Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E85F0A0A44511EC9E4B5AD25A40D577.roa
File: 8E85F0A0A44511EC9E4B5AD25A40D577.roa (raw, json)
Hash identifier: KdZFNdOOlNfdo8Y6dnSv8pjo4DFIYBnMdxhC6YPduYc=
Subject key identifier: CD:06:86:B2:A4:65:34:6D:2D:66:ED:18:2C:A1:00:68:26:FB:30:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1540
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E85F0A0A44511EC9E4B5AD25A40D577.roa
Signing time: Tue 15 Mar 2022 09:51:59 +0000
ROA not before: Tue 15 Mar 2022 09:51:56 +0000
ROA not after: Sat 31 Dec 2022 09:51:56 +0000
asID: 133201
IP address blocks: 154.205.36.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5440 (0x1540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 15 09:51:56 2022 GMT
Not After : Dec 31 09:51:56 2022 GMT
Subject: CN=623061bf-20d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b8:1a:e8:9f:08:ab:d9:7c:7d:13:87:84:24:
72:e8:52:9c:fc:44:26:d1:2e:26:ff:e9:f8:1b:b9:
df:f2:c7:e9:c9:05:d4:3a:49:bb:04:ce:38:2e:c3:
2f:0f:a2:40:3b:dc:fc:e0:d9:54:e6:fc:f5:b4:f3:
b5:62:48:3c:c9:36:4f:30:7d:9a:03:9c:62:ed:4c:
c1:44:59:90:c2:82:c9:02:c5:c0:5c:8f:ba:61:e0:
2e:1f:ab:1f:7b:2b:2b:f3:25:ad:3d:23:70:64:d3:
f7:5e:30:82:22:20:2a:e0:46:fa:12:72:cf:cf:2d:
d5:42:3c:b9:86:a0:0b:3b:d0:a2:39:d5:32:01:86:
a4:28:5f:e8:0f:4b:ee:67:c5:4a:9e:f0:28:09:82:
33:95:ab:8d:83:db:a7:58:f5:26:e2:57:63:bc:6f:
38:ff:7a:e8:b7:1d:97:bc:b8:c4:5a:df:10:2e:67:
d5:90:82:00:19:8e:0f:55:1f:85:04:b8:20:fc:c4:
a6:b6:15:a6:0b:ac:ed:cd:02:46:e2:ad:41:a5:e6:
9a:97:ba:2c:af:e1:e8:91:2e:d6:11:b6:43:ac:f1:
b7:27:67:dc:8f:61:c9:a3:0d:4e:20:84:39:09:57:
28:62:d9:89:7c:82:99:d7:70:aa:ed:8d:ef:be:e2:
4a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:06:86:B2:A4:65:34:6D:2D:66:ED:18:2C:A1:00:68:26:FB:30:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E85F0A0A44511EC9E4B5AD25A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.36.0/22
Signature Algorithm: sha256WithRSAEncryption
80:51:9b:28:c6:f9:97:f6:cc:b4:41:f8:c4:d2:b8:45:6b:f3:
f6:dd:b4:ab:e5:6d:d8:25:8a:a0:df:2e:88:d2:51:69:b8:e1:
e2:25:1a:cf:f5:13:cf:db:13:fb:da:3a:7a:a0:78:b0:d6:92:
a5:c8:63:a8:30:7f:b8:30:56:97:84:eb:9d:93:db:51:06:c2:
27:88:f5:66:79:5d:ab:41:9a:e2:29:5d:2e:43:d1:85:cc:99:
65:4f:59:31:86:5e:76:16:5f:11:53:b2:66:03:0d:f7:1a:ee:
14:35:d7:4c:9d:c4:44:63:c9:b8:9b:69:9d:a9:bb:84:7d:44:
ee:45:c0:09:17:02:af:69:80:96:f5:7e:38:70:a2:15:e1:84:
f1:2f:f1:20:fe:f0:3d:52:d7:13:c6:5a:24:35:87:9e:12:5c:
d6:c2:05:a8:47:11:e1:ed:b7:35:ea:c3:ea:7b:49:4b:49:aa:
8c:0f:45:4d:44:de:1d:2c:6b:60:2a:51:40:53:f7:d2:34:48:
a4:c3:39:c0:1d:56:34:d0:9c:47:13:16:8f:f8:53:88:e4:64:
f3:db:4e:c5:7a:72:de:2e:55:d7:95:c8:7b:e4:7d:c7:46:64:
78:21:44:98:42:d5:96:25:79:d7:75:94:e8:2f:a7:65:d5:3a:
b5:ba:52:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-fra.rpki-client.org