Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AB1B854E57B11EB81AE1827F8AEA228.roa
File: 7AB1B854E57B11EB81AE1827F8AEA228.roa (raw, json)
Hash identifier: oRUjuZvQ9aM7NlxIpvZ2SwwLbbH6gkfxAzZcBlph2jg=
Subject key identifier: F8:DB:39:4D:2B:1F:82:BD:A8:32:2A:29:04:2B:0D:84:7A:DC:43:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 079E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AB1B854E57B11EB81AE1827F8AEA228.roa
Signing time: Thu 15 Jul 2021 14:46:47 +0000
ROA not before: Thu 15 Jul 2021 14:46:43 +0000
ROA not after: Sat 09 Jul 2022 14:46:43 +0000
asID: 397630
IP address blocks: 154.201.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1950 (0x79e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 14:46:43 2021 GMT
Not After : Jul 9 14:46:43 2022 GMT
Subject: CN=60f04a57-6e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:72:c3:13:d7:ff:f0:1c:7c:3e:11:9c:11:88:
8f:c1:43:ff:aa:f3:cc:b8:c6:8e:f6:82:fd:bf:ae:
cb:19:0a:12:79:c3:3c:0d:d0:66:2f:7f:9a:a2:ca:
a8:6d:73:07:2c:10:51:80:c5:b8:4b:f8:32:9c:a7:
0d:b9:4b:b4:a7:bb:0e:ba:1c:90:e6:bb:ca:78:2b:
72:71:7b:b6:1e:80:ef:d4:2c:8d:16:8d:1f:2d:fc:
be:b8:1f:88:ac:c6:e4:a2:66:f7:f7:4a:52:7d:f8:
e1:b5:4b:16:4e:23:37:4b:88:64:8f:68:3c:77:11:
eb:fc:31:c4:b1:fc:19:0f:f7:a3:c3:8c:f4:44:87:
03:7d:fb:d6:8b:0e:ae:2c:06:53:15:9b:2e:36:ba:
ff:9f:d9:e7:00:3d:2f:57:f8:4f:59:f0:8e:8a:7c:
f6:48:41:e2:a6:68:10:b3:6e:ca:32:91:5a:4d:b5:
d4:b2:0a:42:2e:9c:63:d2:25:51:f2:00:22:43:9d:
da:85:75:2a:f0:cf:1d:9c:d4:34:4a:a9:df:22:39:
48:2a:bf:9c:e7:3d:97:f8:75:60:f1:3b:b1:e7:bc:
8e:ac:9d:fd:88:39:d7:6d:38:50:b4:b8:00:bc:42:
3b:73:ec:20:6f:97:b2:5e:86:f7:b2:06:d1:4b:5c:
2c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DB:39:4D:2B:1F:82:BD:A8:32:2A:29:04:2B:0D:84:7A:DC:43:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AB1B854E57B11EB81AE1827F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.36.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:98:7a:60:ab:01:22:15:21:00:3b:72:f7:fb:79:f6:4e:37:
5f:8a:48:c3:c4:f6:29:fa:fa:58:a2:51:4e:75:55:60:00:49:
65:a2:f6:6b:89:db:5c:7f:28:eb:07:7f:72:e2:e1:a2:87:8b:
f9:f1:7d:29:39:49:0a:9b:5b:43:dc:7a:7c:c5:f5:ce:6a:42:
e0:95:ac:87:2c:29:64:75:4e:38:ac:cb:78:07:9a:5e:f8:c0:
32:63:78:e0:d8:e1:54:08:d1:2e:e1:59:42:1c:8c:a3:ab:fd:
03:ce:5b:d4:ef:37:06:a2:99:6e:ce:ac:06:2c:6a:6c:b8:b0:
af:6e:70:83:cd:bb:6e:f4:68:1e:51:b8:1e:1c:49:70:1d:90:
a9:aa:22:96:6e:42:91:91:25:fb:da:01:25:1b:ac:47:78:79:
90:bc:15:c1:cf:f6:ad:1c:bd:1c:b2:10:9d:50:0d:95:cf:ef:
0b:51:91:a4:c0:38:5d:13:38:00:c5:2c:9c:44:fb:3b:fd:36:
b5:d3:7d:ce:53:1d:95:a5:4e:43:7e:8f:d2:21:ba:6a:53:83:
bf:6c:2f:c6:0b:b6:51:f1:cc:84:47:9e:b4:55:c6:4d:06:32:
40:4d:c8:fb:09:42:29:8e:d3:d7:68:1e:29:a8:e5:78:17:40:
8e:25:e1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-ams.rpki-client.org