Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/784B49C8B1DD11E99881544AF8AEA228.roa
File: 784B49C8B1DD11E99881544AF8AEA228.roa (raw, json)
Hash identifier: tPMrnI+UPPsA53qIbI5OG8Hyu4MDl3mDvh8KLQzZ19s=
Subject key identifier: 17:F3:BE:B9:2D:FD:5E:27:3F:C0:12:AF:B0:AE:73:30:61:B8:54:DC
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 7A
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/784B49C8B1DD11E99881544AF8AEA228.roa
Signing time: Mon 29 Jul 2019 08:47:18 +0000
ROA not before: Mon 29 Jul 2019 08:47:13 +0000
ROA not after: Wed 27 Jul 2022 08:47:13 +0000
asID: 36916
IP address blocks: 41.221.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 29 08:47:13 2019 GMT
Not After : Jul 27 08:47:13 2022 GMT
Subject: CN=5d3eb296-c5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:28:40:4a:6e:89:b0:37:ac:f3:b8:10:95:
8b:bc:84:2a:84:21:e1:68:bd:62:0a:42:ce:44:9a:
55:60:96:ab:80:23:44:53:39:45:93:d4:d2:d0:5a:
91:08:5d:35:0b:5b:3d:65:32:38:a4:1a:2b:9c:3c:
0e:9a:8c:6d:a6:9c:51:43:ce:14:ee:7a:c3:87:8a:
62:da:11:b1:b9:ba:d1:76:e1:ff:dd:b2:35:66:56:
df:c8:94:66:55:73:5b:5d:b9:cc:2e:0e:21:40:54:
8d:f4:53:e5:e8:e1:8d:0f:b4:59:11:69:8b:4d:10:
93:d0:85:08:31:8e:7e:78:d1:d9:86:31:34:3c:c0:
ff:67:7e:00:52:a7:35:f7:53:1c:b9:b2:6c:88:50:
38:66:bf:ff:42:f9:54:c3:b5:cd:2f:78:8c:95:48:
75:e8:6d:ea:10:64:8a:98:ad:42:4c:21:09:26:e8:
13:af:af:17:d3:be:83:c3:c3:a0:26:51:da:ca:24:
b3:ff:74:d8:74:83:3b:b3:51:e5:e4:63:d3:04:e0:
21:39:59:dc:e9:cb:d2:bc:38:db:e8:10:1f:06:2a:
19:cc:b9:c1:08:69:28:cc:d1:ee:60:09:0b:6f:5d:
3a:e8:74:72:86:53:e0:f7:83:04:7a:92:89:0a:09:
5c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F3:BE:B9:2D:FD:5E:27:3F:C0:12:AF:B0:AE:73:30:61:B8:54:DC
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/784B49C8B1DD11E99881544AF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.221.235.0/24
Signature Algorithm: sha256WithRSAEncryption
79:e8:de:51:21:5a:04:83:78:29:82:be:b2:c4:46:75:38:da:
cf:42:4a:91:0f:df:62:9c:01:3c:67:f8:9a:5a:a4:40:b1:64:
e8:cb:f4:7e:5d:df:c3:eb:d8:f9:90:51:e2:e9:03:6e:82:68:
e0:b4:09:9f:1c:2b:a0:c5:1b:d5:9a:ef:66:79:6b:27:8d:ad:
9c:20:08:10:4a:72:32:91:60:28:29:e0:f9:57:35:12:b6:cd:
ed:59:bf:53:0a:45:28:c9:76:8e:42:15:b7:73:29:18:b6:b4:
f3:74:a7:27:1d:fb:46:cb:43:1e:1d:65:1b:5b:a5:f1:10:1f:
6e:1d:0a:ab:2c:db:77:2f:e9:67:e4:15:3a:93:8a:c8:09:36:
dc:9f:82:30:79:c7:ef:b3:e7:9a:07:71:e1:e9:5d:ac:2b:bd:
78:0c:f4:4d:c6:4f:04:55:e9:42:d1:89:ab:55:1d:e8:8d:36:
68:ea:21:7b:0a:ed:f9:17:25:79:08:c2:d1:8b:7b:62:2c:5a:
6b:da:18:08:bc:5e:aa:b8:f6:39:82:35:22:fc:37:81:21:0c:
4e:0a:11:90:d3:64:11:9c:c7:3f:6b:f9:4e:5e:fe:e1:4d:0f:
7e:64:c6:93:bf:b0:46:7d:1d:26:e7:c9:8a:3c:58:54:eb:a5:
27:86:38:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-fra.rpki-client.org