Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DBEEA98488711ECA3886D38D8A014CE.roa
File: 2DBEEA98488711ECA3886D38D8A014CE.roa (raw, json)
Hash identifier: DPSuSYCSZuBiQ0+QKwWLoR4wLC9+gjqBISXNcgLDTRk=
Subject key identifier: D5:57:0D:40:7B:07:1E:A8:38:E3:F9:E6:66:86:71:D4:33:F2:E5:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0D5C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DBEEA98488711ECA3886D38D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:49:57 +0000
ROA not before: Fri 19 Nov 2021 15:49:53 +0000
ROA not after: Sat 19 Nov 2022 15:49:53 +0000
asID: 139879
IP address blocks: 154.80.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3420 (0xd5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 15:49:53 2021 GMT
Not After : Nov 19 15:49:53 2022 GMT
Subject: CN=61967625-1422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:67:57:8c:dc:40:f9:7e:7d:48:a7:1a:c0:
75:63:5d:a0:d7:19:d2:ff:cc:ed:55:57:95:c7:68:
29:8a:14:8e:a3:e6:d1:d1:ed:b4:d4:76:52:ce:73:
c4:32:90:ec:ae:1f:be:37:1f:ba:22:a5:f3:4e:17:
af:1a:89:18:58:a3:4e:45:47:d6:19:df:23:27:65:
30:9e:0e:40:67:5a:6a:8f:4f:8d:a7:2b:30:b8:ab:
93:e4:79:f0:58:11:b4:86:89:67:04:ff:fa:a5:83:
57:3c:9a:de:f6:b2:df:d1:e3:16:b1:76:0d:fa:6d:
e4:de:fb:c0:33:df:6e:a2:cb:77:6a:ca:eb:12:7b:
74:71:a9:97:8a:33:89:a2:3f:1b:fa:d7:94:e7:c1:
40:6b:3a:c7:ff:27:c1:93:79:ee:ff:7d:83:74:71:
3b:6c:62:98:31:6c:7e:4f:96:94:50:35:00:7a:e7:
8f:52:d4:ba:ee:7c:f3:51:63:c9:11:88:9e:3b:b4:
3a:88:71:03:c2:5e:1d:ee:f4:2f:44:e0:10:80:ca:
4b:51:14:f9:26:ae:0d:00:e1:16:61:88:23:e3:e4:
43:52:a0:f2:8d:64:a2:5f:5c:95:f4:21:1a:a6:88:
6e:90:c7:0b:20:be:4d:c2:03:aa:b6:0d:3a:41:d1:
69:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:57:0D:40:7B:07:1E:A8:38:E3:F9:E6:66:86:71:D4:33:F2:E5:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DBEEA98488711ECA3886D38D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.40.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ee:88:77:bc:a5:03:77:c8:c1:f8:88:dd:eb:d4:55:e9:62:
59:2c:45:8c:39:ac:9d:ca:79:aa:8c:0f:5c:31:fd:74:1c:ca:
61:3a:f6:39:36:ce:6b:0e:7f:26:3b:8b:f7:c6:05:58:72:73:
c5:77:a8:ff:ce:3a:13:8a:2f:57:20:c8:d5:04:b8:a1:09:4b:
b2:7d:27:c5:a2:58:d4:92:ef:05:fa:04:4f:32:d6:88:78:0d:
5f:42:48:57:35:23:f6:77:9f:1a:c6:42:9d:37:e4:fa:95:26:
0d:bb:53:6d:a4:fb:ab:48:ea:da:ed:28:45:6e:76:c1:89:59:
91:f9:00:f1:ff:e7:27:06:f9:04:55:c5:70:d3:58:6a:c0:a3:
c3:8c:3a:95:1a:bc:c9:fe:8b:12:db:2b:f5:ca:81:4e:ef:1d:
d9:90:34:20:bf:f8:87:95:7d:35:cb:60:ad:4b:cb:5b:28:8c:
a9:54:f0:c5:f5:e1:e7:dd:0f:31:43:ed:84:e6:08:0e:06:91:
6a:6c:10:e6:f1:79:3b:27:b7:47:c0:69:93:79:7a:de:09:2d:
12:e8:b5:68:c2:19:26:b5:d0:dc:e9:c3:fc:a9:51:c2:7c:48:
b7:e8:d6:3d:56:34:5f:5f:28:d4:86:37:da:86:cf:f4:8b:bb:
11:d3:9a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-fra.rpki-client.org