Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/8B59E5583F6811ED8410548DF1222468.roa
File: 8B59E5583F6811ED8410548DF1222468.roa (raw, json)
Hash identifier: mQVd++pir+8azXT9F4eADo/aQG4emsqQUsT660+E/Sg=
Subject key identifier: 87:50:CB:D2:3C:4A:D3:22:87:21:6F:42:AA:45:FB:C2:30:2F:E9:05
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 01DC
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/8B59E5583F6811ED8410548DF1222468.roa
Signing time: Wed 28 Sep 2022 20:02:57 +0000
ROA not before: Wed 28 Sep 2022 20:02:51 +0000
ROA not after: Wed 28 Dec 2022 20:02:51 +0000
asID: 209854
IP address blocks: 196.44.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476 (0x1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: Sep 28 20:02:51 2022 GMT
Not After : Dec 28 20:02:51 2022 GMT
Subject: CN=6334a870-24d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a8:cb:ca:1a:06:2c:7d:e8:6c:76:58:a3:6f:
2f:9b:b3:db:fc:c4:1a:6e:f5:63:1c:4e:9a:31:0f:
57:da:4d:12:72:f9:7d:9b:4a:79:ba:ed:44:16:47:
e2:ee:fd:9a:60:3d:aa:22:2b:94:ce:c9:f9:42:ef:
16:2b:8b:65:45:a1:1a:8c:7f:92:1c:65:6d:72:3a:
1d:18:35:4c:17:8c:8a:ab:6b:8c:d5:21:2b:83:55:
21:51:68:5a:e8:df:f7:07:e7:52:33:7b:75:36:0e:
60:53:65:98:30:8b:bf:e2:0b:b5:5d:85:c4:c0:cd:
26:ce:77:51:0d:f5:ae:66:29:36:a7:e6:e9:bf:50:
54:c8:1a:b7:dc:70:ee:3b:ff:81:d2:c9:d5:fa:5b:
0d:75:e4:a8:53:fa:ae:59:51:5d:67:13:64:18:4d:
d2:78:32:3c:28:ef:37:a6:ba:5d:d7:d2:18:e7:9c:
c3:75:a8:dd:a0:50:a3:f3:e3:dd:33:fb:ae:75:c8:
12:24:eb:0a:91:28:0b:d8:bf:c3:db:ca:73:69:a3:
c6:3a:72:26:73:40:ce:a0:75:ea:18:09:d1:f9:86:
34:bc:57:c6:88:94:f5:ad:87:47:0e:82:f9:59:35:
3d:36:75:a0:49:1f:ac:c9:18:ec:57:51:1c:e5:bc:
6b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:50:CB:D2:3C:4A:D3:22:87:21:6F:42:AA:45:FB:C2:30:2F:E9:05
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/8B59E5583F6811ED8410548DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.118.0/24
Signature Algorithm: sha256WithRSAEncryption
57:21:7a:0e:34:b1:b6:b4:ec:2a:a7:c4:84:cb:03:5b:be:b6:
8f:e5:63:24:9f:d3:2a:d4:f0:08:6d:49:84:a7:49:99:dc:f4:
88:b0:a7:2d:06:6c:86:e1:16:e9:49:8a:5e:bc:dd:0a:65:35:
1c:0a:d0:60:a9:ae:95:64:62:30:63:28:ff:73:00:c2:ba:79:
c2:34:24:9b:d2:5b:4b:b4:00:f7:ed:be:4b:a8:e2:70:2d:4b:
77:1f:d3:8f:55:bb:0a:6c:60:68:e6:9b:8b:84:82:17:8c:1b:
f5:b8:5a:cc:16:57:93:c3:39:04:ec:18:89:32:1a:4e:58:9c:
ea:13:8d:33:2a:09:d8:ce:cf:62:76:53:9d:f0:a5:3e:38:1f:
7e:a7:e3:11:f6:97:be:d6:e8:c8:4b:01:4b:70:2a:bd:a4:b9:
48:aa:c4:03:ed:ae:2c:91:3e:05:24:08:7d:20:67:a6:f5:ee:
c3:5f:cf:eb:9b:46:17:64:0e:82:2d:a3:5b:c0:ce:05:6d:fc:
a6:46:94:ec:06:a8:4f:93:b4:3a:e4:65:76:c8:d0:d3:78:4f:
d0:a3:2d:47:59:a2:15:80:c2:9b:6b:37:29:f6:3e:e8:5c:e9:
14:64:70:a4:f6:ea:a9:c9:38:47:87:30:2c:fd:a1:8a:b3:15:
bc:69:6f:70
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RjA2MjhBRjExMC8GA1UEBRMoODYwNUQ3NTk5QTA0MDJGNzBFQzJGMjU4RDZDMTZC
RDJFNEU4RDFGRTAeFw0yMjA5MjgyMDAyNTFaFw0yMjEyMjgyMDAyNTFaMBgxFjAU
BgNVBAMMDTYzMzRhODcwLTI0ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUqMvKGgYsfehsdlijby+bs9v8xBpu9WMcTpoxD1faTRJy+X2bSnm67UQW
R+Lu/ZpgPaoiK5TOyflC7xYri2VFoRqMf5IcZW1yOh0YNUwXjIqra4zVISuDVSFR
aFro3/cH51Ize3U2DmBTZZgwi7/iC7VdhcTAzSbOd1EN9a5mKTan5um/UFTIGrfc
cO47/4HSydX6Ww115KhT+q5ZUV1nE2QYTdJ4Mjwo7zemul3X0hjnnMN1qN2gUKPz
490z+651yBIk6wqRKAvYv8PbynNpo8Y6ciZzQM6gdeoYCdH5hjS8V8aIlPWth0cO
gvlZNT02daBJH6zJGOxXURzlvGtrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUh1DL
0jxK0yKHIW9CqkX7wjAv6QUwHwYDVR0jBBgwFoAUhgXXWZoEAvcOwvJY1sFr0uTo
0f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4QTAxNENFL2hnWFhX
Wm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hnWFhXWm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4
QTAxNENFLzhCNTlFNTU4M0Y2ODExRUQ4NDEwNTQ4REYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADELHYwDQYJKoZIhvcNAQEL
BQADggEBAFcheg40sba07CqnxITLA1u+to/lYySf0yrU8AhtSYSnSZnc9Iiwpy0G
bIbhFulJil683QplNRwK0GCprpVkYjBjKP9zAMK6ecI0JJvSW0u0APftvkuo4nAt
S3cf049VuwpsYGjmm4uEgheMG/W4WswWV5PDOQTsGIkyGk5YnOoTjTMqCdjOz2J2
U53wpT44H36n4xH2l77W6MhLAUtwKr2kuUiqxAPtriyRPgUkCH0gZ6b17sNfz+ub
RhdkDoIto1vAzgVt/KZGlOwGqE+TtDrkZXbI0NN4T9CjLUdZohWAwptrNyn2Puhc
6RRkcKT26qnJOEeHMCz9oYqzFbxpb3A=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org