Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/862F5C54E58011EB90EC052FF8AEA228.roa
File: 862F5C54E58011EB90EC052FF8AEA228.roa (raw, json)
Hash identifier: YUXXPMJdUfoJjBuJGTCvwbv49utEdFtyTveWGhvbH50=
Subject key identifier: 44:F0:41:EC:8E:D5:B8:4E:E1:1A:A6:08:A5:9B:4B:C8:F1:CC:79:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0804
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/862F5C54E58011EB90EC052FF8AEA228.roa
Signing time: Thu 15 Jul 2021 15:22:53 +0000
ROA not before: Thu 15 Jul 2021 15:22:49 +0000
ROA not after: Sat 09 Jul 2022 15:22:49 +0000
asID: 397630
IP address blocks: 154.202.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2052 (0x804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 15:22:49 2021 GMT
Not After : Jul 9 15:22:49 2022 GMT
Subject: CN=60f052cd-4d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:60:59:c3:4e:a4:00:28:b8:c0:f5:ca:d1:bd:
60:0a:71:44:69:cb:56:eb:da:6a:06:b7:c2:05:aa:
47:34:dc:cc:46:b3:fb:36:d7:23:6c:d8:04:14:6d:
9f:ab:79:d1:25:06:56:98:dc:fe:13:79:24:4c:75:
9a:96:dc:69:77:e8:b0:e0:c5:71:72:fe:46:07:08:
54:63:76:f7:0e:f4:b8:e0:74:34:ee:86:46:02:c3:
86:e4:42:37:dc:c9:85:25:c9:40:73:7c:f5:66:38:
65:bd:6a:42:31:35:0f:91:58:1d:f1:9c:13:16:d8:
2e:dd:52:20:ab:8c:08:c0:68:99:18:1c:3e:a4:76:
bd:84:96:84:e4:86:5d:30:45:c6:5b:a3:99:61:03:
12:a6:61:d4:1c:57:67:16:78:35:8d:e4:ef:b7:7e:
f6:34:3a:6e:39:bf:5b:23:52:2e:a1:13:8e:79:57:
af:9c:90:ff:7f:3d:68:b5:f5:b0:47:31:7f:d8:9d:
ca:52:31:77:c0:07:3e:20:1e:b0:01:35:98:7e:b3:
da:ef:c7:02:15:3a:26:07:a1:26:86:4c:89:bc:9e:
0e:e4:8c:f8:1f:9d:28:38:ce:a8:5b:77:5f:14:74:
cf:df:4b:2c:4c:9a:ac:cd:de:dd:4c:b1:fa:48:36:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F0:41:EC:8E:D5:B8:4E:E1:1A:A6:08:A5:9B:4B:C8:F1:CC:79:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/862F5C54E58011EB90EC052FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.99.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:b9:e3:cc:14:17:a5:31:5a:16:19:df:1e:69:18:dd:ff:77:
80:63:05:65:17:89:9a:64:9f:d0:5e:8f:51:25:c3:8e:94:ee:
e9:d0:73:d9:e9:a0:1e:e9:65:22:5c:aa:32:56:d7:21:6d:8c:
af:2d:a6:9d:25:ab:ea:17:f4:55:5c:2d:5b:c7:a7:36:74:e1:
2a:f4:f7:89:5e:bf:07:0e:68:a1:22:0e:89:ce:d1:f5:ee:9e:
e4:e1:b8:5e:8f:d4:2a:03:75:20:d0:5d:ce:ec:e4:40:b3:f1:
0f:c8:95:b6:63:1b:00:3b:66:72:1d:e1:67:42:ca:30:9a:3a:
86:96:7f:b6:00:05:16:bf:72:ab:7e:45:d7:a3:61:67:65:96:
86:c7:d9:52:45:db:30:97:24:4c:fc:ac:dc:7d:59:f8:b4:2f:
c2:90:78:27:e2:64:5d:32:fb:35:e2:51:04:f1:ab:c8:9b:3e:
4f:3c:5e:3b:53:a8:51:73:51:50:e2:ab:60:f2:47:cf:19:cd:
b1:bd:46:f2:a5:61:af:f6:bc:7b:e5:c2:cc:ec:53:7d:e2:3a:
9c:28:96:36:82:04:f4:e0:d9:d2:32:c0:eb:65:66:9f:df:df:
e2:63:6c:48:88:4e:07:16:8e:2d:de:82:6e:93:04:26:cc:0c:
f7:8b:21:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-ams.rpki-client.org