Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C487658657D711EC86FC69CC5A40D577.roa
File: C487658657D711EC86FC69CC5A40D577.roa (raw, json)
Hash identifier: GBUrTBZyZy8jIU7Bt5YrBtz6uK13rtoDTxuugnVfBEs=
Subject key identifier: 08:33:F1:FA:F9:67:03:E2:41:2D:BF:C5:9F:75:45:3C:81:BB:70:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1357
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C487658657D711EC86FC69CC5A40D577.roa
Signing time: Wed 08 Dec 2021 03:34:37 +0000
ROA not before: Wed 08 Dec 2021 03:34:34 +0000
ROA not after: Fri 30 Dec 2022 03:34:34 +0000
asID: 54600
IP address blocks: 154.88.76.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4951 (0x1357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 8 03:34:34 2021 GMT
Not After : Dec 30 03:34:34 2022 GMT
Subject: CN=61b027cd-b178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4a:c1:a3:47:e4:c6:df:0e:51:e2:c4:2a:34:
0c:01:b8:81:da:8d:f3:56:b7:f3:f9:2a:f7:e9:0a:
bb:9e:84:0a:39:fb:61:72:7b:0d:05:c2:13:57:e0:
5b:4b:bc:13:4c:00:1e:89:25:f8:80:ad:1c:1c:31:
37:6c:3e:5e:61:b2:59:9e:ef:7d:35:bb:09:e3:c5:
9d:04:1c:fd:f5:5a:39:7d:51:56:e3:1e:0d:b5:f7:
bc:f4:26:e6:9b:21:7c:4f:40:0d:83:6e:ac:d6:60:
bc:ec:0b:13:b6:d8:9a:2c:99:4f:a3:77:e8:97:34:
d0:7f:52:4b:08:43:29:7e:aa:d3:a7:f7:a8:53:27:
ec:26:58:21:f3:7d:b4:37:a2:8b:3b:f4:b3:be:50:
36:8f:c7:f3:ff:ca:d7:08:54:32:c2:1b:2c:5c:4f:
30:4d:4b:08:8a:f8:35:96:61:69:f1:bc:b4:6b:56:
e2:5a:58:fa:4b:fd:0c:ca:3c:8a:86:d9:8e:5f:98:
72:0b:06:80:06:33:eb:d5:46:20:a5:79:d9:bb:f8:
61:b6:73:43:7b:2d:3c:bb:55:b8:00:be:f5:21:ba:
e0:48:4a:ea:be:64:d9:7a:f4:ce:e6:88:1d:f1:47:
85:74:c3:fd:9b:f7:6b:0f:0d:aa:0b:43:18:7c:30:
9e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:33:F1:FA:F9:67:03:E2:41:2D:BF:C5:9F:75:45:3C:81:BB:70:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C487658657D711EC86FC69CC5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.76.0/23
Signature Algorithm: sha256WithRSAEncryption
32:32:1d:df:c1:64:4b:a7:cb:90:b9:19:bb:a7:2f:03:2d:20:
5b:b8:ad:b5:e9:62:a2:2b:ed:86:4a:81:f2:49:03:5d:b4:55:
1a:03:19:32:47:4a:d2:5d:7b:0b:be:1e:12:f9:03:2d:be:dd:
df:50:c8:48:55:b9:92:d2:ce:97:ea:45:a7:2c:ff:1d:b9:41:
c2:50:e9:2e:0d:65:44:9a:ef:c2:4a:9f:80:ad:e4:c0:60:b9:
33:55:01:ce:0f:da:9d:9b:8c:a0:a6:3a:5f:fa:5b:1b:08:8f:
6a:88:c2:2a:9a:4f:df:c1:fc:f5:a5:2c:ed:fe:d9:7a:2e:cb:
3a:78:25:a1:75:2d:18:ce:35:36:17:b9:7f:96:ea:d8:a5:57:
6e:84:72:99:9c:51:91:e0:42:05:5c:51:5f:c9:41:e7:4b:89:
ac:5b:0a:21:c2:50:61:4c:13:a2:eb:fb:15:90:69:e2:85:56:
14:da:88:3a:62:f9:c0:14:80:e5:08:8b:a3:98:1b:89:cc:88:
2c:d5:cc:cb:58:86:93:46:9f:d7:6a:c6:06:22:7a:3c:76:2b:
d9:16:d6:57:1e:7c:58:50:06:0d:b8:53:56:e2:be:37:25:a7:
28:c8:36:ae:81:d0:f1:e3:d7:a8:b4:1a:7f:72:0d:1b:79:83:
7d:0a:48:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-fra.rpki-client.org