Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3ECB98CE57C11EB8B6C0529F8AEA228.roa
File: C3ECB98CE57C11EB8B6C0529F8AEA228.roa (raw, json)
Hash identifier: 0I5uTtNOdTqaPjADRCvI2RDBy5icPLrHUhI6p7Mp+MY=
Subject key identifier: 01:33:8F:B8:4D:35:4D:70:26:09:B2:E3:A9:30:26:CA:DA:4E:EB:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 07B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3ECB98CE57C11EB8B6C0529F8AEA228.roa
Signing time: Thu 15 Jul 2021 14:55:59 +0000
ROA not before: Thu 15 Jul 2021 14:55:56 +0000
ROA not after: Sat 09 Jul 2022 14:55:56 +0000
asID: 397630
IP address blocks: 154.201.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1972 (0x7b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 14:55:56 2021 GMT
Not After : Jul 9 14:55:56 2022 GMT
Subject: CN=60f04c7f-8cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f2:80:98:ee:77:3a:f9:78:7e:a7:98:04:9b:
8d:bb:3f:20:f2:35:ff:55:ca:b5:65:bb:c8:a2:68:
e0:df:c2:9f:15:be:14:c1:bb:b2:8f:84:e5:c2:69:
fd:c4:a4:63:af:f0:7a:a2:56:ea:56:7a:b5:f5:4f:
2b:de:56:9a:23:67:bf:26:1b:84:8d:6a:07:14:16:
9a:42:02:42:2d:b8:d1:bc:45:15:a4:d4:28:fe:76:
44:3a:c7:90:93:7a:f7:c3:ee:51:3c:8b:3a:a5:ab:
9c:bd:a2:7e:59:ff:f3:12:35:6d:f2:50:37:4d:c5:
ef:a0:55:1a:6d:1f:65:95:4b:a7:2f:62:25:1b:4a:
01:86:d0:e5:dd:82:11:f5:6e:b5:b6:28:f3:89:fe:
fa:e0:97:74:c9:e6:90:50:71:e8:42:96:81:a2:ec:
aa:fc:f2:d4:ab:db:bc:39:b3:0b:4d:2a:87:2b:55:
23:f6:ad:82:61:19:26:32:3d:42:71:a6:cc:6e:42:
38:df:9f:f6:be:68:0b:18:2f:00:1a:5f:e6:f5:88:
27:35:3f:7a:c0:4e:1a:00:f4:5b:67:68:8f:10:ce:
d3:53:f3:8d:ea:00:40:f8:dd:05:a3:f1:ef:c5:57:
cc:bf:8f:71:50:6e:d0:a0:7f:d7:7c:43:4f:cb:a5:
88:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:33:8F:B8:4D:35:4D:70:26:09:B2:E3:A9:30:26:CA:DA:4E:EB:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3ECB98CE57C11EB8B6C0529F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.56.0/24
Signature Algorithm: sha256WithRSAEncryption
01:a9:9b:a8:39:05:25:f3:e7:eb:92:d3:10:d5:5b:82:66:61:
d9:ed:0a:c7:72:dd:15:9a:a5:69:44:08:b4:9c:c6:4b:56:68:
37:f5:cc:cc:d0:f1:c4:d9:33:5e:51:ef:0f:aa:e7:4e:ab:e0:
6b:d4:16:90:e9:00:14:84:e2:57:a8:98:be:1e:66:39:5c:f1:
33:18:ff:35:61:fc:6e:ce:9f:fb:71:cc:e9:2f:98:eb:68:7a:
d2:11:d9:59:81:a8:33:3e:db:90:82:08:a4:b5:af:c3:9d:2d:
c8:95:fc:4d:c9:87:22:19:e2:98:6d:3d:04:65:de:b8:8d:b3:
6f:ec:04:c5:de:3e:7c:62:67:71:c9:fb:f9:a2:d6:73:3c:2c:
6f:8d:50:b9:ce:3b:15:81:d4:9e:f5:4d:e7:76:d7:8d:2d:ce:
1e:dd:94:a4:0b:6e:48:5b:28:c0:67:84:7f:80:8e:25:7c:22:
7f:55:86:b3:5b:b8:ba:48:e6:69:bb:6b:3a:cc:fa:77:db:c8:
e5:ec:ee:61:2f:78:1a:94:b9:8a:97:7f:df:50:5f:53:5e:d5:
14:6d:55:63:4d:0b:7e:2b:58:d6:22:a4:40:4e:ce:2f:b6:e0:
ef:64:3e:43:eb:e8:95:49:b6:85:eb:a3:8b:19:bd:d1:4f:bf:
c8:44:5e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-ams.rpki-client.org