Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/81D6AC00B1DB11E9A141BD48F8AEA228.roa
File: 81D6AC00B1DB11E9A141BD48F8AEA228.roa (raw, json)
Hash identifier: 3LawS1/7mulLK9Eg8eKfSCII0RfO5qeoVuYoweESqH8=
Subject key identifier: 4F:49:87:76:58:81:4A:AD:33:49:6E:F5:0E:A8:CF:A0:12:97:70:E4
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 66
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/81D6AC00B1DB11E9A141BD48F8AEA228.roa
Signing time: Mon 29 Jul 2019 08:33:15 +0000
ROA not before: Mon 29 Jul 2019 08:33:08 +0000
ROA not after: Wed 27 Jul 2022 08:33:08 +0000
asID: 36916
IP address blocks: 41.180.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 29 08:33:08 2019 GMT
Not After : Jul 27 08:33:08 2022 GMT
Subject: CN=5d3eaf4b-0340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:16:0f:3d:9a:37:fe:03:9b:7e:58:b8:b4:
74:09:d2:00:89:58:88:73:64:dd:8f:b8:b4:c2:35:
c7:c9:58:41:40:09:9c:6c:57:8d:64:20:05:d3:6d:
7a:22:76:d2:c3:db:0b:55:7e:fd:d9:71:08:47:42:
58:c6:b5:3c:c4:d0:bc:1f:36:b4:38:81:86:63:7c:
28:55:36:75:cc:53:ac:8e:26:bd:93:0d:e6:8b:65:
65:a0:33:1d:a8:b1:b9:13:68:59:71:d9:0d:07:b3:
cf:b6:e6:c9:e4:29:3a:2f:20:90:2e:33:9b:d0:d8:
fc:c7:24:e8:d2:7b:ba:86:1a:68:0b:bc:a1:48:6f:
c1:bc:d9:29:ba:93:56:ce:b4:f2:d2:e5:4c:1f:cc:
87:6c:67:ab:19:67:fa:7b:b4:76:65:f5:59:62:75:
70:d5:c9:ba:51:b0:0c:ab:68:a9:5e:46:72:eb:4a:
98:63:40:27:82:35:58:cd:ad:38:c0:bf:bb:fa:ad:
4a:e2:50:af:47:03:56:8a:e0:f3:f6:75:8d:6a:7e:
ee:3a:af:53:d6:a8:3a:59:20:0f:6f:00:10:ae:5c:
b6:5a:c4:05:a4:3c:71:ab:89:6d:1d:d7:80:5c:80:
b9:5f:5c:da:37:24:71:c2:88:2d:64:0e:fb:58:b4:
7b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:49:87:76:58:81:4A:AD:33:49:6E:F5:0E:A8:CF:A0:12:97:70:E4
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/81D6AC00B1DB11E9A141BD48F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.180.88.0/22
Signature Algorithm: sha256WithRSAEncryption
21:9a:d4:6c:aa:7b:70:d5:72:b7:dc:e3:7c:45:a4:14:5d:18:
cd:5d:ca:a6:98:e3:bc:6f:29:05:dc:58:0e:29:eb:a9:05:f7:
e0:a4:44:80:58:80:1f:be:d0:3c:d5:c2:dd:37:83:c9:71:15:
7a:b7:ba:70:57:be:72:31:9f:e8:55:9c:cb:a0:2e:ee:57:bd:
65:02:5c:e3:a1:aa:d7:38:ee:44:93:05:14:92:98:3a:b3:ba:
dc:cb:19:10:b6:b4:19:19:ff:e1:02:51:86:57:f5:2a:3a:58:
bc:ea:96:8c:04:96:d0:87:99:5f:0f:f4:b2:a9:99:25:6b:c6:
81:e1:cd:2f:72:9a:59:24:3a:05:55:03:72:64:97:68:83:df:
cd:40:7f:d9:3d:83:76:22:08:e7:10:54:40:7f:d2:fe:db:24:
9e:bb:d9:c8:9f:14:b5:e6:5f:08:0c:12:2d:2b:fc:f9:7e:11:
c4:89:4e:45:c6:e9:39:49:84:d6:bb:79:b6:06:69:9c:d4:6e:
33:33:eb:19:56:3f:07:2f:12:ad:8a:e0:07:b5:22:a2:98:00:
d5:89:67:7a:23:93:b6:9a:4a:9d:00:43:97:0e:f4:d0:15:a0:
fc:1c:bc:f5:2f:46:5b:d8:45:8f:2c:f7:f6:f0:c4:b0:ab:f2:
5a:8d:31:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:56 2023 by rpki-client on console-ams.rpki-client.org