Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F871E4A488611ECACF13E37D8A014CE.roa
File: 8F871E4A488611ECACF13E37D8A014CE.roa (raw, json)
Hash identifier: sLkvDIfdA2BEA7B8Qj8Yv9+YMmMkUhjun4sxedRcEsk=
Subject key identifier: D8:7B:E8:D5:E5:CA:4F:66:21:27:FE:9D:AB:38:10:DD:97:28:22:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0D52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F871E4A488611ECACF13E37D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:45:31 +0000
ROA not before: Fri 19 Nov 2021 15:45:28 +0000
ROA not after: Sat 19 Nov 2022 15:45:28 +0000
asID: 139879
IP address blocks: 154.80.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3410 (0xd52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 15:45:28 2021 GMT
Not After : Nov 19 15:45:28 2022 GMT
Subject: CN=6196751b-d430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:df:a5:12:d4:8e:a5:5d:07:e6:32:5a:00:1b:
5b:65:ea:b3:57:41:cb:78:2c:d4:0f:f6:e6:bc:43:
ec:98:b0:b0:07:e7:0b:9c:cb:ad:6e:7a:80:d2:e1:
bf:52:1b:8b:73:6d:79:e7:d2:2a:11:98:03:64:6b:
9e:e4:46:54:49:1d:56:d7:d0:a0:4a:73:98:53:2a:
59:b3:57:8d:eb:ca:71:e9:5c:98:08:71:35:99:be:
e4:99:0e:18:08:2c:7d:a4:14:c0:b0:a2:c3:c6:6a:
75:23:eb:65:df:ea:f6:56:8e:78:37:5a:9a:9b:53:
5a:ae:23:c2:34:41:27:00:9e:29:80:83:22:77:43:
7d:a3:65:c5:4b:5b:44:87:a1:88:48:b0:42:57:85:
9b:8e:04:2a:2f:58:dc:1e:7d:27:a2:92:56:07:51:
76:ac:56:80:c7:36:37:6a:6d:2f:6e:9d:cd:b0:95:
e1:b1:ef:ca:35:8e:2e:24:1e:bf:de:59:e2:0d:d4:
1d:26:dc:a2:59:f9:3d:c8:e3:c9:6b:2a:04:1f:32:
a8:7f:57:7f:03:59:42:cb:e8:bf:da:9a:f7:06:b3:
a9:12:8a:0e:14:4f:9b:2f:a2:36:a3:1b:bd:4b:fe:
d0:cc:72:83:8b:1e:d8:e2:7a:62:b5:3a:2a:98:1c:
7e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7B:E8:D5:E5:CA:4F:66:21:27:FE:9D:AB:38:10:DD:97:28:22:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F871E4A488611ECACF13E37D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.35.0/24
Signature Algorithm: sha256WithRSAEncryption
81:61:29:35:32:f7:b5:bd:fc:b5:fb:73:b0:6e:08:ef:10:90:
81:ed:03:17:62:f4:5c:f5:1f:30:ab:2f:59:9f:a8:19:c6:57:
39:e2:2f:15:40:8e:b3:52:37:de:f4:08:aa:d4:a9:82:6a:81:
dc:89:1a:15:ca:b3:35:a9:d5:d9:3d:5c:4d:64:ee:2c:a5:d3:
a3:ee:7b:c3:19:00:e9:1c:35:70:b1:42:20:96:6e:ca:f3:da:
a6:e6:0a:86:f4:8f:37:c1:ec:ac:b4:82:a9:af:82:0b:b1:76:
3e:c7:4d:68:0d:54:f7:7c:cc:05:5e:d0:1e:aa:d4:77:bf:62:
b0:61:55:0e:c6:bc:c3:48:5a:d6:a9:cf:0e:b4:6a:25:6f:e5:
05:2a:34:85:73:66:d9:df:32:4e:91:21:74:91:35:96:a9:0b:
fe:ab:d5:73:97:62:36:4c:d7:ce:66:2f:e4:17:f9:e8:4f:23:
2a:a0:50:4b:1a:37:aa:20:7b:cb:96:1e:d6:46:5c:a3:8c:11:
47:c6:12:b8:f3:e3:9c:15:11:34:ae:67:34:33:4f:be:c2:27:
22:04:75:59:bf:5b:2d:b1:90:f3:e7:c2:d2:1c:2e:94:33:9d:
08:f3:03:dd:76:ce:14:22:5a:ce:a7:16:b8:24:79:98:5a:76:
ce:61:f0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-fra.rpki-client.org