Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/B961411AD21E11EC98787CE5F1222468.roa
File: B961411AD21E11EC98787CE5F1222468.roa (raw, json)
Hash identifier: Dd+pxjh9Z5Eac91Oou2QsiTIRrYSZIIriz5pbZc3VIs=
Subject key identifier: 82:A2:62:31:31:BF:14:58:B3:3B:C8:50:31:D2:7F:47:05:AC:FC:74
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 0141
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/B961411AD21E11EC98787CE5F1222468.roa
Signing time: Thu 12 May 2022 18:09:54 +0000
ROA not before: Thu 12 May 2022 18:09:51 +0000
ROA not after: Fri 12 Aug 2022 18:09:51 +0000
asID: 1239
IP address blocks: 196.44.120.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: May 12 18:09:51 2022 GMT
Not After : Aug 12 18:09:51 2022 GMT
Subject: CN=627d4d72-3148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2d:57:c4:03:3a:b8:e7:35:5f:4f:a6:30:86:
19:30:70:af:b6:59:df:01:54:c8:8f:c2:3d:fe:cf:
b3:d2:29:83:66:c1:f0:ac:e0:72:0d:a2:3a:16:90:
8f:88:71:3d:93:bc:70:ef:81:f7:29:eb:d2:1e:5d:
dd:37:88:fa:04:05:ba:ff:1c:bc:c7:49:9d:20:e0:
bd:05:a5:3d:20:9a:f8:c1:32:d6:64:05:5d:38:32:
31:da:5e:d1:3d:92:b9:dd:74:1b:cd:87:b1:74:91:
f6:f2:1a:39:44:44:66:89:2e:5a:f6:a0:f8:76:e9:
21:bf:8b:96:27:f5:fa:48:1f:c5:e5:81:de:6a:b4:
35:7b:07:66:08:54:65:12:74:78:39:db:fa:b7:6f:
53:31:8e:c6:ac:e0:1d:f7:13:12:57:8f:07:a6:44:
d0:fa:ac:22:23:76:59:76:f9:86:5f:91:3d:72:da:
b0:b5:12:10:87:8f:ba:80:c9:32:2a:58:fa:64:4b:
77:3c:3a:23:55:fa:75:fc:cf:16:9a:1e:6d:db:c2:
eb:3f:10:db:a8:84:c9:5a:4d:a0:7e:39:b8:23:13:
eb:26:4d:b2:e4:0b:a4:cc:28:8c:97:a2:ac:18:cd:
2f:51:b9:cc:ca:16:7b:5a:15:d0:9e:a0:7a:ab:b0:
58:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A2:62:31:31:BF:14:58:B3:3B:C8:50:31:D2:7F:47:05:AC:FC:74
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/B961411AD21E11EC98787CE5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.120.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:70:02:56:20:91:bc:f4:7c:ef:3b:b5:96:14:c0:ef:4e:61:
7b:73:ac:b0:0c:2c:85:38:b0:b4:e1:f9:a8:3e:77:91:a6:ec:
e2:72:31:36:0b:13:1b:84:c5:a3:3c:94:fd:ed:57:54:93:0b:
70:2b:7f:ad:7e:ce:66:b4:cc:a1:18:83:44:f4:59:c3:24:5b:
c9:99:8e:90:97:e5:f2:ab:7b:3f:e5:fb:7c:2a:fd:6c:a3:e5:
27:fe:2e:99:84:7b:17:5b:8b:70:56:32:72:91:5c:fa:d2:ac:
64:42:cd:c0:fb:95:ad:49:52:db:04:cf:f7:8d:bf:3d:d3:7d:
79:a7:14:f8:38:cc:dd:ad:a6:e3:32:e7:40:66:98:8e:77:58:
37:77:37:28:37:78:26:d4:ee:73:f4:02:a3:9c:36:17:5f:50:
59:a1:e8:eb:b7:cf:20:1f:62:0e:ff:3b:31:d4:a6:d6:47:9d:
60:bf:0a:94:a1:86:b4:65:f2:f7:e8:ae:fb:6d:a0:6f:94:13:
83:de:37:49:7a:b2:f8:e1:43:75:73:08:52:79:1d:fd:6b:19:
38:fa:0a:fb:28:87:23:27:c5:b7:e3:d2:f4:20:03:48:ae:6c:
2e:70:8a:29:e1:b1:69:2e:0b:d3:28:bf:fa:a4:ea:00:5a:53:
6e:ec:e1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org