Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCB89D3C59A011EC921342965A40D577.roa
File: BCB89D3C59A011EC921342965A40D577.roa (raw, json)
Hash identifier: jz0jYxB+pq9bcCOO8LJAgnCrXcKu+r1q0yjKy2+vfM4=
Subject key identifier: 2E:2D:D0:69:CA:0F:35:64:45:77:AC:DE:B1:77:22:34:6D:73:FD:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 138C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCB89D3C59A011EC921342965A40D577.roa
Signing time: Fri 10 Dec 2021 10:05:44 +0000
ROA not before: Fri 10 Dec 2021 10:05:40 +0000
ROA not after: Fri 30 Dec 2022 10:05:40 +0000
asID: 135097
IP address blocks: 154.204.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5004 (0x138c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 10 10:05:40 2021 GMT
Not After : Dec 30 10:05:40 2022 GMT
Subject: CN=61b32678-99e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:f8:33:69:66:d1:3e:0f:35:3e:11:84:c9:
ed:31:dd:da:f4:e9:9d:36:d0:03:48:94:1d:4a:ad:
0f:27:8d:6b:5d:12:47:bd:fd:fb:1f:f6:47:22:51:
08:25:6b:2d:1e:12:4d:fd:21:7d:37:82:86:b5:8f:
76:4b:b1:a5:e4:35:f2:b8:94:9b:61:23:b3:14:b6:
a1:a6:fb:a0:5f:90:1f:a2:c8:bc:9b:bc:2f:28:07:
cd:84:c1:42:39:88:fc:b2:68:e4:60:b2:05:5e:5c:
59:94:a9:db:cb:b5:48:5a:cb:b6:b8:d5:0d:6c:3e:
44:cd:df:4f:6a:04:8b:60:d2:5b:ee:97:be:9e:24:
83:38:4a:fd:81:44:59:83:6f:f1:b3:d7:74:17:6a:
53:41:01:c3:40:be:9d:ba:b5:f8:5b:24:a9:59:92:
fa:19:79:e4:d7:68:b3:2d:8d:c2:fc:ca:c2:04:7d:
63:70:c9:1f:5e:e0:fb:5d:15:5c:ae:57:d3:98:ef:
7f:a9:ba:3e:29:45:60:9a:a3:0a:39:f9:cd:13:2e:
13:13:e1:b6:5f:fc:b0:20:a7:87:b8:b9:44:fe:c8:
38:01:02:fc:19:51:83:7e:4b:49:f6:2a:71:ad:0f:
f8:e7:03:9a:ee:e9:2b:bc:07:38:f7:1a:50:74:29:
84:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2D:D0:69:CA:0F:35:64:45:77:AC:DE:B1:77:22:34:6D:73:FD:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCB89D3C59A011EC921342965A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.64.0/18
Signature Algorithm: sha256WithRSAEncryption
80:b1:5a:ac:94:de:4b:30:df:00:40:24:60:63:6a:45:b3:07:
02:5f:99:b3:92:f1:b0:e8:74:71:65:d2:2a:aa:a1:22:83:5f:
81:98:94:8e:5c:0e:f2:49:a1:cd:79:9a:a7:97:1e:96:ce:f2:
b7:cf:92:19:4b:ed:8d:03:4d:5f:29:ae:ee:1f:79:6a:c6:ab:
1b:50:0a:6b:2e:42:cf:21:27:1d:9c:bc:26:32:66:16:ee:9b:
19:83:73:f0:f2:da:44:1d:ee:54:d9:dc:51:58:d8:7a:a5:bc:
0d:65:f5:2a:0b:51:88:62:9f:72:40:75:2f:f9:6d:4b:6c:59:
1d:1c:26:9a:c5:bd:97:70:04:58:a2:26:c7:fc:e8:76:eb:c6:
5a:96:dc:05:8b:26:30:73:a1:e8:f3:f6:b2:f6:db:31:5e:7c:
ea:e9:59:ff:0e:96:86:aa:e7:71:b2:fa:55:33:ce:8c:d6:34:
f4:bb:28:a0:be:2f:e7:2e:57:fc:8a:7c:e9:82:a9:88:f4:98:
61:c8:47:1e:df:18:4e:14:2d:c8:c9:d7:c7:cb:58:29:57:b6:
3d:da:cc:fa:8d:01:40:31:f6:57:eb:30:07:21:91:0c:b0:68:
46:34:07:91:ed:de:74:aa:de:ea:d4:84:92:b7:52:24:89:fe:
a1:02:c5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-ams.rpki-client.org