Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BA24086488911EC9EF0073DD8A014CE.roa
File: 3BA24086488911EC9EF0073DD8A014CE.roa (raw, json)
Hash identifier: x4axrd/KBfrJo6LP/1nfh7tT9Evxdj8LKic8h5t96JE=
Subject key identifier: E4:02:4B:C4:17:A3:B6:B9:D7:5B:DB:B9:3A:21:32:20:B9:A4:3B:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0D82
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BA24086488911EC9EF0073DD8A014CE.roa
Signing time: Thu 18 Nov 2021 16:04:39 +0000
ROA not before: Fri 19 Nov 2021 16:04:35 +0000
ROA not after: Sat 19 Nov 2022 16:04:35 +0000
asID: 139879
IP address blocks: 154.80.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3458 (0xd82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 16:04:35 2021 GMT
Not After : Nov 19 16:04:35 2022 GMT
Subject: CN=61967997-2783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:44:60:86:1c:29:86:b9:0d:76:f0:f9:0d:8c:
55:72:04:d5:6c:bf:ff:89:4c:f1:b8:1a:96:16:47:
cd:cb:64:a1:39:8f:ab:e0:cf:bb:01:d0:7b:d3:8f:
29:a7:24:50:0b:5f:c5:bb:3a:ab:02:d4:90:ff:0d:
ba:f0:fe:ac:c5:b7:dd:dc:7a:d3:67:3c:a3:8f:26:
f0:82:64:da:64:50:7e:8f:b6:be:cf:de:e0:79:c0:
0b:74:5f:21:57:34:10:d1:ec:f3:95:dd:b2:c6:b6:
6a:cd:bf:31:36:22:a9:94:1a:b2:28:c6:6d:37:b3:
56:f1:a0:bc:90:4f:67:1e:2f:1c:8b:4e:23:07:c1:
58:3f:54:54:2c:2c:47:45:cb:ba:c6:95:d5:9d:6c:
9f:f5:e0:ac:27:fd:b0:40:e1:0e:02:c4:eb:a6:be:
b0:d5:6a:31:52:9d:d4:a6:bb:c3:04:3e:72:bb:ae:
f5:11:66:63:6d:83:4f:c4:42:61:d0:03:cf:f2:09:
dd:51:c6:2b:8d:07:1f:eb:58:77:26:db:d8:d8:38:
42:44:d0:74:a6:f4:01:5e:a8:a5:2c:48:73:21:b8:
f5:b5:4d:0f:54:34:8d:e4:b0:c6:cb:3b:2a:18:fa:
29:70:7c:9c:ab:74:b0:2c:60:cc:9c:46:d6:52:9f:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:02:4B:C4:17:A3:B6:B9:D7:5B:DB:B9:3A:21:32:20:B9:A4:3B:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BA24086488911EC9EF0073DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.59.0/24
Signature Algorithm: sha256WithRSAEncryption
82:07:c2:cc:0c:e5:82:8f:55:c2:04:b5:b1:ca:a1:d4:c3:f3:
f7:f9:ad:f7:0a:89:88:07:f4:e8:cf:32:8e:75:d5:3d:5c:a7:
f9:ed:34:c7:a1:be:01:ba:cb:aa:f0:4d:7d:ab:de:2f:a7:ad:
72:bc:9f:f5:bc:91:c4:e1:5a:d9:ea:8e:19:de:5d:52:2e:10:
7e:1b:22:a2:37:24:a8:11:98:e0:56:ac:82:f6:7f:98:41:69:
c7:9c:ee:42:a9:2d:f4:02:bf:28:53:31:95:c5:50:81:97:51:
43:c9:21:ef:6c:bf:95:0d:bc:98:5a:2b:e2:4f:fb:4c:a6:bb:
d4:cc:69:55:7c:1e:cb:da:57:3e:44:f4:7f:c9:a3:73:92:e7:
85:fc:63:22:0f:fd:b7:8d:7d:65:c3:c0:6a:44:69:5e:02:6c:
e8:b5:e0:67:46:98:94:16:43:70:a8:fb:d6:52:1f:96:a0:d7:
bc:cb:7c:3b:f5:88:d1:05:f3:38:f8:ec:be:30:d8:11:8c:02:
e3:f6:ad:ad:bb:25:92:49:a8:16:dd:26:e3:07:a4:7f:af:b8:
33:eb:fc:3b:10:8a:c6:7b:30:74:01:95:0f:c0:0f:05:a7:d2:
0c:e8:a3:75:84:56:9e:08:52:73:a9:41:ae:24:5a:96:47:9c:
4a:af:59:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-fra.rpki-client.org