Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3C14092EB1DB11E9B2497548F8AEA228.roa
File: 3C14092EB1DB11E9B2497548F8AEA228.roa (raw, json)
Hash identifier: BccMATAqc0i9MCXpcwPwrzNpqfl5KJCtadUhpyuO6gI=
Subject key identifier: BA:B1:63:76:92:33:F1:62:44:5A:31:AC:68:4E:15:09:17:38:E5:02
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 62
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3C14092EB1DB11E9B2497548F8AEA228.roa
Signing time: Mon 29 Jul 2019 08:31:18 +0000
ROA not before: Mon 29 Jul 2019 08:31:12 +0000
ROA not after: Wed 27 Jul 2022 08:31:12 +0000
asID: 36916
IP address blocks: 41.180.76.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 29 08:31:12 2019 GMT
Not After : Jul 27 08:31:12 2022 GMT
Subject: CN=5d3eaed6-2192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:02:33:db:9f:12:36:1b:7c:28:e2:5b:12:59:
46:d8:f8:ec:d4:2e:4d:45:c5:7b:9f:e0:6f:81:3a:
95:fe:e2:ab:d1:84:77:56:6c:21:8c:7c:45:6a:a0:
9c:2d:5b:ae:4d:6a:5c:8b:8c:30:f0:8e:95:9b:4b:
08:96:17:3f:81:06:ee:65:6f:7e:7c:81:d4:14:42:
c2:2a:09:bb:1b:3c:b4:fc:29:ee:87:bc:97:6d:25:
ad:b2:a5:01:cc:f7:4b:6c:3a:f4:d9:1c:b8:4f:80:
00:93:4d:24:db:82:0a:40:2b:81:fb:0b:80:40:49:
8e:b8:fc:8e:47:cf:c7:f6:e7:a2:e8:9d:6b:dc:a9:
79:84:0e:0d:3d:b1:d9:4a:3f:24:63:39:94:a2:89:
21:8c:69:8d:ce:c8:23:46:1d:96:1b:7e:bc:c6:94:
dc:61:ef:f6:12:1e:7c:5e:22:14:25:e7:c9:e3:a2:
42:e5:47:a5:35:57:6a:15:42:93:4e:d0:db:f3:c8:
a5:c1:4e:26:37:c6:fe:69:79:51:26:88:73:06:75:
45:2c:50:fc:fd:cc:ae:86:be:6c:3a:ef:46:a3:f5:
61:10:93:b5:93:f3:b5:83:74:20:b9:01:1e:c0:8f:
94:0e:f7:26:22:92:44:a3:fe:11:8a:c5:7a:8c:c8:
34:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B1:63:76:92:33:F1:62:44:5A:31:AC:68:4E:15:09:17:38:E5:02
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3C14092EB1DB11E9B2497548F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.180.76.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:83:a0:8c:a5:0b:22:59:5c:bd:11:b5:ce:7d:33:2a:79:27:
67:61:25:be:75:b9:4b:b6:dd:87:61:42:f4:45:2a:29:41:b7:
9f:e8:ea:f0:68:23:5f:d5:b6:c8:b4:99:f9:e6:91:59:d9:0b:
af:c0:5a:6c:95:5a:0c:59:ec:5d:69:d8:21:cd:89:8d:9e:98:
61:02:7e:90:15:a1:eb:d5:90:a8:0d:cd:9b:39:e6:a8:6c:d3:
b2:5b:67:02:12:2d:55:a8:1b:e8:c8:66:fc:b7:ac:05:73:a2:
03:83:a3:3b:52:ba:3c:94:61:9a:de:67:1b:c4:0c:65:69:38:
37:3a:fc:fd:a3:0b:e5:2b:22:16:c2:bc:07:78:66:a1:94:5c:
5e:02:18:dd:bb:97:9e:c9:c2:e4:b6:e2:d7:d8:f2:d1:f3:a9:
84:ce:c1:54:d9:81:d2:f7:82:18:99:8d:5c:5e:00:2f:39:c0:
e0:a8:7e:61:55:95:88:8a:73:bc:5a:db:b8:08:d3:25:4c:06:
5c:8b:75:fc:65:dd:f6:3a:9a:ad:90:9b:21:33:59:60:26:93:
57:0a:79:13:05:67:f6:0e:cf:74:32:7e:67:c3:29:3a:86:38:
7a:f0:e0:12:b3:b5:8d:bf:3b:36:e6:c9:07:b7:81:9f:1f:95:
93:b5:15:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org