Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25C674AE5BB611ECB90410C25A40D577.roa
File: 25C674AE5BB611ECB90410C25A40D577.roa (raw, json)
Hash identifier: wV9PGNY/+WVD+T1MB9MnLgKh5ucy8dNUae2FtOSzS+o=
Subject key identifier: C1:0A:94:36:53:F1:2F:52:5A:55:A4:4D:B2:18:60:F2:24:EC:DE:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 13A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25C674AE5BB611ECB90410C25A40D577.roa
Signing time: Mon 13 Dec 2021 01:44:02 +0000
ROA not before: Mon 13 Dec 2021 01:43:58 +0000
ROA not after: Fri 30 Dec 2022 01:43:58 +0000
asID: 135097
IP address blocks: 154.204.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5029 (0x13a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 13 01:43:58 2021 GMT
Not After : Dec 30 01:43:58 2022 GMT
Subject: CN=61b6a562-ebec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:6c:fe:24:9a:9d:e1:8a:3e:01:7f:9f:b5:
34:bd:80:ca:4c:77:9d:65:47:b2:9e:a7:d0:4e:f2:
85:05:12:5f:1f:2b:65:49:60:2b:7c:7e:c3:79:4a:
6f:fc:15:1d:4f:f3:80:d9:79:12:ee:e1:51:ba:b3:
fa:ab:94:a6:26:e7:6d:3c:18:34:18:ad:04:7c:0d:
02:34:8e:bd:a8:c0:36:32:4e:13:c1:68:70:d4:e2:
53:1f:01:c3:e8:93:fb:48:23:dd:9c:4d:eb:f4:90:
f8:34:b0:e8:c5:a4:62:87:be:c1:9a:42:60:fb:df:
9f:1c:12:e3:69:78:cc:3f:74:60:a9:98:85:83:59:
d7:55:33:3f:6c:23:da:b5:e1:f3:ca:e2:ef:e7:4e:
86:04:a1:a2:0f:90:31:ec:27:b4:39:d5:1e:53:d4:
45:37:4a:78:b7:5e:bd:7d:2a:5b:37:58:b9:cf:ef:
fa:72:11:23:1e:0b:06:84:a0:c6:38:9f:b3:da:e1:
51:8b:71:73:d4:d1:b3:a4:a8:b1:72:4d:08:0a:f7:
fa:cc:6b:c2:ef:e4:b3:bf:14:d0:f9:a0:64:e4:c4:
72:19:22:15:a6:7e:d2:25:a9:59:b2:54:32:e9:8c:
4e:e1:cc:b7:6f:19:59:57:f4:d3:5c:f3:33:31:9f:
ee:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0A:94:36:53:F1:2F:52:5A:55:A4:4D:B2:18:60:F2:24:EC:DE:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25C674AE5BB611ECB90410C25A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.68.0/24
Signature Algorithm: sha256WithRSAEncryption
27:1c:ac:08:88:b3:6a:e1:56:66:37:3a:5a:f7:c1:35:b6:11:
87:7b:2e:30:4d:ca:0b:be:1a:a7:66:bc:0c:0b:3f:8c:4e:8b:
89:94:cd:40:3b:0b:15:a9:c0:32:b5:e9:e5:aa:8a:e2:83:1a:
57:48:9b:20:ee:22:50:95:d9:56:8c:9d:35:f9:60:c0:65:6e:
ca:d5:06:df:2b:bd:ad:c1:a2:c0:41:dd:64:11:31:98:bf:26:
9b:aa:9b:c8:ab:eb:b0:85:2f:33:68:b3:b0:4e:e4:29:ce:3d:
6b:6c:93:cf:77:ec:88:c9:39:aa:cf:30:05:c7:a2:49:4d:50:
27:2a:d4:e3:a9:39:a1:38:9b:84:64:67:bc:93:5b:59:f3:52:
6f:a6:9e:14:95:f8:f4:c5:74:f5:f5:3f:67:4c:fb:e5:89:9f:
a5:ca:41:57:0d:6d:fb:45:29:1b:29:7a:50:0d:5d:08:67:4b:
f8:ca:cc:b7:28:43:5f:83:fd:7b:b1:4d:a5:71:ff:69:f9:9d:
01:33:75:49:95:a8:67:76:62:6e:78:09:50:6b:a4:eb:7c:17:
c4:9d:e8:74:59:3d:c1:ba:64:e6:a7:cf:0b:59:2c:6c:df:cd:
03:81:21:6f:46:29:9c:f2:95:ba:6d:d6:bd:b0:6a:3f:ab:48:
a5:00:f6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:05 2023 by rpki-client on console-ams.rpki-client.org