Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/C528DF0CE05A11E9B1454967F8AEA228.roa
File: C528DF0CE05A11E9B1454967F8AEA228.roa (raw, json)
Hash identifier: S7lZFaDaQ8dK72Cd6p7xYFXijvjp4YqwufMMLKMiZCY=
Subject key identifier: 35:EA:93:6A:2B:99:CE:B8:40:36:41:7E:8A:6E:AC:C8:3E:45:AD:25
Certificate issuer: /CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Certificate serial: 92
Authority key identifier: 7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/C528DF0CE05A11E9B1454967F8AEA228.roa
Signing time: Thu 26 Sep 2019 12:40:07 +0000
ROA not before: Thu 26 Sep 2019 12:40:02 +0000
ROA not after: Thu 26 Sep 2024 12:40:02 +0000
asID: 327804
IP address blocks: 154.68.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Validity
Not Before: Sep 26 12:40:02 2019 GMT
Not After : Sep 26 12:40:02 2024 GMT
Subject: CN=5d8cb1a7-d709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:73:3a:17:75:c5:ae:82:77:37:43:40:4e:ab:
25:e3:c0:7a:02:43:66:39:84:0c:3b:57:81:c9:f1:
e4:a1:52:74:81:9e:8b:bf:eb:6f:3f:8b:f5:4e:a2:
54:a8:ca:01:21:f1:5b:16:8f:c0:a3:ae:31:0f:d8:
f5:1b:9a:1b:bf:25:3e:dd:5d:c3:af:63:32:31:81:
9d:2e:cb:30:30:ec:a8:5a:d1:ce:0a:26:3a:7c:e8:
04:22:83:d7:80:55:39:8e:b8:3e:52:76:7a:3e:30:
af:5a:8b:8c:0f:31:71:b0:de:35:00:56:3b:03:2a:
2d:3a:2a:25:06:54:93:52:6a:1d:24:3d:0b:be:be:
ae:3e:01:03:ae:a0:d9:01:6a:67:ff:56:fd:d0:d8:
a8:db:19:9d:e3:ff:66:ac:ec:32:fe:9a:43:de:95:
0a:3f:e6:d1:d4:b7:d2:ac:38:b1:94:0d:74:60:c5:
e8:84:59:61:8d:81:64:cf:9a:f0:9c:2c:29:2b:ec:
2e:58:1c:e9:70:44:35:cc:5c:ee:a8:11:42:a4:7d:
23:72:ff:21:48:ae:7d:03:23:15:01:c1:c6:4f:67:
62:02:9b:43:e9:fb:43:9f:50:01:13:32:df:36:51:
2a:bf:16:7f:9e:2d:18:2d:78:01:c6:64:8b:f8:cd:
ce:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EA:93:6A:2B:99:CE:B8:40:36:41:7E:8A:6E:AC:C8:3E:45:AD:25
X509v3 Authority Key Identifier:
keyid:7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/C528DF0CE05A11E9B1454967F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
154.68.172.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:c0:d3:b6:f5:d2:1a:78:7b:4b:df:02:d3:eb:3d:a2:d6:87:
9f:c3:5f:ec:8d:08:35:c9:5a:a2:39:c1:ad:65:8e:89:70:d2:
ff:34:9e:e7:a5:27:38:ab:a7:63:91:b9:84:ee:a3:f7:48:f1:
f9:7b:f7:d9:29:9e:f1:6e:58:eb:b5:da:1e:50:89:65:8c:1b:
50:9c:0d:b0:32:db:91:ba:0d:66:0e:e9:4a:26:86:5b:5a:3e:
1c:b2:2c:64:d2:c7:71:ab:d8:17:31:b7:56:5f:10:e0:d6:c0:
b9:59:3c:51:a1:2e:4b:cc:61:af:11:10:63:b0:50:d7:70:2c:
e9:4b:bc:3d:81:f0:14:1f:7b:2d:c9:9b:24:b2:35:7b:05:5a:
24:b7:67:a8:04:1f:3f:60:ce:e5:99:97:ea:b7:be:a1:70:d5:
7e:91:25:02:bb:16:5d:39:2b:9a:c9:01:e0:ba:b7:3b:c7:34:
7e:b3:79:53:b7:eb:ad:b0:55:45:ca:83:e5:6b:96:23:b3:41:
e7:b7:44:a6:4c:02:d4:d8:70:8d:72:51:fd:83:1c:be:d8:71:
e0:ee:43:7f:7c:64:f7:94:b1:f4:1d:84:69:7c:60:b0:74:26:
96:9f:a3:b8:3d:3d:52:07:d7:15:c0:21:99:4b:66:cf:c9:c3:
6d:ce:30:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 03:59:55 2024 by rpki-client on console-fra.rpki-client.org