Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/83CEE2EE87BA11EDAC1410A3F1222468.roa
File: 83CEE2EE87BA11EDAC1410A3F1222468.roa (raw, json)
Hash identifier: pNL6J6jlSvQW4UdBkTFIwhHzN9L0j5wTiP1tzI2/uyU=
Subject key identifier: 73:F7:2F:EE:B3:24:53:1B:25:73:EC:1C:7A:D2:F7:88:A4:25:7D:EA
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 0240
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/83CEE2EE87BA11EDAC1410A3F1222468.roa
Signing time: Thu 29 Dec 2022 20:51:06 +0000
ROA not before: Thu 29 Dec 2022 20:51:01 +0000
ROA not after: Fri 29 Dec 2023 20:51:01 +0000
asID: 209854
IP address blocks: 196.44.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576 (0x240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: Dec 29 20:51:01 2022 GMT
Not After : Dec 29 20:51:01 2023 GMT
Subject: CN=63adfdba-a3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c5:40:3f:72:cb:8f:9b:21:a9:9a:80:2b:3c:
e7:6d:3e:ca:1f:17:60:26:c1:0e:67:f7:f9:36:74:
9b:5e:2a:a0:f5:0d:3d:3f:4e:2f:ce:fe:03:ae:b5:
38:52:5a:cc:9e:75:96:5f:fb:87:7f:4a:9e:6e:fd:
cf:59:ea:e5:c4:16:d4:56:ee:d5:95:f5:ab:8e:35:
7e:5d:a4:35:7b:4d:13:40:4b:71:2c:34:1a:c8:49:
99:92:05:84:46:ae:f9:62:2b:66:02:11:30:5e:99:
15:f3:f2:ff:b1:99:0c:30:52:fe:95:5a:6a:6e:d1:
3c:3b:ad:2a:e9:5e:e8:ab:52:a3:6a:90:46:e0:f3:
fa:a2:ad:61:4a:8c:41:64:99:56:20:d4:0b:0b:39:
10:af:36:f4:59:ac:ed:5a:a1:31:06:c9:b0:1e:14:
d1:ce:6e:82:2b:00:42:3e:c3:d5:e9:bc:99:0f:54:
dc:28:57:b1:b1:d2:83:61:83:25:36:f8:49:42:ca:
a5:e9:d3:43:f4:ff:60:57:87:6f:6e:a5:ad:34:66:
26:c3:20:87:d9:d2:a4:4b:32:d8:06:62:27:8b:d7:
e0:4b:02:6e:70:45:9c:8e:0e:37:3c:55:69:c3:32:
ac:96:ab:fb:d9:d6:35:ab:42:da:0a:62:79:25:72:
2c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F7:2F:EE:B3:24:53:1B:25:73:EC:1C:7A:D2:F7:88:A4:25:7D:EA
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/83CEE2EE87BA11EDAC1410A3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.118.0/24
Signature Algorithm: sha256WithRSAEncryption
68:27:c8:03:f6:14:f9:02:2e:69:b8:cc:72:fe:d4:34:66:18:
bd:16:5b:c8:f5:85:57:35:bb:24:56:46:7d:94:f8:79:8a:e8:
7f:ec:fb:00:e2:2a:08:3b:b0:b2:9e:7c:17:89:73:b1:c9:4a:
b6:6c:fe:07:9f:e6:69:58:a8:ea:48:f5:b1:1f:b9:d8:28:21:
b6:7c:20:0f:f4:31:1d:10:0c:4e:b1:a5:01:0c:11:0a:9c:31:
ac:36:0f:53:9d:4e:6f:0c:75:b5:3f:38:32:38:d9:64:66:f9:
23:46:f2:4a:b0:2d:3d:41:5b:56:ad:e0:f7:31:2e:69:e5:d8:
36:e6:ab:96:a4:fe:18:cd:de:87:01:53:a8:28:3b:30:5b:1d:
4c:8b:c7:53:b1:b8:1f:22:3f:95:99:b9:5c:60:06:0b:97:14:
83:1a:e2:d2:53:62:88:77:69:a0:42:5b:96:23:2c:db:08:f7:
44:2f:c1:34:b3:32:bb:7d:db:0d:b1:41:f5:41:c3:b8:77:05:
b3:5e:74:b9:12:db:67:c6:17:9b:6a:eb:e7:4e:8a:a1:c0:de:
79:7c:19:61:4a:19:33:23:7b:63:2d:23:58:ca:81:9a:5d:c8:
74:e2:62:94:e2:f5:f3:a1:41:d1:45:c0:f5:cb:de:e4:c8:07:
b8:39:93:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org