Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3649F7F/D87A6124FAEE11EB99E2AE31D8A014CE/D1628592FC7E11EB9470A726D8A014CE.roa
File: D1628592FC7E11EB9470A726D8A014CE.roa (raw, json)
Hash identifier: wAt8DBbEdDOjD3ZVkDQW78VNrSBR8RhuSFuqMEyg/5I=
Subject key identifier: 54:59:15:F6:78:AC:0B:E6:65:0D:56:63:46:8B:EF:46:9B:8D:DA:6D
Certificate issuer: /CN=F3649F7FAF/serialNumber=4CF56E1172D2D3D8612B445182461EEAAB1FE6D4
Certificate serial: 04
Authority key identifier: 4C:F5:6E:11:72:D2:D3:D8:61:2B:44:51:82:46:1E:EA:AB:1F:E6:D4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/TPVuEXLS09hhK0RRgkYe6qsf5tQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3649F7F/D87A6124FAEE11EB99E2AE31D8A014CE/D1628592FC7E11EB9470A726D8A014CE.roa
Signing time: Fri 13 Aug 2021 21:39:22 +0000
ROA not before: Fri 13 Aug 2021 21:39:18 +0000
ROA not after: Sat 13 Aug 2022 21:39:18 +0000
asID: 328457
IP address blocks: 102.69.240.0/24 maxlen: 24
102.69.241.0/24 maxlen: 24
102.69.242.0/24 maxlen: 24
102.69.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3649F7FAF/serialNumber=4CF56E1172D2D3D8612B445182461EEAAB1FE6D4
Validity
Not Before: Aug 13 21:39:18 2021 GMT
Not After : Aug 13 21:39:18 2022 GMT
Subject: CN=6116e68a-cf00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:df:51:ba:f5:09:bc:5d:68:d0:36:e7:21:d9:
72:cf:f4:06:56:3e:7a:25:c9:cc:dd:f6:e7:e7:15:
90:45:80:cd:21:e0:00:2b:26:41:16:55:6e:47:56:
d5:bf:ec:ba:7e:d8:a4:e9:31:1d:20:34:ab:19:31:
4e:64:31:85:85:e8:f8:6c:5c:19:b9:6d:2e:b0:dc:
79:34:31:1f:06:11:8c:d2:5e:61:e6:72:a8:78:26:
fe:98:4b:32:84:9d:d7:e1:d2:85:5f:20:81:c5:c8:
21:91:b0:35:d3:a7:33:78:54:36:12:47:2f:53:7f:
c6:55:14:5c:a6:cb:9b:19:3a:1a:0e:26:f7:f0:d8:
0f:31:36:f8:c1:17:6e:f0:26:2e:3f:b1:96:d9:2f:
5f:a1:ec:65:c6:33:f0:67:82:38:67:c9:1b:da:5f:
32:4f:e5:a1:a1:eb:95:10:1d:cb:8d:ec:07:36:06:
24:ce:cd:00:4d:f0:c9:86:59:74:d5:5b:73:b6:e9:
b9:a7:97:2d:e8:8c:26:64:f3:09:ad:53:3b:c2:b8:
c2:f8:9a:cd:ce:af:8d:ff:98:33:b5:7a:c9:7b:b6:
3f:a1:e0:eb:b8:b9:3a:0c:9f:cf:7a:ec:02:ff:7e:
55:fb:62:60:89:7c:26:72:0b:08:13:50:00:13:8e:
1c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:59:15:F6:78:AC:0B:E6:65:0D:56:63:46:8B:EF:46:9B:8D:DA:6D
X509v3 Authority Key Identifier:
keyid:4C:F5:6E:11:72:D2:D3:D8:61:2B:44:51:82:46:1E:EA:AB:1F:E6:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3649F7F/D87A6124FAEE11EB99E2AE31D8A014CE/TPVuEXLS09hhK0RRgkYe6qsf5tQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TPVuEXLS09hhK0RRgkYe6qsf5tQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3649F7F/D87A6124FAEE11EB99E2AE31D8A014CE/D1628592FC7E11EB9470A726D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.69.240.0/22
Signature Algorithm: sha256WithRSAEncryption
88:74:2b:fe:92:18:53:bc:b1:6d:2b:7f:7d:5d:2f:da:bc:9a:
58:ba:7e:79:41:6d:5a:bc:4d:06:18:97:7f:21:fe:e1:d5:a9:
9a:27:45:3d:ba:5b:78:f4:38:e2:9a:d5:c2:88:00:a9:f6:5b:
60:ac:7c:28:5d:bc:d2:67:67:a8:d5:0b:ff:2d:76:f4:be:fa:
7a:ce:a1:9d:65:ea:f3:09:dd:52:ff:85:f6:5e:30:51:7d:5e:
74:9a:3a:74:53:01:11:db:1d:c6:07:30:d0:b1:34:29:e6:46:
ae:79:aa:8b:a8:22:80:35:07:93:2d:8b:74:3c:57:01:a5:9a:
c5:fc:8f:a2:9d:93:91:00:a4:c5:47:bd:04:84:9e:ee:dd:4a:
a1:00:93:64:f5:4e:e4:3b:f7:e5:67:5d:60:04:04:37:a1:69:
68:3f:be:9a:8e:ee:29:67:df:5b:7e:0a:f2:f7:88:52:e9:c3:
c1:4d:93:0f:a7:9e:60:6d:4a:0a:77:1e:8f:9c:1a:a2:ce:03:
6f:b3:41:1f:89:52:b3:42:cf:d4:d9:d1:cd:cc:81:eb:00:0a:
dd:59:46:44:5e:37:ff:b1:9e:f8:55:74:85:cf:78:5f:7d:6e:
aa:ae:29:d6:45:d7:f5:23:58:6b:61:e8:29:38:e9:04:a2:f8:
13:38:fe:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-fra.rpki-client.org