Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/573E596EB1DD11E986AE414AF8AEA228.roa
File: 573E596EB1DD11E986AE414AF8AEA228.roa (raw, json)
Hash identifier: Ucni29i/1btERifvkfCpSHQM/lX18tuFuymAH5CigUY=
Subject key identifier: 80:02:2B:FA:85:6E:19:8C:5F:8F:F2:56:21:9E:B0:3A:5D:75:F8:91
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 78
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/573E596EB1DD11E986AE414AF8AEA228.roa
Signing time: Mon 29 Jul 2019 08:46:22 +0000
ROA not before: Mon 29 Jul 2019 08:46:17 +0000
ROA not after: Wed 27 Jul 2022 08:46:17 +0000
asID: 36916
IP address blocks: 41.221.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 29 08:46:17 2019 GMT
Not After : Jul 27 08:46:17 2022 GMT
Subject: CN=5d3eb25e-ee37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ee:7a:d6:4f:0a:1a:64:8a:d1:d3:13:d7:c2:
c7:f4:c7:03:a0:fa:23:81:46:96:98:73:50:0e:6c:
92:2a:27:12:cf:90:0e:72:12:01:2e:cf:21:dd:cd:
15:2e:08:19:79:44:26:e1:19:24:40:2b:f0:65:1a:
ab:c1:b2:d5:ad:8b:e6:b7:37:79:51:67:f9:3f:e3:
d7:db:16:1c:d7:20:bf:71:15:02:7a:a2:0d:cd:c7:
f7:3b:3c:41:64:87:93:47:67:9f:df:67:ba:1e:72:
20:39:91:a1:7f:9c:31:98:ad:06:9c:8a:1f:f8:79:
07:2c:74:1c:c0:1d:64:a8:2d:d9:d1:ff:95:af:69:
59:b3:9c:a1:3f:05:e7:bb:44:17:0b:10:1a:cb:b9:
9f:3f:c3:da:c2:2a:d0:8d:d1:9a:24:bb:51:cb:2e:
d4:47:e5:b6:88:25:63:70:f9:e6:b3:2b:16:64:1e:
94:70:d0:e7:ed:41:ef:e4:c5:46:1c:9a:2e:4f:d5:
72:8e:82:f0:f4:ac:50:1c:8a:98:d2:e3:31:0e:f8:
a9:d0:d0:9a:07:50:3e:a0:51:5e:41:7a:9c:2f:4f:
df:11:8b:13:33:70:54:88:e4:46:98:8c:ed:66:a6:
cc:32:10:f2:47:2a:d0:2f:66:27:02:c1:cb:d8:64:
d6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:02:2B:FA:85:6E:19:8C:5F:8F:F2:56:21:9E:B0:3A:5D:75:F8:91
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/573E596EB1DD11E986AE414AF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.221.233.0/24
Signature Algorithm: sha256WithRSAEncryption
55:0a:42:b9:6c:2e:69:76:04:72:05:1f:cf:a7:40:d5:c1:2f:
23:03:4a:08:0c:cc:72:12:b1:be:d3:76:a0:5d:ab:94:2d:67:
09:4e:6d:b2:c4:cb:80:e7:0b:0e:c4:83:ea:00:8a:88:08:76:
a4:82:f1:52:10:db:4d:9a:5d:4d:d2:1a:6c:03:6f:b4:07:b8:
09:85:7d:3f:6e:70:80:cc:4a:0b:0f:2b:97:32:cc:a6:14:1f:
7e:2c:51:f4:24:86:9b:9e:09:63:ce:67:34:ef:74:d1:26:cc:
75:d2:6f:d5:4e:38:8e:1e:ce:0f:77:93:d3:b4:8b:12:95:eb:
75:31:aa:bd:a4:29:c5:b5:3c:30:47:79:92:89:d8:a7:1c:76:
68:71:eb:25:02:2b:90:5f:10:64:33:e6:4e:05:41:95:3d:57:
51:3f:95:10:7b:5e:21:cf:66:0f:2a:a3:7e:14:08:eb:b9:ab:
8e:a7:c4:22:42:36:01:5d:b0:89:14:68:6c:1d:d7:cb:3f:65:
b4:56:1c:4e:7e:55:f3:15:bc:78:87:01:f6:e9:3f:59:39:5e:
ad:68:8c:6d:02:3d:5c:3a:2f:24:aa:27:7f:50:37:f7:ad:0c:
44:57:42:c7:d0:8c:e1:89:f8:5e:76:21:3e:de:25:62:61:e6:
3e:b6:cc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-fra.rpki-client.org