Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E579146620711EC84C210E65A40D577.roa
File: 2E579146620711EC84C210E65A40D577.roa (raw, json)
Hash identifier: lUGX4Mb23J/JsoOJfcErKs4BrIGVNjqRwYdgP+nYHPM=
Subject key identifier: E1:76:4B:AC:31:86:32:FF:A5:3C:36:8C:1E:AA:0F:98:02:8F:15:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1408
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E579146620711EC84C210E65A40D577.roa
Signing time: Tue 21 Dec 2021 02:39:12 +0000
ROA not before: Tue 21 Dec 2021 02:39:09 +0000
ROA not after: Fri 30 Dec 2022 02:39:09 +0000
asID: 35916
IP address blocks: 154.85.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5128 (0x1408)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 21 02:39:09 2021 GMT
Not After : Dec 30 02:39:09 2022 GMT
Subject: CN=61c13e50-a1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:51:e2:cd:ee:57:08:01:eb:c9:23:70:d1:37:
e3:c9:ae:bf:1c:cb:ae:2d:6e:16:70:3d:4b:7e:e5:
c3:6f:69:1b:56:f4:bb:0c:df:eb:f4:05:08:43:a2:
92:4f:ea:86:fd:8a:03:ba:46:43:42:e3:fc:20:fb:
b0:76:a4:bb:83:b2:a8:75:8a:3e:97:46:85:bd:e7:
79:a2:e7:6b:26:68:24:3a:f9:35:a0:b4:72:75:41:
46:ec:64:fb:66:4b:4c:22:fa:f6:98:8d:4f:05:90:
d0:f5:a7:81:d9:4d:ec:ae:ec:42:3c:b1:fc:bb:03:
74:ad:e4:b3:94:ff:a1:d8:d2:6e:94:aa:81:1e:10:
d7:0f:aa:0a:cf:d3:c5:1f:b8:20:82:b4:79:52:f1:
cb:77:4a:cd:46:41:31:d5:b4:b6:32:5e:aa:a5:10:
b2:f1:dd:40:08:e1:d1:8d:be:6f:03:67:83:40:6d:
1b:df:be:88:9c:1e:62:c3:c0:38:31:5f:85:ad:df:
9d:e2:8e:32:44:e3:4a:a3:2a:3c:80:ae:47:d4:b2:
7c:fe:a0:81:fe:2e:ae:fa:e5:a1:fe:a6:b0:72:1e:
8d:4b:77:16:37:96:43:6a:aa:ff:8d:5e:42:4d:d1:
1a:0b:c4:2e:11:6d:7b:dc:ca:bf:1e:72:77:25:f1:
d7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:76:4B:AC:31:86:32:FF:A5:3C:36:8C:1E:AA:0F:98:02:8F:15:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E579146620711EC84C210E65A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.16.0/20
Signature Algorithm: sha256WithRSAEncryption
56:2f:27:a5:c8:51:5c:62:ef:6b:db:3f:f5:de:72:47:0c:59:
74:50:45:05:69:30:db:68:83:2a:0b:81:e3:2a:9c:05:e3:9a:
4d:64:0b:99:1f:a0:a7:e7:5d:f3:51:e6:e1:6f:c3:82:a1:48:
4d:d7:df:39:71:5b:80:4e:c1:05:c6:0c:8c:f0:24:a5:65:b8:
ec:de:32:05:4b:38:45:78:f0:6e:d0:1d:aa:ef:3b:02:4f:53:
a9:3d:7e:1c:dc:b5:39:70:6a:8b:17:37:c5:16:13:a3:b9:c1:
22:10:f6:fa:98:7d:a2:b0:74:9b:09:eb:72:0d:d8:e3:22:42:
0c:7f:12:09:42:ee:44:90:c1:46:90:e2:f3:fd:6d:21:70:fd:
ef:e4:e0:2e:13:b6:54:78:aa:cd:78:c7:9e:e0:ba:4d:94:2c:
cb:1d:c7:c6:31:25:8e:41:0d:48:8e:8e:4f:d5:97:d8:ce:56:
56:24:43:1a:cb:ae:a4:db:86:1f:8d:57:79:b1:52:76:72:8f:
a5:cb:d1:f6:ff:33:e0:bc:97:57:d3:e2:22:b4:2a:5b:7e:c0:
0b:46:97:d8:fc:5e:21:8b:8e:b6:e1:85:3d:37:15:9d:fe:01:
01:8a:ef:04:c1:0b:34:83:a3:52:6d:c2:81:b2:e5:a1:40:dd:
79:9d:a5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:05 2023 by rpki-client on console-ams.rpki-client.org