Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/853E23F890AB11ECBF99E5BB5A40D577.roa
File: 853E23F890AB11ECBF99E5BB5A40D577.roa (raw, json)
Hash identifier: ZasRu5T15l5B+Fj39bCiMk3SvdVJ5Ezb9kYkiUc6Wjg=
Subject key identifier: FE:88:09:90:8F:38:49:A0:78:65:30:16:5C:E1:B1:7B:0A:72:86:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 14E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/853E23F890AB11ECBF99E5BB5A40D577.roa
Signing time: Fri 18 Feb 2022 11:11:29 +0000
ROA not before: Fri 18 Feb 2022 11:11:25 +0000
ROA not after: Fri 30 Dec 2022 11:11:25 +0000
asID: 137951
IP address blocks: 154.210.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5350 (0x14e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 18 11:11:25 2022 GMT
Not After : Dec 30 11:11:25 2022 GMT
Subject: CN=620f7ee1-1065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:49:39:92:5b:08:86:47:5d:be:eb:62:69:7d:
19:62:c8:9c:9c:67:e4:54:fe:0f:8c:fd:b2:97:5a:
6d:c1:c1:c2:5d:ef:bd:f1:4f:82:16:11:a9:ab:29:
4a:db:e8:75:90:bc:76:14:ca:b6:8a:11:fc:34:10:
b7:31:17:79:bd:40:93:29:71:cc:a3:95:21:a1:6f:
e1:70:a2:60:1b:29:7e:85:e5:48:33:95:39:5b:66:
7d:b1:41:63:3a:2e:56:17:a3:eb:ca:50:fe:80:c6:
b4:fb:e2:12:bb:3a:59:3c:cf:45:9e:92:6a:0f:3d:
55:e1:b1:8c:4f:10:ab:7e:7c:19:18:02:56:a9:2f:
42:56:76:49:dc:ca:c5:d5:07:e6:c0:9a:fe:57:51:
96:f7:ad:2e:63:c3:7a:85:33:08:34:01:7e:b6:2c:
75:34:8c:18:c0:43:e6:f5:82:42:62:29:96:c5:1f:
dc:10:bd:1f:fa:4c:cd:8e:6b:db:92:a3:a6:f3:fe:
fd:08:b0:50:d3:da:7e:24:e8:07:22:e6:4d:15:3a:
fd:5d:62:98:7e:d8:f2:ad:64:ea:e4:9e:bd:f0:1e:
71:80:81:4a:99:f9:aa:67:67:87:68:49:ee:a9:58:
af:61:b4:64:7f:5e:2c:c3:82:b2:cb:e8:72:d8:21:
78:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:88:09:90:8F:38:49:A0:78:65:30:16:5C:E1:B1:7B:0A:72:86:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/853E23F890AB11ECBF99E5BB5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.74.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:a5:64:41:df:94:0f:1d:18:0c:7b:53:ab:cc:8f:5e:2c:8b:
7c:e3:72:94:ba:f1:ed:b2:fb:31:20:27:d5:fa:ed:43:cc:a7:
b5:c4:5c:07:59:52:4d:c8:1b:6f:e3:56:36:21:86:d9:33:00:
72:24:d8:f5:7b:b8:f6:76:32:5c:71:2a:f0:27:96:26:3a:57:
01:81:f2:54:e8:99:0f:7c:52:0d:33:90:f3:36:3d:49:d4:15:
b8:f6:46:c6:6b:68:1a:b4:5d:1e:6a:31:34:91:77:ea:db:bb:
15:12:bc:17:4f:0a:d4:58:45:33:68:5c:03:2d:58:8f:71:e9:
81:34:eb:e8:f6:ef:7c:90:bc:f8:e1:ae:72:ea:59:74:5c:de:
7b:22:d6:28:39:72:7f:19:59:25:2b:43:a4:1e:73:c4:5e:ce:
ce:7e:1c:8b:67:00:56:a3:d9:80:2c:18:28:5d:67:ec:51:92:
cb:f6:d7:27:be:32:4b:d7:64:73:d0:9f:9c:0c:ea:a8:84:c7:
fd:88:9d:dd:b8:b1:5e:58:ac:55:a4:88:8e:8d:4e:43:a2:f1:
8b:03:46:7c:72:0a:85:64:4d:a5:d7:c2:35:ec:85:3e:0f:94:
b4:c4:1f:e2:2c:20:eb:ad:65:cc:0b:71:25:7b:a7:7c:34:b8:
4d:7a:92:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-fra.rpki-client.org