Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/BA306FF2B1DE11E9A16D614BF8AEA228.roa
File: BA306FF2B1DE11E9A16D614BF8AEA228.roa (raw, json)
Hash identifier: GIBsmGpgTyjOlVmG7eXW6lUc/f3o4IiB/v5iPDzIlp8=
Subject key identifier: 6D:2F:2F:98:BC:F8:73:DF:95:B4:3B:31:E7:2A:5F:FB:C6:66:89:D0
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 82
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/BA306FF2B1DE11E9A16D614BF8AEA228.roa
Signing time: Mon 29 Jul 2019 08:56:18 +0000
ROA not before: Mon 29 Jul 2019 08:56:13 +0000
ROA not after: Wed 27 Jul 2022 08:56:13 +0000
asID: 36916
IP address blocks: 41.223.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 29 08:56:13 2019 GMT
Not After : Jul 27 08:56:13 2022 GMT
Subject: CN=5d3eb4b2-7c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:53:c6:6c:02:e5:d8:d9:1f:21:ff:8e:ba:02:
06:c8:ec:db:9c:01:39:33:e1:fe:0c:32:ff:21:22:
90:36:9a:86:15:42:2f:69:37:eb:ff:b5:c5:0e:6b:
01:47:6c:c9:60:4a:f8:9a:6c:1e:a6:2a:40:9d:4f:
82:5d:7e:6b:2f:1c:a9:e7:77:ef:ab:61:de:8a:0d:
83:dd:18:f0:e7:aa:92:e7:c9:43:c3:71:70:e7:e6:
f4:89:c9:5d:3d:55:29:82:c7:11:a7:9c:99:fc:38:
13:9b:2d:49:0d:a3:ba:83:5a:77:82:f8:bc:b6:39:
34:0e:e3:12:f0:7a:0d:d1:20:f5:05:3c:b3:29:07:
31:a4:48:88:dc:e0:e0:49:1e:2e:12:40:0f:c9:c4:
c7:91:8e:ab:5b:46:ef:bd:91:ec:8b:f0:04:8c:3d:
28:5d:52:53:4e:92:3e:2d:c7:95:bf:d1:20:8d:c2:
21:d9:8e:b7:86:d3:e0:d7:60:3a:e7:db:c4:a5:e7:
a1:c5:08:2e:6d:7a:e8:d4:51:b6:8c:ea:c4:a2:17:
1a:18:f7:8d:33:c8:83:09:9e:61:6b:85:18:4a:e8:
39:6b:d0:73:28:be:cf:1a:6e:7a:fb:4c:f9:9a:51:
c6:ae:ea:29:57:a6:f2:2d:1a:29:08:95:f3:c5:f4:
4c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2F:2F:98:BC:F8:73:DF:95:B4:3B:31:E7:2A:5F:FB:C6:66:89:D0
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/BA306FF2B1DE11E9A16D614BF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.223.62.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:90:37:7d:59:e0:79:87:48:7c:05:3d:f2:ce:24:35:e3:54:
08:ac:b6:5c:39:e7:7c:97:84:25:c2:1a:61:87:d5:b3:2b:47:
84:a1:72:5f:65:16:3a:c2:3f:07:91:fb:56:c2:11:b0:d2:d7:
02:03:5a:b3:61:99:9e:a3:d6:0a:e0:e5:41:1f:15:6f:44:81:
0c:37:7b:d8:ce:ce:4f:f9:66:c5:e0:da:30:9b:1a:d5:43:89:
f7:ae:76:18:06:f9:4f:b2:5f:62:77:0b:a8:a4:a1:8b:ae:fb:
34:23:1f:08:98:87:db:8e:0e:0f:63:fb:dd:65:53:81:62:7e:
d4:d4:9c:de:a0:2f:f5:39:6f:53:90:57:58:ff:a5:e6:52:1b:
fa:23:3a:f7:53:78:85:5b:bf:f2:c5:3c:86:74:80:40:53:4e:
26:aa:87:32:7b:3b:6f:ac:11:ae:f3:e0:23:c3:7e:a1:ea:40:
e2:30:8e:4b:db:c6:e3:57:21:41:da:ca:5c:e5:5e:c7:53:2e:
b9:af:7e:fc:05:56:f5:d7:34:07:d4:a3:b8:f6:ad:23:ff:c1:
75:55:7d:9f:19:37:d5:8f:54:ae:f9:92:c8:6d:1c:75:0d:46:
48:61:28:cd:b8:8f:ed:aa:c9:96:bb:ee:94:2b:7d:ef:31:6c:
99:ec:0b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:56 2023 by rpki-client on console-ams.rpki-client.org