Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BB9B6B2A53611ECBE8327945A40D577.roa
File: 8BB9B6B2A53611ECBE8327945A40D577.roa (raw, json)
Hash identifier: MmST0pZ8dbMfkCJbgdqBuK67R8fMdNCADXwKigDBkDs=
Subject key identifier: 2D:E9:06:E4:E7:51:68:BA:D8:16:49:A6:5E:EB:65:D3:5B:BD:F2:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1550
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BB9B6B2A53611ECBE8327945A40D577.roa
Signing time: Wed 16 Mar 2022 14:37:03 +0000
ROA not before: Wed 16 Mar 2022 14:36:58 +0000
ROA not after: Sat 31 Dec 2022 14:36:58 +0000
asID: 147176
IP address blocks: 154.212.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5456 (0x1550)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 16 14:36:58 2022 GMT
Not After : Dec 31 14:36:58 2022 GMT
Subject: CN=6231f60f-f145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:48:25:95:7e:33:55:28:af:56:2b:0e:e1:3f:
08:6e:f6:9d:2e:f6:04:8f:79:79:7e:c5:6c:cb:ac:
67:12:b2:60:a3:7d:dd:6e:39:7c:47:03:f5:e7:8b:
35:d0:ae:be:7a:c0:bc:1c:82:32:5a:16:ed:c2:f7:
6e:c3:90:fa:f7:2d:86:c1:5a:b0:39:0b:4c:ba:c9:
0f:43:1a:b9:b0:ef:1d:c8:ed:1e:2f:95:7c:63:bd:
6a:5a:98:de:31:13:2b:99:db:80:23:0d:c9:5b:2a:
38:15:27:3d:47:62:3d:86:6d:52:91:d7:3b:c2:34:
4d:39:f2:22:47:e0:72:0a:23:af:6c:09:e3:1e:71:
fa:61:ab:07:d6:fa:b9:b0:4c:23:69:81:48:fa:ac:
14:6e:b2:f3:2c:e0:81:d9:7d:4e:a6:79:24:c1:17:
bf:17:10:8e:1c:48:78:8d:46:57:a3:c2:c5:58:e8:
9a:68:0c:e3:ba:a2:4f:b0:78:a9:4b:9e:fb:15:ec:
e3:05:68:22:d9:5f:ed:9e:07:db:43:21:7b:1f:72:
dd:fe:82:bc:85:44:8f:9f:01:d5:fe:4c:09:8b:38:
30:6c:7c:de:a7:18:ff:6e:94:43:71:78:e2:82:f5:
15:df:ef:3e:6b:4b:8c:ec:91:a1:14:f8:20:2b:fc:
fd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E9:06:E4:E7:51:68:BA:D8:16:49:A6:5E:EB:65:D3:5B:BD:F2:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BB9B6B2A53611ECBE8327945A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.139.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:7a:cd:5a:37:da:19:22:ef:69:e2:73:f7:82:bf:db:e5:56:
0e:56:2f:9f:2c:39:18:14:ed:5a:89:00:18:f7:40:6f:4f:d8:
6c:bc:c3:d6:ed:dd:2d:60:03:16:14:7a:23:c2:e9:45:e6:f9:
eb:a7:7f:98:19:1c:8d:7c:a9:12:78:2b:8d:70:36:2f:18:74:
1f:e0:c1:7b:cd:4a:3a:0f:35:94:98:cf:df:50:64:4c:99:ed:
0a:f8:78:21:34:13:c3:a1:bb:3a:f9:85:47:14:f4:ff:a3:2c:
1f:5f:fb:d4:f3:3a:c5:dd:c2:71:cd:c6:05:6f:c7:e6:63:59:
dd:26:81:e3:a6:93:37:c8:f5:4f:06:8d:6d:09:9e:0f:e7:e6:
81:b1:a7:08:dc:9a:e0:61:d5:39:1c:41:05:73:61:5b:12:c4:
bb:1d:02:3a:32:4e:73:41:76:b9:a1:14:66:56:48:ca:e4:81:
45:58:d8:f6:56:f3:dc:82:e3:cc:8f:83:b3:a7:90:65:c1:c1:
fb:59:6c:43:bb:6d:3b:52:9a:27:fd:6f:b0:12:2b:28:f6:9b:
f8:2a:d6:f6:41:95:23:06:45:b5:eb:d9:ef:d1:61:2d:10:0c:
e5:ae:72:64:79:18:b6:90:12:c6:50:ec:25:8c:29:68:14:95:
7a:35:1b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-fra.rpki-client.org