Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7DA0894476A11ECAFF8A878D8A014CE.roa
File: A7DA0894476A11ECAFF8A878D8A014CE.roa (raw, json)
Hash identifier: ymSnn3ogyAMI6x3n2xFQ4M3qF7Yqt6k3YLhhx18sSvg=
Subject key identifier: 56:56:E7:00:A6:7C:45:4E:E6:1D:F4:29:25:10:3E:5C:0D:CF:FD:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0CE8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7DA0894476A11ECAFF8A878D8A014CE.roa
Signing time: Wed 17 Nov 2021 05:53:15 +0000
ROA not before: Wed 17 Nov 2021 05:53:12 +0000
ROA not after: Sat 17 Dec 2022 05:53:12 +0000
asID: 134428
IP address blocks: 154.222.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3304 (0xce8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 05:53:12 2021 GMT
Not After : Dec 17 05:53:12 2022 GMT
Subject: CN=619498cb-be5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9b:62:11:f1:89:3f:6e:e9:bd:ea:f7:63:4a:
17:b7:f5:09:7c:94:22:e9:8c:a4:6a:38:ef:fe:a0:
d8:8c:a7:c5:63:15:30:cc:35:2a:9e:b1:4f:a0:a2:
bb:1c:b6:2f:a5:2e:a1:18:d6:fe:8c:83:86:0c:46:
63:08:64:1c:8e:75:02:06:ff:da:b8:02:38:93:69:
79:5a:a1:fa:8d:b5:18:66:93:1d:25:1d:da:3a:65:
2a:2e:f2:6c:2e:f1:e8:2a:1b:90:4f:95:89:bb:b1:
29:e8:5b:09:24:d3:c8:a6:8f:49:4e:6e:8e:e1:80:
c6:6d:25:30:15:d2:74:99:3c:56:20:23:eb:52:5f:
d3:6a:6a:90:b3:67:bf:e8:5f:5e:40:4a:f2:0b:0d:
39:59:4a:09:fc:b6:0a:bb:a0:63:a2:99:fe:e6:2b:
38:be:aa:ff:ae:be:96:37:e5:d6:86:3f:eb:39:7d:
55:03:0c:20:2f:7c:e5:bc:b2:10:8f:c8:2a:85:eb:
7d:8d:08:82:24:7d:33:43:2a:df:26:81:5f:b8:d7:
c7:22:7d:01:7f:2f:92:9a:6f:5e:c5:22:d2:fe:8d:
dd:f6:4d:5c:82:ad:0c:09:16:53:b8:4e:0f:ec:b8:
f8:3c:5d:b0:5f:65:90:20:a0:2d:03:af:0f:28:35:
32:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:56:E7:00:A6:7C:45:4E:E6:1D:F4:29:25:10:3E:5C:0D:CF:FD:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7DA0894476A11ECAFF8A878D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.41.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:6d:60:bd:1a:67:b2:10:28:a9:9c:05:54:3d:34:8b:7d:b7:
f3:b2:27:d8:4b:c6:2c:1e:6c:f0:0e:76:07:32:ed:99:a9:8d:
89:d9:64:ba:b4:b1:95:67:d6:3d:1b:7c:a4:9e:ec:73:f8:3a:
da:46:dd:a5:03:04:63:d9:d5:9c:94:62:8e:d9:cb:a3:6a:f0:
b1:e3:44:ce:48:f2:64:eb:67:67:45:fb:34:bd:e7:18:da:45:
de:b4:56:b6:92:be:c4:4a:89:06:7d:bc:5b:81:41:25:8d:bd:
c3:71:3b:4a:22:18:32:e2:70:dd:ce:b7:ed:8c:04:3c:45:92:
08:63:bc:75:7f:ae:ba:d2:85:82:c2:53:8b:7a:10:a1:3d:b0:
bb:27:b0:6f:c4:92:22:85:b4:a1:28:40:11:07:0b:84:a1:46:
3e:41:07:55:d2:a3:13:b0:91:c2:d8:de:b5:f9:95:2d:f0:d9:
2b:e7:bd:54:25:37:ac:41:e1:35:a6:9e:a6:cd:ff:bc:6f:4c:
67:1b:3c:10:16:73:6d:db:4d:00:47:80:fa:48:eb:9d:87:ef:
ec:9c:a1:60:69:f6:5b:62:71:c1:bf:3d:98:6f:a0:1a:a9:60:
73:22:3b:5b:50:11:70:95:6d:72:bd:09:67:a5:33:2a:93:08:
6b:e6:2b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:12 2023 by rpki-client on console-fra.rpki-client.org