Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EAF556457D011EC82F9BAB75A40D577.roa
File: 9EAF556457D011EC82F9BAB75A40D577.roa (raw, json)
Hash identifier: X7yOskKyL5arH9IC7AM64RFk8V3jPBCsRfKMqJ+mxkk=
Subject key identifier: 3A:83:0A:2A:1A:4B:2B:26:9F:DD:3E:83:71:82:92:58:59:88:4D:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1329
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EAF556457D011EC82F9BAB75A40D577.roa
Signing time: Wed 08 Dec 2021 02:43:27 +0000
ROA not before: Wed 08 Dec 2021 02:43:23 +0000
ROA not after: Fri 30 Dec 2022 02:43:23 +0000
asID: 9009
IP address blocks: 154.95.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4905 (0x1329)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 8 02:43:23 2021 GMT
Not After : Dec 30 02:43:23 2022 GMT
Subject: CN=61b01bcf-252a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d8:32:25:14:eb:24:3c:b1:b1:25:ee:09:c8:
cb:62:6b:40:6b:db:b5:11:bb:a4:09:23:3a:b9:da:
70:76:b9:16:1a:72:0a:a3:c7:a2:28:95:40:c2:c6:
9e:a2:ef:f4:91:f2:16:b3:49:a6:01:ea:9e:d2:08:
c3:c9:41:ef:e0:a3:e3:ef:1a:d1:f2:5e:ba:a0:ec:
37:1d:5b:78:c3:e4:da:11:68:e1:d3:b3:08:8e:8f:
e1:67:bc:53:40:ce:e1:98:d3:67:42:4e:55:63:86:
9a:4b:da:a2:25:5e:d7:ca:8a:11:dd:fb:28:7a:5b:
6a:08:e0:b2:01:8d:08:98:61:e4:ed:d2:35:50:86:
96:68:1a:6c:64:bd:64:ce:3c:7f:50:bd:b1:87:c6:
b0:a9:a6:d0:d3:5f:7f:46:90:31:06:22:b1:e5:6c:
db:80:77:77:78:3a:87:4e:99:6e:9b:82:c0:d0:9d:
4c:7b:e8:01:38:25:1e:58:ca:41:91:3f:b8:6e:bf:
36:95:27:9f:7a:0d:53:42:99:b2:bf:a0:aa:8c:8e:
f2:be:c2:12:c6:3a:fb:e0:1f:76:5d:6d:f2:77:15:
97:a8:1e:29:b0:cd:33:3e:60:1a:0c:3f:0a:5b:40:
fc:0a:0d:4c:3e:62:51:f4:e9:a1:8b:28:1a:96:bd:
58:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:83:0A:2A:1A:4B:2B:26:9F:DD:3E:83:71:82:92:58:59:88:4D:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EAF556457D011EC82F9BAB75A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:6c:e9:4d:45:92:b4:f4:23:8e:6a:74:62:14:6c:0b:29:1f:
0b:e4:90:49:5a:2a:a6:2d:73:e5:bb:c9:49:80:38:39:c0:a4:
6f:c9:02:37:eb:77:4c:e8:b9:fc:58:1e:dc:d0:93:f1:7a:e7:
c9:1d:41:06:2d:a9:78:9c:55:5c:e7:58:71:aa:cd:f7:ee:87:
b8:28:3b:32:60:6b:6a:98:a5:a9:0f:0c:67:18:86:6e:47:7f:
e6:10:fd:db:41:c9:86:bf:ee:15:58:be:b5:03:5d:9f:3e:95:
4b:7f:aa:33:d4:92:c6:1e:ef:38:8b:f1:51:e4:db:48:59:69:
ce:ea:ac:10:86:31:ef:c6:5e:0c:90:36:9b:e0:18:3a:3f:4a:
29:1e:38:17:9e:1e:bd:5a:ac:39:9f:57:f5:17:d4:d8:9d:5d:
1a:ab:4c:ab:a5:c7:e8:35:09:03:5e:01:52:c6:ad:ea:bf:5d:
59:99:94:62:fc:ac:7d:de:01:e7:86:a0:76:3d:e7:35:1a:6e:
3d:19:cd:87:72:47:1d:42:4a:fe:17:0a:2e:83:85:02:37:7d:
0b:ec:ad:bf:2c:56:42:10:8c:a5:f3:8c:37:ef:60:4b:71:fe:
6c:37:43:01:d6:71:44:b5:6f:fb:8c:36:0d:9c:64:5a:4d:4d:
96:f8:1b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:12 2023 by rpki-client on console-fra.rpki-client.org