Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCF136E8708311ECA55C346B5A40D577.roa
File: BCF136E8708311ECA55C346B5A40D577.roa (raw, json)
Hash identifier: MAJpIVxTcuAo5oV1xFH3d3KxNCx3ACGXIB0C+eUhFbk=
Subject key identifier: 62:D0:E3:DA:69:69:87:1A:5A:54:3B:03:D9:93:13:93:3C:71:88:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1472
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCF136E8708311ECA55C346B5A40D577.roa
Signing time: Sat 08 Jan 2022 13:06:06 +0000
ROA not before: Sat 08 Jan 2022 13:06:02 +0000
ROA not after: Fri 30 Dec 2022 13:06:02 +0000
asID: 53587
IP address blocks: 154.210.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5234 (0x1472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 8 13:06:02 2022 GMT
Not After : Dec 30 13:06:02 2022 GMT
Subject: CN=61d98c3d-d78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:ff:67:c4:7e:9c:ac:ef:80:24:2c:de:c6:
35:f0:7d:a1:7e:e3:66:f3:1d:8f:e5:07:c7:46:28:
6f:70:4f:f7:b7:ac:a3:e7:3c:98:83:b2:3a:0a:73:
f5:f2:e6:97:f3:84:4e:d3:32:dc:1b:fc:30:39:54:
63:cd:d2:f9:48:77:c0:df:d2:b5:f8:7a:b3:17:7e:
1d:c4:b3:83:88:67:cf:30:5c:ec:de:b3:1a:d4:09:
63:94:fc:78:72:34:77:e7:95:e4:50:cf:4f:0e:4a:
2a:a1:c1:75:05:c8:f7:fe:7f:cf:39:61:9a:6a:55:
69:e3:73:dc:8c:78:69:01:bb:c6:c7:75:93:e7:98:
a0:ac:00:9a:a6:7c:3a:5a:1e:c2:0f:6c:ef:13:ef:
77:ff:eb:ea:3d:2c:1d:24:5d:87:d1:c6:e8:6e:57:
cf:a4:ec:31:51:5f:3d:d2:ef:72:06:7e:67:2f:9c:
31:e2:30:55:1f:ca:98:8b:65:bc:d9:70:2d:55:90:
bd:3b:2c:ef:fa:cd:7b:40:2c:d4:74:7e:e0:33:d8:
2f:88:4f:32:fd:36:91:7e:ac:8b:7b:fb:f7:4f:69:
ba:0e:c8:2f:94:e4:46:49:3d:e4:88:5d:5f:b0:02:
22:87:fe:ba:47:c6:3d:57:42:cf:4c:43:33:29:0a:
08:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D0:E3:DA:69:69:87:1A:5A:54:3B:03:D9:93:13:93:3C:71:88:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCF136E8708311ECA55C346B5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.103.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:a6:1e:35:11:5d:31:62:47:f5:b5:4e:6b:55:9c:e5:4a:0d:
ef:bd:15:4b:be:0a:da:63:b3:d9:11:69:63:52:c4:e2:12:d2:
76:ac:2a:41:fe:c3:b7:74:56:a5:42:f7:15:66:9e:bc:22:28:
a9:cc:37:b3:07:f1:a4:f0:5e:ad:a1:a8:07:4e:5f:1a:b7:fb:
c7:8b:2b:b2:f0:57:de:e4:00:67:2f:50:16:7e:49:83:79:c1:
02:b8:af:64:a8:df:85:1a:7d:f3:a5:5c:33:9d:4c:79:29:06:
be:3c:5f:3e:c1:74:c3:65:7e:a9:bd:31:25:e2:e3:7b:a4:1b:
73:7b:9b:5f:c5:a8:e5:1c:ed:ff:bd:1a:de:f4:7c:4d:42:4b:
4c:95:c3:bc:f4:6c:e4:ff:99:1b:5f:1a:2b:c9:87:91:f8:a0:
d8:16:6d:42:7b:85:3f:24:6f:a8:0e:67:31:01:30:4b:62:70:
e7:ff:01:f8:6d:bf:d6:27:4e:5b:68:c9:97:76:30:14:fd:2d:
7d:f5:fa:be:70:af:fd:6f:ad:6b:5c:d2:20:30:8a:85:60:69:
00:2d:e2:e9:e8:03:4d:66:30:68:f3:91:56:fc:c3:99:f2:17:
98:b1:0b:4d:b5:c6:38:5e:71:85:22:97:2f:3d:44:79:d8:6a:
ac:5a:bb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-ams.rpki-client.org