Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/531D386CD0FE11EC928319E2F1222468.roa
File: 531D386CD0FE11EC928319E2F1222468.roa (raw, json)
Hash identifier: ItcizNwyNPRnaWbmwK3hFcSRcI6u3e1W4sPpv48zpMc=
Subject key identifier: 96:AF:58:92:79:93:10:2A:91:87:27:7A:15:A4:FC:F0:2B:78:05:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 162F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/531D386CD0FE11EC928319E2F1222468.roa
Signing time: Wed 11 May 2022 07:45:28 +0000
ROA not before: Wed 11 May 2022 07:45:24 +0000
ROA not after: Fri 30 Jun 2023 07:45:24 +0000
asID: 136907
IP address blocks: 154.81.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5679 (0x162f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 07:45:24 2022 GMT
Not After : Jun 30 07:45:24 2023 GMT
Subject: CN=627b6998-eb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ce:3f:25:19:a0:97:55:e2:c9:a7:4f:7b:c7:
55:ed:b5:15:53:81:ef:f7:51:6b:57:8b:82:c5:23:
52:c2:83:ee:33:60:33:6e:6c:c5:e0:00:cb:44:82:
d8:b6:81:6a:cb:db:24:f1:ee:40:9d:00:ee:dd:a2:
73:cf:ba:4e:42:df:9b:3e:d8:1b:9e:43:a5:4a:8f:
8c:09:18:5e:5f:60:12:b7:49:40:f8:fa:48:2c:cb:
72:90:41:e6:d1:14:1e:9b:fa:b7:e4:74:ef:88:f2:
9c:54:c1:0d:e0:5f:6a:07:2b:d3:a9:1e:06:9a:59:
b9:b8:af:80:e2:f0:51:aa:07:45:56:da:ff:65:b1:
46:68:1e:16:94:a1:0f:5f:45:49:62:91:1c:de:a3:
f2:39:6d:91:21:cd:8f:97:00:32:b5:ad:c3:0c:97:
f6:71:e0:d7:a5:cf:61:95:6d:e8:16:47:b1:4b:90:
31:e5:c8:8c:de:7d:22:41:71:f5:cd:64:c6:6e:ed:
e9:9b:a8:06:d7:53:9c:44:fb:fd:5b:0c:05:07:a7:
ec:43:ef:4f:9f:8d:18:02:30:fb:03:66:bb:33:3b:
81:c6:c6:ec:9a:09:91:b2:da:d8:c1:e2:c4:76:4c:
f2:68:fb:aa:a4:8d:e3:a7:ad:2a:07:8f:dc:85:70:
db:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AF:58:92:79:93:10:2A:91:87:27:7A:15:A4:FC:F0:2B:78:05:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/531D386CD0FE11EC928319E2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.16.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:5d:95:d8:de:19:1c:ac:87:c5:d3:7c:80:42:92:46:20:50:
0e:60:6e:24:78:c3:e1:6b:88:9f:26:97:d2:a0:e6:e5:a6:cf:
c1:6f:e4:f9:b8:8a:5e:03:f7:a5:6a:0c:4c:ea:43:6a:1a:96:
d9:cc:29:3b:06:10:75:91:7b:57:27:75:b4:6c:fe:93:8b:06:
0f:be:b4:b4:6a:16:c3:8c:48:e0:6e:b7:50:49:b9:6e:b0:8d:
b5:71:aa:db:36:e9:a0:3b:41:7b:8e:a1:f2:20:fb:79:af:3d:
d8:95:93:9e:d6:2f:e8:62:f7:2f:33:01:70:9b:3e:dd:6f:db:
f9:3b:2e:b3:42:09:10:8d:98:55:3d:3c:d6:80:1f:27:75:4f:
aa:be:91:7d:4b:7c:9c:1c:e7:3c:48:18:96:18:9b:1f:a0:3e:
d8:fd:02:b6:d8:ec:63:4b:09:f1:57:cd:79:8e:a6:a8:77:f9:
54:c6:15:d9:73:d2:59:a4:1c:14:3c:00:e1:4d:19:4e:eb:cf:
85:d1:2b:52:7f:9d:75:a8:03:03:cb:d5:3a:e1:d4:7f:12:7f:
be:75:66:e7:b0:5c:1e:91:c1:3c:68:ed:16:64:ff:bc:8a:e9:
a9:66:49:50:c8:4c:f3:87:50:51:0b:f0:95:8d:1f:0b:ba:20:
7a:6c:69:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-fra.rpki-client.org