Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E03E2666F6F11ECAFF85BC25A40D577.roa
File: 1E03E2666F6F11ECAFF85BC25A40D577.roa (raw, json)
Hash identifier: IrqRg1uVUxLXl4LJbKqjOd6YXhoQjjrL4RXK2Nu8VCo=
Subject key identifier: 4E:4E:A2:A7:05:6A:37:2B:5A:B4:C2:C8:E9:0A:2C:E6:F4:F1:E7:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1437
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E03E2666F6F11ECAFF85BC25A40D577.roa
Signing time: Fri 07 Jan 2022 04:05:58 +0000
ROA not before: Fri 07 Jan 2022 04:05:54 +0000
ROA not after: Fri 30 Dec 2022 04:05:54 +0000
asID: 136744
IP address blocks: 154.91.136.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5175 (0x1437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 04:05:54 2022 GMT
Not After : Dec 30 04:05:54 2022 GMT
Subject: CN=61d7bc26-a6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ec:89:ba:3f:71:02:28:2c:31:40:8d:08:74:
4e:2b:7b:f3:e9:44:55:98:c3:90:f1:f2:6c:e8:e7:
ca:d6:70:f8:5c:b2:bc:bb:fb:8a:f8:f9:a0:72:14:
d6:be:fd:77:a8:fc:62:4d:bb:8b:1d:07:8f:16:df:
53:d9:78:f2:39:c2:e1:92:66:31:f1:cd:5c:f9:f5:
ce:9c:10:77:42:3a:54:95:0b:8f:9f:63:da:0d:64:
10:40:d5:05:98:f5:ba:63:f7:40:4e:fd:e4:db:74:
2f:04:46:3e:49:ed:58:d7:83:5c:c3:46:d9:4e:c4:
b7:b3:a7:4e:24:1e:50:01:5e:55:20:85:92:48:85:
89:1a:c8:6e:83:0b:2d:45:6c:8b:12:cd:32:e7:19:
52:4e:13:9c:95:47:37:ad:bc:e7:5e:bf:e9:f4:ec:
4f:14:94:fe:90:60:00:66:bc:9d:4d:07:68:7b:2d:
e4:a4:f0:a1:80:c4:68:60:e9:b5:ff:fd:14:45:8a:
c1:2e:c4:64:d2:14:92:15:21:6d:35:e9:f0:ad:75:
60:c1:98:cd:ed:66:19:7b:3c:53:1d:b8:5e:7d:18:
65:f6:aa:ad:8d:a1:30:88:ae:16:d2:96:ea:27:ec:
e5:8f:1d:f9:45:43:a8:e5:fa:3b:c1:e3:53:aa:25:
cf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4E:A2:A7:05:6A:37:2B:5A:B4:C2:C8:E9:0A:2C:E6:F4:F1:E7:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E03E2666F6F11ECAFF85BC25A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.136.0/22
Signature Algorithm: sha256WithRSAEncryption
40:ba:d5:ec:0c:b8:8a:bb:d3:3f:06:e7:e1:f8:08:32:81:10:
ca:7b:1b:5e:60:ce:c6:d5:11:ff:8b:12:e6:ac:a4:84:7c:f0:
3c:ce:d4:47:c4:a3:a6:f7:05:e8:6a:3c:2d:fe:56:85:9d:82:
6b:22:d3:b8:12:5a:f4:86:f4:01:94:75:a9:ae:7b:e4:f5:1f:
77:cf:b0:4b:f5:c4:a4:d2:b8:cf:d1:06:9e:31:e8:0c:d9:3f:
11:1a:3c:bf:70:93:46:0e:34:e4:f5:a0:2a:23:b8:a4:9f:28:
28:5b:85:2c:80:95:5c:d6:56:40:60:58:82:46:5c:42:79:83:
ff:8a:91:88:6d:9b:7d:3e:b0:55:3c:e4:1e:30:ea:4e:6a:d3:
71:0d:8b:55:09:64:af:8d:80:9d:c2:f8:51:5f:7c:95:61:7d:
3c:fc:5b:6f:31:98:a3:a3:cf:d6:7c:5e:be:08:da:d2:d4:5a:
37:5e:9d:8f:ef:c7:a6:8e:08:74:98:82:a5:c9:99:96:ce:b9:
27:d5:86:8f:79:83:21:8a:c4:28:2d:9a:5b:3d:33:fe:2e:95:
16:a0:2f:0d:da:ab:aa:de:1f:2b:45:3a:96:73:10:e3:21:92:
f2:f1:a5:ea:c4:aa:ce:55:52:31:d6:10:39:83:57:1f:7f:cf:
45:1e:15:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:05 2023 by rpki-client on console-ams.rpki-client.org