Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/5F97BCF297C411ECA26C6B975A40D577.roa
File: 5F97BCF297C411ECA26C6B975A40D577.roa (raw, json)
Hash identifier: X7gWzKnG8Km8oeLeKufB45YOJUpMC/qYJcZfmhSHGTA=
Subject key identifier: AC:2C:3D:E7:D0:61:69:9F:FB:8E:DC:64:30:1B:AF:F9:20:AC:AC:A7
Certificate issuer: /CN=F368B07FAF/serialNumber=78825B2BC908A40FEF62B26482D61A98575FCBD3
Certificate serial: 0664
Authority key identifier: 78:82:5B:2B:C9:08:A4:0F:EF:62:B2:64:82:D6:1A:98:57:5F:CB:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/eIJbK8kIpA_vYrJkgtYamFdfy9M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/5F97BCF297C411ECA26C6B975A40D577.roa
Signing time: Sun 27 Feb 2022 11:57:01 +0000
ROA not before: Sun 27 Feb 2022 11:56:57 +0000
ROA not after: Sun 25 Feb 2024 11:56:57 +0000
asID: 37314
IP address blocks: 154.119.64.0/20 maxlen: 20
154.119.64.0/24 maxlen: 24
154.119.66.0/24 maxlen: 24
154.119.76.0/24 maxlen: 24
154.119.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1636 (0x664)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368B07FAF/serialNumber=78825B2BC908A40FEF62B26482D61A98575FCBD3
Validity
Not Before: Feb 27 11:56:57 2022 GMT
Not After : Feb 25 11:56:57 2024 GMT
Subject: CN=621b670d-a92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:8d:ff:d2:67:36:c7:83:5a:ad:c2:9b:2b:47:
b1:f6:65:2d:c9:fb:ab:ec:90:06:2b:30:3f:3b:70:
eb:91:28:d8:b6:7a:6b:88:67:37:24:90:4f:93:8b:
b4:ed:e4:97:22:22:37:4e:d1:45:4d:0b:b1:6a:d4:
01:49:00:7c:aa:d3:5a:d1:ec:ca:9b:15:f8:b9:94:
9a:72:89:82:83:d8:01:f9:98:f3:8b:fb:f6:37:35:
d9:cb:16:3a:f6:46:de:0b:7b:46:43:42:15:01:94:
33:c5:e6:b6:51:27:72:0e:de:95:61:6c:bb:3a:45:
2e:0c:43:76:62:f2:ba:2c:0d:bb:d2:a1:54:cd:75:
a2:6c:bc:4f:1d:9c:93:f9:7a:52:04:37:9f:df:03:
fc:0a:70:c3:c5:85:92:31:ec:35:9f:14:99:c5:b5:
52:49:d8:a4:a1:51:12:1e:f7:e4:b1:6c:7a:b3:9a:
f0:72:e8:c3:f8:69:be:77:bd:52:83:75:97:5f:16:
64:39:ea:30:4b:c6:bd:72:a3:00:3f:5a:14:e0:f2:
15:0a:6f:61:e2:4b:e6:f2:a8:0e:88:1d:ce:b2:30:
4b:c3:ba:de:40:3f:b0:9c:78:0e:69:db:01:e8:f6:
06:e0:46:34:9b:0c:f7:7e:2c:3f:50:e4:07:5c:f1:
22:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2C:3D:E7:D0:61:69:9F:FB:8E:DC:64:30:1B:AF:F9:20:AC:AC:A7
X509v3 Authority Key Identifier:
keyid:78:82:5B:2B:C9:08:A4:0F:EF:62:B2:64:82:D6:1A:98:57:5F:CB:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/eIJbK8kIpA_vYrJkgtYamFdfy9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eIJbK8kIpA_vYrJkgtYamFdfy9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/5F97BCF297C411ECA26C6B975A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.119.64.0/20
Signature Algorithm: sha256WithRSAEncryption
05:00:97:58:26:46:bb:c4:99:d3:9c:62:3e:8c:b0:f4:2c:1b:
c8:38:ce:cf:dd:7d:df:70:65:29:56:0c:b1:97:c9:93:84:9a:
63:fb:f4:9d:20:cc:a7:7c:7f:b0:6c:27:1f:66:1c:ea:08:b8:
bc:68:7e:f2:37:6f:28:27:32:89:0e:15:ca:a9:02:8c:3d:e5:
30:69:c1:96:a5:71:22:ec:cf:b3:09:c9:98:26:04:9a:bb:59:
b0:17:bb:9d:d0:65:ea:88:37:3a:04:e8:42:f4:6d:cb:1e:1e:
98:46:24:2a:fb:4f:2f:7f:7f:dc:79:f8:2c:1a:ba:c2:ce:a0:
4e:69:bd:f7:96:e9:ed:77:3a:23:8f:df:6a:ea:b4:f2:36:fe:
89:73:64:56:ea:05:f3:b0:52:39:c7:fe:0d:9a:8f:d4:f8:a5:
de:e8:c7:1d:9d:9b:9c:2d:25:3a:1d:03:35:0f:cc:be:d0:48:
71:f0:d3:f6:72:8b:d2:9d:24:18:d2:08:06:81:50:7a:d5:59:
86:8f:88:88:69:53:12:fc:ac:89:38:40:43:14:c3:12:4f:2e:
71:45:14:76:38:0f:59:14:68:08:0d:e0:8a:c9:6e:1d:8f:ac:
89:ef:5f:a6:29:3a:f4:e9:ff:ea:67:1b:e6:6b:d6:e0:31:a2:
21:f5:d6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:27 2024 by rpki-client on console-fra.rpki-client.org