Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F795C8965BD411EB87127278F8AEA228.roa
File: F795C8965BD411EB87127278F8AEA228.roa (raw, json)
Hash identifier: AJwuKv6bYuFy7M8ySd0QovEc2WGT3S0+4s+V6WUtpp0=
Subject key identifier: 21:8E:97:0A:AE:2B:80:48:E0:85:F5:72:DA:72:77:68:F5:55:10:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 047D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F795C8965BD411EB87127278F8AEA228.roa
Signing time: Thu 21 Jan 2021 10:39:41 +0000
ROA not before: Thu 21 Jan 2021 10:39:36 +0000
ROA not after: Thu 21 Apr 2022 10:39:36 +0000
asID: 3356
IP address blocks: 154.84.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149 (0x47d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 21 10:39:36 2021 GMT
Not After : Apr 21 10:39:36 2022 GMT
Subject: CN=600959ed-83ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:01:af:d1:7a:17:f7:b4:2c:51:5f:d5:54:
53:97:39:c2:45:81:ca:32:5d:a2:f4:08:8a:8c:4b:
ea:98:e7:c9:03:f8:49:16:6e:e2:d6:95:3f:14:14:
a2:25:61:85:5a:49:f6:5a:a3:0d:87:0b:11:79:57:
20:00:ed:4f:15:e0:68:ff:26:c3:b5:a3:48:1e:15:
dd:d4:12:ca:a3:24:e6:8d:d1:0c:27:bc:5a:06:06:
da:51:a0:53:1c:fc:56:05:f3:d5:1b:2e:c7:4d:71:
6c:6a:51:1d:f7:50:1c:ce:ca:47:e2:a5:f7:35:d7:
1d:7f:8c:c4:24:7f:c3:35:15:55:ed:fc:3a:b5:ce:
9f:c9:90:ea:df:46:55:31:d3:e1:38:57:e7:ea:c4:
5c:b2:3e:ee:61:73:87:9c:7f:3b:0d:d0:2f:bf:c9:
9a:05:a7:65:6b:ad:bb:9c:6f:b2:29:6f:67:d1:40:
72:fc:9f:79:d4:38:55:18:9f:9f:6d:e2:1e:9c:05:
39:38:ab:7c:c5:54:61:7a:05:06:bc:5d:2c:58:89:
6e:35:37:f0:32:92:d1:91:66:63:56:47:13:8f:2c:
1f:d5:b8:40:9d:49:43:83:45:96:24:f9:ee:e1:2f:
01:35:58:b1:d0:2b:a1:87:75:a1:7c:03:15:70:90:
d2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8E:97:0A:AE:2B:80:48:E0:85:F5:72:DA:72:77:68:F5:55:10:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F795C8965BD411EB87127278F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.28.0/22
Signature Algorithm: sha256WithRSAEncryption
96:89:0a:97:7f:f7:99:c5:d0:de:d2:72:bd:eb:c8:b5:13:7b:
e1:00:86:8f:93:f9:10:ca:d7:14:15:a6:44:ba:7d:75:10:e3:
44:25:07:e5:72:be:08:5f:f3:48:91:1c:01:50:85:03:78:79:
09:c5:f3:05:2a:39:dc:07:fb:61:14:a0:ea:55:e7:7f:6c:4d:
be:03:89:3e:a5:be:7e:5a:43:a4:ba:fa:65:41:a8:e7:9f:e8:
0c:21:a4:b3:42:ce:5d:8d:31:37:2c:f5:27:b3:27:bf:0c:8b:
74:a8:46:fc:00:18:c4:4c:73:1e:3c:02:b3:f0:72:9e:f7:32:
4f:cd:c1:e4:1b:23:f2:f2:7c:29:1a:59:5a:cd:86:bb:4f:1a:
7f:67:14:bb:b2:7f:23:4d:d5:12:c7:cf:28:12:d7:61:b1:e5:
c3:2c:4b:2a:10:4c:b5:60:09:e9:d9:77:18:f6:b3:1b:a6:d3:
3e:bd:e8:20:83:bd:4c:6d:ff:48:4a:a0:98:d6:6a:cc:26:df:
cf:15:87:a4:88:9d:b6:5e:f1:62:7b:13:51:08:97:18:49:00:
b3:89:b0:98:04:41:e2:19:58:db:41:14:77:54:b6:8c:35:84:
dd:ee:ce:c7:7e:f8:da:8c:d5:ef:ea:bc:74:65:bd:da:26:44:
95:4f:11:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:13 2023 by rpki-client on console-ams.rpki-client.org