Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2197/BF273C2A6A0B11EBBABBBE84F8AEA228/1FEFA6906A0D11EB92D11D86F8AEA228.roa
File: 1FEFA6906A0D11EB92D11D86F8AEA228.roa (raw, json)
Hash identifier: crrGzNIlBxrMhh4unBPrZEA37N+IzI4fvhadupW5424=
Subject key identifier: 5D:E8:46:F4:61:9C:19:F4:00:58:7E:EA:93:E0:6F:A4:28:F3:28:A8
Certificate issuer: /CN=F36B2197AF/serialNumber=C3B027805513337EC8143D6591FC221F74D81EC0
Certificate serial: 02
Authority key identifier: C3:B0:27:80:55:13:33:7E:C8:14:3D:65:91:FC:22:1F:74:D8:1E:C0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/w7AngFUTM37IFD1lkfwiH3TYHsA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B2197/BF273C2A6A0B11EBBABBBE84F8AEA228/1FEFA6906A0D11EB92D11D86F8AEA228.roa
Signing time: Mon 08 Feb 2021 12:56:58 +0000
ROA not before: Mon 08 Feb 2021 12:56:52 +0000
ROA not after: Wed 08 Feb 2023 12:56:52 +0000
asID: 327764
IP address blocks: 154.73.24.0/24 maxlen: 24
154.73.25.0/24 maxlen: 24
154.73.26.0/24 maxlen: 24
154.73.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B2197AF/serialNumber=C3B027805513337EC8143D6591FC221F74D81EC0
Validity
Not Before: Feb 8 12:56:52 2021 GMT
Not After : Feb 8 12:56:52 2023 GMT
Subject: CN=60213519-7002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:6b:0d:c7:07:a1:77:6d:46:16:8e:53:ab:be:
16:ea:ac:fe:92:9e:18:af:f2:07:58:a2:f2:a5:23:
a1:78:04:00:e1:4f:75:f9:13:d0:2a:4c:0d:cc:a9:
80:19:27:c8:3f:fe:e0:76:f8:dd:ec:5e:29:9c:6c:
65:cd:cc:4a:8c:51:36:26:4a:64:60:03:8c:68:b0:
e1:fc:b5:76:33:0a:19:19:d4:8d:28:5a:49:b1:29:
03:14:d3:7a:ff:49:1b:e1:3f:c3:37:e9:ad:b6:dd:
0d:a4:0a:aa:38:a4:10:58:4a:a0:20:a0:1d:df:cd:
78:c4:3f:c2:38:9b:76:80:24:10:00:c9:ce:53:43:
60:59:2f:cf:48:2c:79:de:2f:a1:f6:58:58:b6:73:
d1:45:86:63:3f:d6:f0:ad:f5:9f:3a:53:3b:f5:da:
a9:06:e1:e2:cf:8d:3f:c2:7c:af:26:b1:94:78:9e:
4e:fe:0b:5c:1d:27:a4:a1:bb:e5:be:dc:e5:15:f4:
f7:aa:13:5f:4a:5c:e9:a4:f8:df:37:a8:d2:c2:57:
33:48:f4:cf:a5:14:db:7e:e8:3d:71:75:2c:a3:e6:
a3:f6:f7:19:11:17:95:9f:2a:93:13:c0:e2:bf:8e:
ac:a4:90:e7:38:a4:35:16:fe:c1:a6:c4:dd:75:9b:
b5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E8:46:F4:61:9C:19:F4:00:58:7E:EA:93:E0:6F:A4:28:F3:28:A8
X509v3 Authority Key Identifier:
keyid:C3:B0:27:80:55:13:33:7E:C8:14:3D:65:91:FC:22:1F:74:D8:1E:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2197/BF273C2A6A0B11EBBABBBE84F8AEA228/w7AngFUTM37IFD1lkfwiH3TYHsA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/w7AngFUTM37IFD1lkfwiH3TYHsA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2197/BF273C2A6A0B11EBBABBBE84F8AEA228/1FEFA6906A0D11EB92D11D86F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.73.24.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:c4:80:e8:00:f8:55:15:3d:18:06:a3:45:87:f2:d4:20:63:
22:26:58:3c:84:69:8d:09:e9:41:97:64:65:95:9a:9b:57:8e:
fd:f1:c5:52:75:1e:64:7a:30:c6:47:9b:96:4e:c9:a1:b4:a8:
ef:1d:79:c0:0a:35:6c:7d:90:23:b7:42:f9:ee:ab:b4:7f:c7:
9c:67:d9:8d:fa:b1:a8:c6:d3:ed:0e:7d:1c:e3:40:d4:2e:12:
09:23:1e:23:c8:94:a1:3d:1e:a9:bd:2b:f2:63:96:99:a2:4d:
04:8c:c5:27:94:bb:d4:ce:44:c3:8e:b9:bc:76:37:fd:2b:01:
80:45:ca:32:6b:09:b0:42:23:65:2e:29:96:9c:cd:4b:48:f7:
36:6e:23:24:d1:84:cc:bf:a7:cf:1e:6a:e5:d1:a9:f8:76:8d:
de:c9:cd:ed:a7:be:67:a0:b4:74:6d:17:2e:0a:fa:2e:a8:32:
f9:83:4d:88:40:28:cf:8c:b5:5b:89:23:d4:8d:88:3e:a7:38:
a6:8d:03:14:88:22:3c:23:ee:79:94:ed:82:58:bb:23:9b:9f:
6c:85:8d:b9:98:fb:45:f4:d7:b9:9d:b4:52:bb:b3:85:bb:c1:
a8:1c:30:80:a6:dc:db:b6:ec:54:9d:a7:c6:4c:8a:52:fb:74:
99:5b:8c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org