Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/133A03F8B1DD11E985BF1A4AF8AEA228.roa
File: 133A03F8B1DD11E985BF1A4AF8AEA228.roa (raw, json)
Hash identifier: oKJK+jyuojsEBm8pdKFwzsmeofr5TCJ09/sgDNexeRw=
Subject key identifier: 33:14:9F:8E:21:A4:5E:94:AD:D7:8F:16:C3:20:96:E1:52:97:FE:E4
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 76
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/133A03F8B1DD11E985BF1A4AF8AEA228.roa
Signing time: Mon 29 Jul 2019 08:44:29 +0000
ROA not before: Mon 29 Jul 2019 08:44:23 +0000
ROA not after: Wed 27 Jul 2022 08:44:23 +0000
asID: 36916
IP address blocks: 41.221.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 29 08:44:23 2019 GMT
Not After : Jul 27 08:44:23 2022 GMT
Subject: CN=5d3eb1ec-6a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:35:98:f3:3f:4a:07:bb:de:fe:91:c3:de:44:
e8:d2:e2:3d:66:0e:c0:f1:ab:7d:7f:b5:c7:1e:47:
6e:20:22:14:e7:d8:da:87:d7:37:e5:12:07:7a:4a:
e9:ed:47:db:14:53:2a:30:9f:8c:14:c7:bc:e2:e7:
64:b6:16:d6:fb:88:17:59:5e:82:15:5f:0d:1a:bd:
f7:71:f7:6f:08:ad:fc:b1:77:2f:19:33:d4:b4:99:
0d:c2:31:83:33:10:95:82:be:78:a2:e1:bf:43:d0:
07:56:cb:a8:1b:ea:80:14:72:6d:0b:2a:07:2d:d4:
db:3c:19:59:9a:da:d5:09:31:8c:15:7a:77:6c:af:
80:e3:97:a6:35:a9:a7:06:58:e1:cc:c0:4c:3d:4e:
db:df:49:ec:f3:50:a0:55:e8:be:a2:c6:67:c8:25:
7a:82:ec:b1:9f:e9:52:59:46:67:29:85:0b:4e:ac:
89:e5:46:7e:83:f8:9b:54:ae:f9:0d:48:9e:e6:e8:
66:03:23:7f:e7:33:0a:fa:ce:d5:96:f9:c5:b4:51:
f2:a0:e1:e6:a8:0c:2e:44:5b:62:f8:8f:90:34:88:
55:b4:20:e4:03:83:7f:45:06:d9:fb:c3:c2:01:f2:
8e:36:22:46:5b:e7:02:93:c1:f1:d6:3a:8d:38:d7:
a2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:14:9F:8E:21:A4:5E:94:AD:D7:8F:16:C3:20:96:E1:52:97:FE:E4
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/133A03F8B1DD11E985BF1A4AF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.221.232.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:1b:d7:45:54:b0:89:98:a8:fa:f0:92:3f:5e:2f:2b:a9:71:
9b:7a:ca:d2:e1:33:d9:b2:38:20:ba:b0:f7:26:88:56:ed:2f:
7b:ce:b7:bd:90:70:63:05:b4:f9:05:d8:9f:20:bc:79:b4:b4:
d4:77:97:d9:51:cb:d6:bd:dc:10:76:7c:ae:4e:9c:1e:d8:4f:
1c:6e:35:ab:a4:89:94:3c:3f:da:b3:f1:0d:16:28:8c:9c:ce:
d6:79:74:51:2e:64:90:bc:fc:22:75:c7:f3:2f:56:43:3c:c3:
69:1d:a6:e5:7e:58:23:f3:4d:58:b3:98:a9:a7:5c:0c:51:ce:
ac:f0:89:80:4d:5e:79:67:b6:e1:46:0c:e1:23:ba:6a:e8:3e:
f4:6f:85:54:0f:9b:54:a3:2f:87:b0:0b:97:cd:9e:6c:f6:d4:
78:1a:e2:37:3e:b0:9c:e6:11:aa:97:ec:d9:ef:8b:20:0a:cd:
09:ad:38:51:82:cf:af:a8:b0:3a:6e:9f:0b:9f:dc:f1:4b:eb:
42:31:bd:e1:03:66:cc:43:4e:7b:f0:9a:47:40:57:c6:fe:5e:
86:e3:05:31:77:5e:9b:96:81:e9:49:57:8b:fc:e5:c8:d1:64:
07:bf:17:1e:66:ce:07:34:b5:68:b1:59:cd:dd:37:2f:de:d2:
fd:5a:24:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org