Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/DE0395B4A8B911ED901D12E4F1222468.roa
File: DE0395B4A8B911ED901D12E4F1222468.roa (raw, json)
Hash identifier: z5rtvvLCg8rwVuT+GleZPbX3rbX++nbdZW92catgtcQ=
Subject key identifier: 54:68:C0:9D:8C:CF:66:FF:E0:72:0D:81:E2:92:54:A1:E6:D5:C3:D0
Certificate issuer: /CN=F36FA15DAF/serialNumber=D8B6E18C65DD1F96F2A544CACFC98086AEF9296F
Certificate serial: 032E
Authority key identifier: D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/DE0395B4A8B911ED901D12E4F1222468.roa
Signing time: Thu 09 Feb 2023 20:39:37 +0000
ROA not before: Thu 09 Feb 2023 20:39:33 +0000
ROA not after: Fri 09 Feb 2024 20:39:33 +0000
asID: 207990
IP address blocks: 154.73.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 814 (0x32e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAF
Validity
Not Before: Feb 9 20:39:33 2023 GMT
Not After : Feb 9 20:39:33 2024 GMT
Subject: CN=63e55a08-a54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:77:b5:33:58:1e:9b:f3:7b:cb:ac:43:a0:db:
5d:74:e1:af:60:59:78:30:14:fd:51:f1:1b:b3:f3:
f6:c1:81:11:9b:9d:48:8d:3d:9c:80:26:82:62:67:
12:8a:7c:48:c3:9b:6c:2b:74:d2:12:00:c4:f9:51:
99:b4:79:51:ce:0f:08:24:54:67:4b:fb:99:98:2a:
b1:70:07:7d:ee:50:c6:b9:d1:9d:35:21:11:2c:8e:
47:9a:59:4a:c7:cd:96:59:80:45:52:f6:7d:55:e4:
f5:f1:df:a0:81:85:5e:7f:f5:c3:ad:43:4d:94:d7:
34:df:29:0a:ec:a4:91:ff:8c:72:8d:65:9b:43:df:
a9:92:75:e4:06:86:e9:4a:d2:2c:1a:7b:3d:5c:25:
66:08:07:16:98:5a:91:5c:5a:55:4b:aa:b2:72:f6:
01:f5:7f:bd:eb:d0:4b:90:cf:a7:74:43:72:f0:69:
2e:7d:60:3d:25:5d:1b:a4:c0:ed:25:72:6d:29:a5:
15:4c:dd:3e:11:00:c7:ad:65:7a:c8:4f:83:b0:bc:
c1:5b:c9:48:7c:3d:60:2d:80:a7:a7:c9:bb:1d:5c:
45:a9:87:6a:93:d6:03:3c:e6:ce:90:a7:bf:ba:9a:
81:40:7a:a0:32:f2:a5:cc:e2:02:67:01:ca:80:30:
78:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:68:C0:9D:8C:CF:66:FF:E0:72:0D:81:E2:92:54:A1:E6:D5:C3:D0
X509v3 Authority Key Identifier:
keyid:D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/DE0395B4A8B911ED901D12E4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.73.249.0/24
Signature Algorithm: sha256WithRSAEncryption
72:c0:08:12:cc:31:c3:f8:e2:5b:a0:47:b9:17:39:40:15:31:
de:e5:cf:8a:fd:e5:ae:95:90:ce:96:98:a0:14:c1:45:33:50:
cf:e5:cb:44:1b:ed:2d:0b:bb:c5:f8:8a:d8:1b:7b:3f:ec:d2:
43:91:52:4a:65:36:bb:f4:76:f7:5e:54:30:d2:ec:88:6b:05:
a3:1f:08:aa:41:0a:4f:8e:60:70:6f:96:5d:71:f6:2e:f1:ba:
f0:93:da:df:5c:61:64:f3:2b:46:71:2a:1c:6c:31:6d:e1:d9:
f4:e0:ff:c8:6a:ed:ac:34:c5:97:84:62:58:2e:86:65:b4:e9:
33:b9:a0:49:a5:30:c0:c6:ce:7e:f4:e3:56:2e:34:6b:9a:84:
4c:0d:53:f0:9e:db:c8:ef:32:4a:9e:79:3a:ba:ac:16:5b:fe:
8f:7e:d0:c2:2c:dd:b1:b0:01:9d:13:47:21:9d:e2:53:8a:75:
5f:a1:80:02:f4:e1:1f:45:d7:31:40:04:9f:33:8c:3e:73:e5:
17:22:23:13:14:bf:10:a4:38:36:d0:6d:a4:f0:fe:cc:b5:d3:
ce:c2:be:9b:fb:46:33:8e:7a:f6:b3:e7:3a:2b:69:e8:5d:ec:
ba:29:d8:61:b2:25:05:11:aa:b3:04:a6:9f:da:79:3e:88:01:
c2:0e:07:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:00:14 2025 by rpki-client