Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F3AC5468C5D11EBBF66F545F8AEA228.roa
File: 1F3AC5468C5D11EBBF66F545F8AEA228.roa (raw, json)
Hash identifier: dE2ECoWr9BjwivcM5T2gCBlPmRJo9U2aC8a56sXw9FE=
Subject key identifier: 4C:D3:2D:F1:E6:21:E9:3F:9A:4D:1B:62:72:DC:C2:DE:B2:B6:59:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0562
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F3AC5468C5D11EBBF66F545F8AEA228.roa
Signing time: Wed 24 Mar 2021 04:55:15 +0000
ROA not before: Wed 24 Mar 2021 04:55:11 +0000
ROA not after: Mon 26 Sep 2022 04:55:11 +0000
asID: 133199
IP address blocks: 154.197.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1378 (0x562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 04:55:11 2021 GMT
Not After : Sep 26 04:55:11 2022 GMT
Subject: CN=605ac633-3bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:e2:06:69:37:24:d8:79:d7:48:cd:c6:6f:
6e:17:33:79:80:03:b4:77:3a:fa:bb:db:00:45:68:
4a:5e:b0:3f:ee:60:6b:85:94:cd:a7:1d:b2:6a:ce:
98:30:a0:0d:04:82:d4:c5:fa:47:ea:87:87:ba:79:
fb:49:8a:ed:35:6d:80:f9:56:d8:2f:3a:51:be:c0:
d2:02:b1:b1:07:23:f4:9c:26:71:3b:f3:a4:8a:47:
55:5f:60:d4:3b:4a:91:0e:bb:25:29:9d:fd:7d:3b:
e0:ab:76:4d:ba:ed:c3:06:bf:e5:bb:98:eb:bc:88:
e2:20:ba:aa:5b:58:a1:2c:cd:19:2f:a6:1f:9f:8b:
6b:c8:6f:cf:ec:2d:1d:a4:b4:0b:0e:4e:a0:fd:b7:
52:b6:3a:c4:f6:42:39:45:3f:85:06:57:79:8f:24:
2c:60:98:4d:f3:d1:eb:ae:49:6f:c4:22:20:2c:d2:
7a:43:71:65:5c:27:50:58:a3:94:2e:58:e5:56:08:
9c:39:e9:f4:be:b1:a6:92:26:63:c8:f7:a5:6e:0d:
d2:da:1b:12:62:9e:6c:26:50:74:25:57:e0:28:5f:
01:80:8c:1a:9a:a0:ce:02:85:27:16:de:57:ff:6a:
f9:80:f2:15:dc:bd:1d:a7:ae:40:a9:3e:c3:e3:a9:
6a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D3:2D:F1:E6:21:E9:3F:9A:4D:1B:62:72:DC:C2:DE:B2:B6:59:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F3AC5468C5D11EBBF66F545F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.49.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ea:fe:3a:45:00:ec:cb:9e:2d:66:2b:80:3c:b5:a0:47:eb:
33:ae:4c:3b:75:f6:26:7d:bc:49:76:ba:bf:f6:60:a1:88:9c:
4e:68:0e:ea:7c:51:05:cb:30:fc:42:1f:a2:20:da:41:50:43:
4d:69:48:10:2e:38:03:48:10:08:b8:46:2e:18:78:19:de:f9:
13:24:55:4b:44:0d:32:6c:2b:6c:9d:97:5e:40:af:4d:0f:29:
e0:84:af:58:25:9e:26:ce:bb:ef:95:43:cc:25:c0:05:cf:c3:
8b:d0:67:05:d0:9e:cf:00:d0:69:3b:66:9c:9c:98:e2:be:49:
1f:c6:0f:36:19:6b:bc:63:66:8c:47:67:1e:f7:3e:da:5a:e2:
99:02:5f:f5:61:63:dd:17:22:a9:93:74:23:29:0f:5b:0f:6e:
64:df:17:75:28:ac:6f:13:ce:5a:f7:9e:61:40:43:04:68:56:
0e:12:61:a6:4d:dc:8c:36:40:2d:11:2a:09:cc:48:01:59:ac:
66:0d:aa:68:de:6b:28:2a:d2:38:ff:4d:06:ab:69:44:21:0c:
92:ee:7e:f7:ff:76:a5:aa:3d:65:c4:91:c5:12:60:7c:7f:a4:
85:80:d6:02:9e:95:4b:83:42:38:71:00:2f:84:83:17:13:53:
1f:9b:2b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:05 2023 by rpki-client on console-ams.rpki-client.org