Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/3001FD30711F11EBA1D5C521F8AEA228.roa
File: 3001FD30711F11EBA1D5C521F8AEA228.roa (raw, json)
Hash identifier: DKPL/cqjm6y3rUdCHyX2daW5tFgYytcGgaDJcv/ROa8=
Subject key identifier: 2C:F6:95:EC:B0:15:7D:E9:12:FD:E4:D4:7D:86:80:54:9A:C3:11:8B
Certificate issuer: /CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
Certificate serial: 04
Authority key identifier: 38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/3001FD30711F11EBA1D5C521F8AEA228.roa
Signing time: Wed 17 Feb 2021 12:53:53 +0000
ROA not before: Wed 17 Feb 2021 12:53:46 +0000
ROA not after: Thu 17 Feb 2022 12:53:46 +0000
asID: 328010
IP address blocks: 196.49.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
Validity
Not Before: Feb 17 12:53:46 2021 GMT
Not After : Feb 17 12:53:46 2022 GMT
Subject: CN=602d11e1-fea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ae:f3:02:8c:d5:c2:35:3f:9c:4f:a3:3c:d2:
4e:f7:1b:57:32:a2:9b:55:7f:ac:c8:ac:12:e1:57:
da:2d:6c:09:43:e6:b1:93:cb:76:08:57:5a:ee:da:
27:a8:13:25:33:0a:8b:69:02:b6:eb:11:56:84:5b:
ac:e3:94:45:aa:c0:6c:2a:46:9c:1a:03:7d:8d:8b:
e1:91:6c:ac:99:45:d0:e6:f7:7b:32:a0:df:bc:a5:
d1:c4:55:b6:40:9c:c2:65:68:d9:6a:9b:f1:53:6b:
9a:e3:6e:62:86:84:eb:45:38:c8:9e:4d:b2:a7:b1:
6f:2d:ff:2e:96:aa:c1:0d:8f:e2:e4:74:ed:6b:53:
fc:b1:d2:76:5c:c6:e7:46:a3:17:2a:b6:fb:7a:f6:
ff:8c:03:c8:54:a6:d4:20:75:f3:b8:68:09:c0:49:
ab:4b:d4:0d:d1:20:c4:e5:d9:4d:0b:72:7d:42:38:
b5:e5:ae:9b:67:6a:25:00:1f:a5:e6:db:f8:43:f4:
68:d7:c1:3a:ce:cf:a3:45:b4:f6:c7:45:85:e5:e9:
fe:a6:eb:76:16:5f:df:83:94:84:e3:43:ff:18:9f:
0a:ca:b7:d1:d1:0a:39:0d:0e:57:1b:ca:9c:a4:70:
f2:2f:40:b2:d4:71:fe:b2:8b:9a:63:f4:2d:90:f5:
88:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F6:95:EC:B0:15:7D:E9:12:FD:E4:D4:7D:86:80:54:9A:C3:11:8B
X509v3 Authority Key Identifier:
keyid:38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/3001FD30711F11EBA1D5C521F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.49.74.0/24
Signature Algorithm: sha256WithRSAEncryption
51:be:19:e9:43:0e:98:f9:e3:50:8a:68:6c:88:0a:5f:90:10:
88:5a:c7:37:c1:0e:1d:64:6d:87:50:ba:75:97:7a:fc:4b:3f:
6f:f3:dd:7d:4f:c8:f5:44:d5:ab:f2:ae:b5:fa:f4:2a:f1:bb:
c1:8f:06:90:73:da:7a:91:2b:8d:5e:8e:8c:37:ff:0d:71:05:
4c:eb:d9:a1:30:9f:7b:3e:25:9e:e3:7c:3c:ae:04:3e:f3:9e:
0b:6a:d8:51:c0:b9:22:71:2f:90:eb:b3:db:2e:26:02:7b:91:
dd:8d:15:76:ca:b4:17:45:cc:26:d0:84:3d:40:08:c3:3f:a4:
ee:33:3e:a7:5d:86:35:22:d6:5d:95:d0:f9:bd:a8:d7:f3:ba:
2d:29:5b:2b:91:d6:b0:3a:64:a3:f8:43:d7:2c:86:2e:fa:3d:
64:ab:a0:a6:b6:ab:3d:6a:4b:25:ac:c6:46:5e:74:c5:59:cf:
37:97:13:e5:40:50:17:f4:48:c3:d3:3f:ed:67:e4:26:d1:b2:
d2:cf:a3:21:a2:73:2f:67:b0:76:23:ab:dc:e2:59:8a:20:e5:
94:7e:ed:1e:be:6c:2c:92:11:30:55:e8:ee:e6:c6:80:bf:88:
a3:bc:4c:19:aa:87:d5:12:72:e6:83:2b:df:b6:97:a8:9b:89:
23:cf:e3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:07 2023 by rpki-client on console.sobornost.net