Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B50322B090AA11EC97D971B95A40D577.roa
File: B50322B090AA11EC97D971B95A40D577.roa (raw, json)
Hash identifier: PgzIIOaudNbZriCJiznB3Wl1/0cUG/ZN6Pp1BJhxqK8=
Subject key identifier: B5:18:B0:45:2A:3C:7B:8C:F2:90:50:36:30:0D:97:E0:7A:4D:AA:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 14D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B50322B090AA11EC97D971B95A40D577.roa
Signing time: Fri 18 Feb 2022 11:05:40 +0000
ROA not before: Fri 18 Feb 2022 11:05:36 +0000
ROA not after: Fri 30 Dec 2022 11:05:36 +0000
asID: 137951
IP address blocks: 154.209.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5332 (0x14d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 18 11:05:36 2022 GMT
Not After : Dec 30 11:05:36 2022 GMT
Subject: CN=620f7d84-fcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:09:ce:ba:59:ae:ef:fb:6b:56:a6:93:6b:
33:2c:4c:c6:d3:15:f7:6a:bc:ae:8d:11:92:48:1e:
74:3d:16:48:c1:d5:61:a6:f1:d5:0b:88:05:6a:ba:
70:39:61:79:be:e3:29:66:c1:65:6b:08:16:b0:9e:
0c:4d:2d:2c:c2:69:31:f1:19:26:87:c1:e1:26:bf:
2d:c9:87:ad:8f:6b:a5:ba:99:e4:e6:6c:0b:96:e8:
2a:40:e8:8c:cb:32:a6:1d:de:eb:27:a6:a5:4a:da:
52:fa:40:ad:e5:21:e1:55:d9:31:d7:4e:4d:35:d0:
e1:39:bf:69:e1:45:e9:24:a0:7c:8c:10:65:68:a3:
b8:5f:5a:33:06:ff:e7:2e:16:e5:e3:56:ca:8f:f8:
ca:55:c5:d1:f8:b2:e4:64:14:74:d8:51:55:10:00:
7a:e3:cf:fd:29:0e:47:56:cf:d1:09:f8:b2:10:25:
e1:e3:fe:2d:47:cf:c2:1a:36:1c:b3:53:8e:47:ca:
e4:56:95:5b:ac:9e:3d:08:bd:49:fd:1f:9b:73:00:
20:0b:39:95:83:f8:2c:0a:67:f2:3b:e4:b4:05:58:
32:14:9d:2a:5c:a1:8b:1d:09:48:6e:d4:63:78:6a:
65:cc:43:22:67:9d:d8:48:aa:6e:de:2f:9f:2a:3c:
9d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:18:B0:45:2A:3C:7B:8C:F2:90:50:36:30:0D:97:E0:7A:4D:AA:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B50322B090AA11EC97D971B95A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.149.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:a3:d3:c1:e3:91:2a:dd:a1:30:00:f3:6d:36:ab:3d:cd:bd:
07:fb:9f:a0:8c:92:b8:56:34:37:fe:04:80:dd:41:19:9d:5c:
35:62:ba:04:2f:33:94:2b:94:21:c2:c5:4d:15:ad:e1:94:69:
d3:b9:bc:ac:b1:60:c3:0a:28:43:d5:76:d1:d4:e8:83:a6:7e:
e5:c2:6f:66:98:62:80:ec:7d:27:bb:3d:cf:99:97:67:2c:d0:
fb:3d:d7:8f:15:c7:a9:a9:22:a2:25:14:80:42:62:a7:16:7e:
77:88:13:9d:4d:37:7b:88:a8:18:4a:8a:f3:54:72:9d:a7:e0:
e4:a0:0b:5a:1a:ea:59:05:ab:79:6b:69:1a:58:16:14:29:c0:
4c:07:58:84:a6:e1:67:9d:44:bf:ac:e9:e4:a7:db:c0:53:3d:
04:9b:0a:1b:f3:37:e1:93:6b:3e:0c:1d:a4:1d:bf:ee:d1:46:
47:39:5b:19:5c:af:77:77:50:5e:2b:05:28:27:aa:70:c9:ab:
a5:68:4d:c7:ec:73:ed:96:0e:c0:1c:19:9e:27:3d:c5:cf:55:
22:7a:06:96:ce:e6:c3:09:b0:50:b4:af:78:5a:ea:92:4e:52:
3a:9f:35:f4:60:29:1f:a6:b1:45:70:8a:6f:6d:5f:f4:b8:cf:
b0:74:9a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-ams.rpki-client.org