Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A376AB045BBF11EC85E385DD5A40D577.roa
File: A376AB045BBF11EC85E385DD5A40D577.roa (raw, json)
Hash identifier: Fcxoz7Plvs8/gjKb7JIYOiAaXRivneTj0sItiX97JNQ=
Subject key identifier: 8E:29:4D:D6:A7:07:0B:F4:12:A4:D7:10:67:F2:08:24:D1:23:0E:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 13D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A376AB045BBF11EC85E385DD5A40D577.roa
Signing time: Mon 13 Dec 2021 02:51:58 +0000
ROA not before: Mon 13 Dec 2021 02:51:55 +0000
ROA not after: Fri 30 Dec 2022 02:51:55 +0000
asID: 133201
IP address blocks: 154.204.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5079 (0x13d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 13 02:51:55 2021 GMT
Not After : Dec 30 02:51:55 2022 GMT
Subject: CN=61b6b54e-2ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:c5:26:d7:e3:38:5a:bb:dc:8c:be:c3:b2:
b0:16:44:7c:eb:a1:b4:68:9b:89:0d:0b:30:3f:7e:
22:79:36:8d:5e:8e:ff:9e:26:5e:dc:0a:87:9e:ab:
1a:95:a3:81:c3:f6:b2:0a:10:19:74:1f:7c:8b:2c:
7f:0b:f7:75:23:b1:85:02:84:b4:6d:7f:28:50:f6:
3f:86:61:e8:24:40:04:7b:d5:c1:db:4a:0a:00:bc:
a9:ca:4d:68:b2:b9:21:45:59:f2:5c:a4:ab:f7:ec:
68:1b:2e:bd:75:79:84:2d:21:14:70:1a:e6:59:e3:
37:96:c5:b5:6f:a5:85:fa:ce:e8:61:72:19:00:9c:
a1:cc:06:2c:dc:e9:cf:00:50:bd:3e:02:e6:b8:b4:
03:c4:d9:d1:09:ad:1f:f1:d0:4e:53:8c:27:2a:ff:
89:ad:f1:ae:0e:73:aa:d2:50:52:6c:cd:15:80:2a:
0d:07:ae:85:79:5c:37:43:21:b9:1b:cd:41:77:5f:
ec:46:46:fc:84:1d:e8:ce:54:d0:f9:7f:8a:e3:ae:
21:2c:7b:e5:64:23:87:0d:58:c8:03:0a:f6:0a:79:
fd:fb:cf:77:c8:7a:0a:35:02:93:34:ee:68:cb:ef:
c3:25:e6:42:ef:70:ec:5e:70:82:23:ac:d1:7d:64:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:29:4D:D6:A7:07:0B:F4:12:A4:D7:10:67:F2:08:24:D1:23:0E:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A376AB045BBF11EC85E385DD5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.81.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:64:7e:3a:64:6f:7c:9c:e4:d2:02:e4:00:22:f0:57:82:03:
b0:71:aa:aa:a6:e6:61:e4:2e:41:e0:f2:62:95:ec:a7:92:4a:
0c:a1:3b:17:a9:cf:dd:4c:0c:19:63:98:72:94:3b:b3:23:e4:
56:31:16:86:83:5b:eb:d7:7a:9a:e2:85:16:59:81:5a:00:d5:
a3:d4:a1:42:2d:ed:c7:99:30:99:f3:db:d3:1d:17:c1:fe:0b:
99:7d:78:a3:37:98:87:f8:c3:5e:a0:44:3a:97:47:08:c2:e7:
88:1a:c7:76:69:76:09:1e:7b:58:5a:2a:8a:aa:e7:b1:fc:32:
1a:3c:5a:0b:51:27:78:c3:76:15:ca:3a:6c:ff:66:6d:ab:bf:
80:4f:84:9e:89:84:8c:e9:b7:69:2c:f4:c1:8c:45:ba:f8:94:
19:f8:ab:cd:bf:e7:d7:72:01:e6:34:88:ff:3f:22:8d:46:18:
12:73:fe:5a:d5:a8:7f:ca:f4:71:88:81:c8:80:6a:f5:87:26:
1c:86:1c:b8:76:83:2b:e7:c4:76:60:24:b1:06:cd:d9:54:e2:
1e:77:50:06:27:3d:a3:7a:d8:c5:41:5e:2b:29:6f:f6:c6:e3:
89:b9:fe:43:8f:30:89:33:e5:68:c6:15:bb:0b:99:16:8a:44:
ee:f1:71:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-ams.rpki-client.org