Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/0533D2C4B93A11EABF8DF917F8AEA228.roa
File: 0533D2C4B93A11EABF8DF917F8AEA228.roa (raw, json)
Hash identifier: LE3jthlXMlks3rDQIgVqsQX7/yLSYqmz0DZdbdBo3GU=
Subject key identifier: D0:7A:E3:CF:47:73:53:1F:84:30:84:35:7A:18:4F:19:25:8B:49:5D
Certificate issuer: /CN=F367C1FCAR/serialNumber=4DDF7AF0128A32A3A1775B1FCFA0EF38C87FD37C
Certificate serial: 09
Authority key identifier: 4D:DF:7A:F0:12:8A:32:A3:A1:77:5B:1F:CF:A0:EF:38:C8:7F:D3:7C
Authority info access: rsync://rpki.afrinic.net/repository/arin/Td968BKKMqOhd1sfz6DvOMh_03w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/0533D2C4B93A11EABF8DF917F8AEA228.roa
Signing time: Sun 28 Jun 2020 12:22:24 +0000
ROA not before: Sun 28 Jun 2020 12:22:18 +0000
ROA not after: Thu 30 Jun 2022 12:22:18 +0000
asID: 328160
IP address blocks: 160.119.124.0/24 maxlen: 24
160.119.125.0/24 maxlen: 24
160.119.126.0/24 maxlen: 24
160.119.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367C1FCAR
Validity
Not Before: Jun 28 12:22:18 2020 GMT
Not After : Jun 30 12:22:18 2022 GMT
Subject: CN=5ef88b80-6c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:17:5e:5e:b0:ee:c6:c2:85:38:73:f0:35:f0:
a2:5b:b7:6f:e9:a3:40:a5:5f:a3:cf:8f:84:30:18:
e5:cf:55:9e:b8:12:ea:a0:a8:6d:95:c0:d9:43:cc:
63:23:65:f5:66:5f:44:cd:68:3d:d8:ea:cc:94:6f:
3a:d0:d8:62:63:50:f9:bd:79:65:58:66:88:c2:86:
bc:41:6f:74:6a:17:f7:16:e1:6e:55:db:58:6a:47:
c7:74:6d:3d:0b:10:27:fa:c8:2c:ff:45:73:fd:33:
2d:5f:13:23:0e:03:f0:a6:c5:fe:49:92:ae:97:f6:
ba:37:b7:47:74:3f:20:86:e5:3d:d7:70:3b:10:95:
c5:f4:bc:ac:12:79:14:0e:5b:99:1e:f1:ed:b3:05:
b6:a6:68:1a:e2:db:12:88:83:b7:e4:e5:46:21:da:
75:c1:79:30:1d:41:51:20:73:d0:56:ac:bb:b6:3d:
f3:05:b3:10:79:f8:4e:18:ec:35:b7:86:5f:f3:74:
8f:9e:ff:a5:2d:68:6e:41:f6:ba:b0:f2:7d:86:c5:
ae:8a:7a:1c:7a:b5:e3:08:8f:ff:85:77:95:3c:59:
06:7a:fe:3c:67:21:57:70:52:92:df:ee:1f:3e:a0:
db:9c:cf:af:85:dc:b5:64:5a:6b:00:b0:70:83:c0:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7A:E3:CF:47:73:53:1F:84:30:84:35:7A:18:4F:19:25:8B:49:5D
X509v3 Authority Key Identifier:
keyid:4D:DF:7A:F0:12:8A:32:A3:A1:77:5B:1F:CF:A0:EF:38:C8:7F:D3:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/Td968BKKMqOhd1sfz6DvOMh_03w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Td968BKKMqOhd1sfz6DvOMh_03w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/0533D2C4B93A11EABF8DF917F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.119.124.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:93:4a:ef:74:17:9d:4c:52:ba:13:0e:f0:f9:52:71:48:b9:
f2:aa:27:2c:4d:cf:e4:56:27:c0:78:13:09:4d:83:fe:10:70:
60:9d:8f:de:e5:a9:b1:c7:d3:5f:9a:97:b7:2a:8e:de:d1:f9:
2f:d6:4d:4b:fa:df:a2:8c:aa:55:d4:ba:c4:b3:5b:8a:0e:57:
eb:ce:3d:ef:ab:49:73:b0:75:90:43:5c:9f:8a:a7:db:45:ae:
1f:15:1d:9f:f2:31:36:3d:27:c1:76:62:75:34:9c:c6:4b:0b:
a5:3f:27:3d:3e:2d:0c:ce:61:ca:48:7e:1e:87:60:d8:8c:59:
8b:24:94:23:a5:ab:f0:a3:f0:61:e8:71:e4:3e:c3:cd:d3:c8:
ff:6e:94:9a:a1:80:9a:19:00:65:e8:a6:b2:06:78:9b:d4:aa:
4f:64:32:2a:cb:07:1f:1d:41:33:ee:a1:53:78:0d:e0:a8:82:
a9:c5:cb:10:bc:f3:7e:34:03:3d:64:eb:a9:77:23:c6:6b:f8:
58:6c:7f:d6:9a:fc:57:41:24:a3:11:12:65:92:7c:02:c1:6d:
3a:6e:d9:95:58:94:68:0d:f9:b4:d1:5c:9a:22:f1:54:69:5c:
c0:db:00:a9:8e:47:ca:cc:48:e3:81:34:0e:7b:ce:4a:f6:b4:
c3:65:2c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:54:08 2025 by rpki-client