Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/7B84270E188211EDB933FD91F1222468.roa
File: 7B84270E188211EDB933FD91F1222468.roa (raw, json)
Hash identifier: TGRqo3cmhpGOVYRjin44FwBHo3QISoPJvDra+JbgoCQ=
Subject key identifier: B2:36:67:8C:BE:88:63:63:56:96:4D:01:B4:38:51:55:98:33:2B:EA
Certificate issuer: /CN=F36F854AAF/serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
Certificate serial: 34
Authority key identifier: 36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/7B84270E188211EDB933FD91F1222468.roa
Signing time: Wed 10 Aug 2022 08:00:21 +0000
ROA not before: Wed 10 Aug 2022 08:00:18 +0000
ROA not after: Wed 09 Aug 2023 08:00:18 +0000
asID: 37028
IP address blocks: 41.183.0.0/16 maxlen: 24
196.10.112.0/22 maxlen: 24
196.10.116.0/23 maxlen: 24
196.11.125.0/24 maxlen: 24
196.11.126.0/23 maxlen: 24
196.11.128.0/22 maxlen: 24
196.11.132.0/23 maxlen: 24
196.11.134.0/24 maxlen: 24
2c0f:fdf8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F854AAF/serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
Validity
Not Before: Aug 10 08:00:18 2022 GMT
Not After : Aug 9 08:00:18 2023 GMT
Subject: CN=62f36595-2cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:7c:71:bd:99:47:4a:16:0b:d8:4c:b4:9b:
e2:1c:97:93:90:d5:c1:dd:00:5e:82:92:fd:31:6a:
c9:f8:d1:88:10:4d:72:ea:5e:ac:82:7c:4e:6f:1b:
47:08:aa:4d:62:74:39:54:ee:a1:b8:d7:b1:09:fb:
7e:69:02:4e:0f:c5:c5:16:49:a8:50:db:70:0f:9c:
7d:bf:2a:0b:c9:a9:55:86:5e:1b:e4:28:28:fd:73:
08:88:31:31:43:8e:da:3b:8e:03:44:57:b7:62:03:
a9:fb:ed:3f:70:c3:03:48:5a:58:0e:3d:df:24:30:
1f:c8:dd:15:cf:15:a6:44:40:4d:df:58:47:d6:a4:
01:41:b2:0f:fa:07:a7:70:df:59:9d:b1:41:6a:b4:
83:c9:57:1d:1b:e6:19:a0:f5:d7:74:0a:38:b9:a2:
fe:f8:ea:23:c6:13:71:c9:95:f6:2b:53:69:b9:99:
18:06:27:00:e4:08:bf:04:9c:ff:69:82:1d:18:ee:
14:05:72:29:79:e2:f1:08:7d:93:ef:f9:5a:ca:cc:
2b:68:47:81:ad:23:c8:70:96:a6:61:74:27:24:57:
38:3f:fa:83:e4:fa:e4:9b:d4:01:fa:3c:aa:61:63:
fa:cb:05:b9:72:70:f5:c9:ea:56:42:d9:05:6d:5a:
82:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:36:67:8C:BE:88:63:63:56:96:4D:01:B4:38:51:55:98:33:2B:EA
X509v3 Authority Key Identifier:
keyid:36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/7B84270E188211EDB933FD91F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.183.0.0/16
196.10.112.0-196.10.117.255
196.11.125.0-196.11.134.255
IPv6:
2c0f:fdf8::/32
Signature Algorithm: sha256WithRSAEncryption
d8:7f:d1:78:f7:fa:5d:f6:1d:44:a2:83:cb:2a:1e:03:9a:a1:
15:dc:71:64:8f:3c:27:f8:58:f0:d9:4d:f3:6f:c4:17:c3:d3:
bb:dc:0c:8f:46:f6:b2:46:b9:a1:fe:95:d7:b5:a7:da:92:b0:
74:a0:29:8d:e3:79:a6:13:a5:03:88:cd:68:cc:04:51:5a:c8:
a4:7c:17:d2:59:1f:57:86:71:fa:a3:d1:38:9a:35:af:3a:f7:
50:1d:f6:69:d4:43:e9:b7:b8:09:9f:b5:56:c2:5f:85:d4:f2:
8f:0f:a1:99:ab:7b:15:35:d1:31:9a:7a:cb:2d:82:60:dd:c8:
c7:b4:a9:c0:be:60:20:18:81:ab:e1:c7:18:80:32:c9:3e:39:
ae:09:74:f3:ea:a9:ce:33:72:1c:78:f3:3d:51:51:51:30:b4:
c3:80:48:99:86:74:df:9f:84:64:a1:82:e2:19:7c:8a:8b:89:
ad:dd:32:10:98:bd:1d:22:82:01:5d:f8:1c:d3:6f:a3:fe:e0:
6e:0a:a9:46:23:65:cd:31:2f:cd:3c:32:d6:ab:bf:11:f3:15:
20:52:59:ac:bd:c5:ad:0e:80:20:18:24:ab:8a:6a:07:96:54:
12:ff:de:bf:3d:8e:8e:50:b8:cd:fb:a1:27:5a:e2:85:23:35:
82:dc:d6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 02:08:32 2023 by rpki-client on console-ams.rpki-client.org