Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FAEBE525BB711ECBE097CC55A40D577.roa
File: 3FAEBE525BB711ECBE097CC55A40D577.roa (raw, json)
Hash identifier: HESuX+4ZpaErhYZ6LWtf1aglDtzPf3uYTXqGMKldgeM=
Subject key identifier: F7:D8:40:54:EF:B1:E8:22:4B:0D:B4:D8:25:FB:A7:CF:ED:C7:09:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 13C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FAEBE525BB711ECBE097CC55A40D577.roa
Signing time: Mon 13 Dec 2021 01:51:55 +0000
ROA not before: Mon 13 Dec 2021 01:51:51 +0000
ROA not after: Fri 30 Dec 2022 01:51:51 +0000
asID: 135097
IP address blocks: 154.204.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5061 (0x13c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 13 01:51:51 2021 GMT
Not After : Dec 30 01:51:51 2022 GMT
Subject: CN=61b6a73b-8092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:76:30:d6:d8:b0:e6:35:a7:0a:3d:e4:e2:
47:f4:4a:64:55:ad:39:73:b3:0e:fb:ab:61:e8:fb:
8e:9b:cc:83:df:b6:c8:00:a8:c4:a6:87:c0:c7:14:
17:30:70:0d:1b:8c:f8:71:1f:32:2a:ea:1a:e9:6e:
98:e4:18:f0:de:fa:f5:c0:34:dd:9e:fd:17:af:b9:
cb:1c:6a:d8:c0:1b:ba:e7:23:dc:68:86:6c:c9:25:
fb:55:82:d2:a8:34:85:52:3b:18:88:c9:36:5e:e1:
74:86:4e:92:10:33:b9:7a:72:5f:4f:bd:07:41:3b:
af:27:3d:08:1f:23:71:6d:b8:77:6a:aa:05:d6:c7:
c2:9b:e7:18:bf:11:ac:ae:6e:1d:11:eb:2e:69:03:
09:b7:6e:2c:ce:ce:fd:74:5d:bc:14:e2:cc:d9:3b:
71:53:bf:03:7a:f1:7f:07:ce:a4:43:55:62:62:dd:
3c:2e:e2:6d:c1:8a:8c:90:0d:ee:f7:87:dd:74:69:
1a:58:5a:9b:dc:10:e4:82:97:70:28:3c:8a:4c:b2:
7f:43:51:c2:c9:3e:87:39:7b:ff:54:d9:a3:9d:11:
9a:96:63:ca:db:da:12:6a:70:33:21:f3:6e:fd:b9:
33:d0:a6:41:c2:03:51:31:0a:dc:5b:c7:05:e3:29:
8f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D8:40:54:EF:B1:E8:22:4B:0D:B4:D8:25:FB:A7:CF:ED:C7:09:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FAEBE525BB711ECBE097CC55A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.76.0/24
Signature Algorithm: sha256WithRSAEncryption
82:52:ef:3b:6d:7c:65:00:5c:15:a2:0c:2e:42:19:9f:f0:99:
dc:88:43:c7:59:ae:57:31:ef:eb:de:3f:6c:6b:e6:ac:e7:43:
48:e0:4a:2d:6e:e6:68:85:29:7c:42:d2:63:90:34:45:67:c9:
84:60:ff:a2:c0:74:7b:96:7f:ac:28:b3:72:71:2e:3c:23:52:
65:dc:95:bd:c9:91:84:70:b0:e8:1b:b9:7e:89:fa:be:94:38:
bb:4e:68:a3:39:f7:d7:88:ce:fb:67:87:21:e2:34:2a:c6:96:
82:e4:df:0e:41:43:1c:70:40:1f:e9:83:92:99:53:8d:67:6d:
c2:d2:03:43:cc:1a:0b:b7:de:63:7f:61:d2:c7:97:ec:10:1d:
ce:b1:f4:42:eb:ae:cd:a3:41:67:65:4f:ed:6c:e1:09:0b:87:
96:04:0b:85:d5:2d:98:54:87:c7:6a:41:94:e4:10:0f:d2:9a:
be:0b:ed:6b:a0:b4:df:c3:4f:02:a5:f4:f8:12:a8:d6:f3:bf:
df:7b:6b:f1:65:0d:b8:06:0c:92:85:c5:fc:21:fb:e1:43:8e:
90:8b:53:1b:58:9e:12:b8:49:91:71:51:be:ee:57:78:35:9b:
41:8a:40:c8:a3:44:4c:b6:4d:c5:c6:c9:58:10:52:e3:b4:37:
62:70:ea:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:06 2023 by rpki-client on console-ams.rpki-client.org