/473581FA92B711EDAB24F57EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.116.0/22
IPv6:
2c0f:7280::/32
Signature Algorithm: sha256WithRSAEncryption
a4:8c:8f:79:cf:fb:60:02:13:9e:bb:1f:d3:0b:32:d5:83:fa:
1b:13:05:44:ef:43:be:95:2a:32:2f:9b:ff:d8:58:14:27:7b:
44:0a:cf:77:97:74:00:98:48:ef:7d:d9:8a:0d:61:ab:c1:51:
0f:11:38:6f:ec:b3:58:1a:59:68:c8:f9:b2:31:af:42:df:6f:
46:99:4b:d9:51:60:d9:9e:53:93:ce:a3:f9:5e:90:5b:ac:fc:
06:3a:ec:dc:48:43:47:88:2b:8b:01:ae:ac:7c:ee:bb:e9:a2:
74:07:b4:e4:ff:7f:ce:1a:2e:2f:fd:5d:86:b3:12:43:01:86:
61:a9:ff:44:0f:27:20:03:a0:8e:f7:40:6c:b4:df:1a:d9:c1:
c4:50:6b:ab:cc:f0:52:c8:e8:38:4b:49:2b:28:69:d1:77:ec:
42:11:c6:d0:a8:01:6e:d8:0e:6a:81:ad:02:da:46:05:7f:ad:
48:fc:a7:74:fd:af:da:3d:cd:a8:e6:aa:8d:59:66:15:77:85:
c0:01:c7:02:40:88:4f:7c:e3:4d:11:89:bd:f1:94:6a:a4:3b:
98:21:9d:31:c1:20:10:fe:e9:65:0f:2a:a1:e4:cc:ad:f0:24:
2e:0c:bd:32:1b:ef:10:22:05:8c:45:21:de:62:74:9e:0c:79:
e8:75:9e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 13 03:19:26 2024 by rpki-client on console-ams.rpki-client.org