Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86B3D722598411EC89598AC25A40D577.roa
File: 86B3D722598411EC89598AC25A40D577.roa (raw, json)
Hash identifier: 7c6rcRfF6X281AdsAw5vAjynhv3WVYZAQb4byHJBuPQ=
Subject key identifier: 3E:E3:07:80:BF:12:B6:6A:DF:F5:D6:B6:7F:C7:8D:2B:FD:70:B6:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 137A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86B3D722598411EC89598AC25A40D577.roa
Signing time: Fri 10 Dec 2021 06:43:47 +0000
ROA not before: Fri 10 Dec 2021 06:43:42 +0000
ROA not after: Fri 30 Dec 2022 06:43:42 +0000
asID: 135423
IP address blocks: 154.210.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4986 (0x137a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 10 06:43:42 2021 GMT
Not After : Dec 30 06:43:42 2022 GMT
Subject: CN=61b2f723-ec02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:09:ca:0a:61:a8:59:03:f9:7d:da:27:cd:e4:
29:c7:4a:6d:9d:bc:2a:51:8f:07:14:14:b9:d8:ef:
02:49:84:fa:11:9f:31:a3:fc:70:78:b1:38:f5:37:
c3:9e:71:4f:d6:ba:b5:2c:13:c2:7e:a0:cb:a1:0c:
2b:7e:63:74:bb:34:19:92:39:71:f5:42:6e:a9:e9:
4d:65:6b:d8:4b:33:68:3d:7b:e0:a6:f6:60:16:61:
50:66:f6:36:b0:b9:3a:cb:33:4c:f7:43:ae:a8:5b:
bc:6f:ed:37:eb:a2:90:93:d2:34:fb:db:9f:32:7f:
97:f0:4d:40:2c:b7:38:87:8e:b4:fa:e7:db:a3:5a:
96:f3:26:c8:e3:a2:5a:4b:be:ab:c1:30:3b:c2:25:
00:6c:c5:f2:6a:42:58:50:70:4d:a2:a7:38:1d:1c:
d8:06:f6:a7:d8:db:df:74:cc:58:b0:f8:a0:c4:7b:
20:11:74:26:76:b5:97:2e:8c:10:94:f4:19:c7:63:
16:0d:9f:8e:b7:a5:84:37:ef:1b:9a:85:63:29:ca:
33:ef:12:2f:2e:d9:03:b4:9b:5d:e1:41:c6:e3:5d:
a0:ed:81:8d:99:8b:a4:c0:0f:18:8d:8d:02:db:3e:
db:18:91:79:21:39:3f:23:20:f3:bf:0b:da:ac:6d:
c0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E3:07:80:BF:12:B6:6A:DF:F5:D6:B6:7F:C7:8D:2B:FD:70:B6:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86B3D722598411EC89598AC25A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.8.0/22
Signature Algorithm: sha256WithRSAEncryption
75:61:dd:a4:c0:4e:b9:56:67:98:f7:29:28:d9:70:dc:57:e6:
6d:fc:f2:8f:5f:23:89:d8:6a:aa:20:d3:90:de:a6:7c:40:62:
2b:f6:11:b4:b7:cd:2e:44:2d:a2:32:cf:56:46:5f:74:30:8e:
10:a8:2a:a6:b0:76:ea:83:f2:95:a1:35:80:c6:ff:57:a6:16:
d9:2e:e0:ed:a9:9b:ff:dd:ff:1c:88:93:f7:08:59:18:14:b4:
6f:74:58:51:b5:ef:29:7e:31:98:5f:7a:f6:c5:3c:99:16:0d:
51:f5:b6:53:99:be:aa:81:15:91:c0:ab:4c:56:4a:c6:27:1a:
8c:14:ad:a7:e6:a2:47:f9:c8:10:3e:8e:02:62:d1:dc:25:a9:
8f:2e:d5:77:f7:c8:37:68:06:64:a7:35:8b:9d:84:4d:12:04:
48:77:71:64:12:2e:a4:e5:93:09:58:4e:f2:83:07:9a:a9:95:
a4:84:b8:4a:f3:ab:cf:47:ca:87:c6:7c:76:3c:a8:64:9c:d2:
b1:40:7c:12:61:a0:3c:b1:44:6c:e3:aa:63:e1:ad:f0:82:91:
17:84:1d:08:b9:d0:7c:73:36:c2:83:d5:f8:fb:43:16:70:27:
24:04:b8:19:0b:48:bc:04:5a:ea:24:25:87:51:1e:71:b1:54:
f9:11:a8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-ams.rpki-client.org