Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28789DAA488611EC88943936D8A014CE.roa
File: 28789DAA488611EC88943936D8A014CE.roa (raw, json)
Hash identifier: zxC21OR1ijScNNp/QH5WA++WCQa9KA6CEDjeo4+7CtY=
Subject key identifier: F0:63:DA:61:A0:FB:BF:84:9D:8C:3D:31:45:B0:60:19:20:C2:B3:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0D4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28789DAA488611EC88943936D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:42:38 +0000
ROA not before: Fri 19 Nov 2021 15:42:35 +0000
ROA not after: Sat 19 Nov 2022 15:42:35 +0000
asID: 139879
IP address blocks: 154.80.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3402 (0xd4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 15:42:35 2021 GMT
Not After : Nov 19 15:42:35 2022 GMT
Subject: CN=6196746e-4344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:88:09:a3:64:e0:f1:a3:cd:fd:20:98:53:93:
94:dd:8c:ff:4c:1a:3f:18:db:ac:58:de:bc:35:92:
ea:ad:88:8e:f3:b9:7a:13:c0:cf:55:e1:bb:fd:f2:
4c:a7:ef:7d:fb:0e:10:3f:56:1f:ef:f2:f3:42:6c:
88:81:3d:37:8c:39:3e:f0:fe:39:29:01:f0:05:54:
fd:d9:64:f0:ed:cf:ed:ad:7f:81:91:82:8d:e7:19:
20:70:a4:42:67:fa:5b:2f:a1:f8:80:df:e9:bc:a2:
5d:2e:97:a8:7f:e0:ab:a7:5b:94:49:96:e5:ad:9e:
9e:50:ae:01:16:31:b6:25:dd:db:6e:5a:f7:18:fd:
47:79:f6:19:6b:76:b8:88:5e:de:3c:64:f7:c2:f6:
ea:2e:79:84:7a:9d:fd:5b:08:1a:1b:c7:d8:1b:82:
d0:56:f1:47:49:a4:fc:9d:70:68:c2:97:6b:0a:42:
d3:17:5a:3e:8b:e0:bb:a1:9c:52:9b:2c:34:21:58:
e2:c8:52:b0:9e:f3:a3:d3:92:2b:69:9a:65:67:30:
6f:73:26:9c:67:65:e6:36:d0:ff:2a:ba:1c:6c:2b:
6e:73:92:b5:f8:2c:aa:59:ef:9a:53:ea:cd:e4:2b:
80:88:77:31:21:86:a2:e1:d5:15:77:10:39:89:21:
92:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:63:DA:61:A0:FB:BF:84:9D:8C:3D:31:45:B0:60:19:20:C2:B3:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28789DAA488611EC88943936D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.31.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:83:92:8e:e2:a9:51:10:f5:e9:70:27:82:df:e3:8e:4e:13:
0f:98:82:71:ca:d2:5f:a5:79:b4:8a:26:77:ec:f7:da:a1:fb:
1b:51:52:7a:36:9e:45:6f:dc:8e:c1:1f:60:2d:8b:b3:88:38:
cc:63:06:be:dc:df:62:d5:4e:01:78:9b:cb:6a:19:eb:12:48:
20:75:7d:75:2a:fb:06:ac:05:95:32:31:ec:29:74:32:f6:ae:
cf:7e:78:c9:32:f6:80:0a:28:f4:4e:a2:68:05:1d:09:06:a5:
7e:a9:e7:dd:5b:87:b6:a2:4b:a4:46:ca:38:8c:4e:a3:59:29:
9c:6c:2a:15:6f:37:0d:8f:c5:4c:fe:7b:90:08:0a:52:13:6f:
eb:26:46:c5:f6:b6:4d:ec:86:ed:45:ed:09:49:78:de:36:db:
f9:23:ce:56:7f:81:1c:7e:fa:14:48:24:38:66:c8:2c:47:38:
1a:27:9f:4b:c5:bb:6d:18:63:fd:1a:19:c8:b0:e4:29:d6:92:
7e:a0:73:ca:fd:f5:25:5a:c8:80:7a:3b:d6:d5:61:fe:0e:a9:
54:1d:8f:3a:50:2c:32:7c:6f:49:b1:fb:10:68:c3:14:b1:6b:
bb:f4:f4:38:c3:f6:42:a1:87:1b:e8:4e:cc:4b:7d:3e:96:d0:
04:54:98:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-fra.rpki-client.org