Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6A2C1F8728F11EC8471096E5A40D577.roa
File: C6A2C1F8728F11EC8471096E5A40D577.roa (raw, json)
Hash identifier: L+14m0MnW+C3Clj6ECxd2+Urv2r12AJv9c1qEKElL08=
Subject key identifier: D1:3C:71:8D:38:ED:58:8C:5D:84:30:98:B1:58:7E:64:6D:85:65:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 147B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6A2C1F8728F11EC8471096E5A40D577.roa
Signing time: Tue 11 Jan 2022 03:37:18 +0000
ROA not before: Tue 11 Jan 2022 03:37:14 +0000
ROA not after: Tue 28 Feb 2023 03:37:14 +0000
asID: 7018
IP address blocks: 154.205.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5243 (0x147b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 11 03:37:14 2022 GMT
Not After : Feb 28 03:37:14 2023 GMT
Subject: CN=61dcfb6e-e9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ac:4f:20:5c:8a:7c:1a:b5:20:0d:48:6f:65:
b5:ca:6c:db:95:95:47:5b:b6:6f:2a:63:38:f3:0e:
7a:0e:d0:b0:c9:f1:a2:9a:64:df:eb:f8:b7:75:7b:
1e:1e:f0:f3:5a:6f:12:d8:ea:13:75:6f:be:0d:f8:
3c:f1:a2:6a:2f:55:c4:08:29:dd:dd:f9:35:c7:79:
e6:0b:bf:00:d6:76:a4:32:ea:e2:cc:5e:50:25:2d:
4f:37:d8:7b:e4:1f:26:38:b6:5f:4c:3c:a0:e5:35:
f9:06:da:1c:ba:f4:86:bf:e6:77:2b:37:04:9a:8c:
60:f5:93:58:58:fd:89:77:2c:ca:70:2f:0f:2b:1a:
70:f6:e8:6f:a3:f3:27:5d:e8:b0:2a:9b:b5:2c:98:
e6:8b:ac:b5:48:d3:a6:6b:71:1d:e0:35:43:f1:85:
76:1f:ef:cf:5e:e6:6c:5f:6d:c2:1b:3d:d5:9d:63:
15:42:16:ae:db:33:6b:d5:93:16:78:f5:25:6d:cb:
a3:68:b3:e5:b0:e7:5c:60:c3:87:06:5c:90:fb:69:
d4:9a:3c:d1:1d:5e:ed:18:15:c4:f7:6f:44:0b:92:
c0:25:c3:4a:98:1a:ab:fe:0c:49:65:c6:83:2a:7d:
da:93:35:59:a5:f8:15:57:54:ba:2b:6c:17:5a:c0:
e0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3C:71:8D:38:ED:58:8C:5D:84:30:98:B1:58:7E:64:6D:85:65:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6A2C1F8728F11EC8471096E5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.64.0/18
Signature Algorithm: sha256WithRSAEncryption
c2:62:0c:2c:7d:3b:45:48:43:3c:46:88:ce:f4:90:6a:74:99:
96:9a:b8:85:a9:a5:d1:36:2f:71:f7:91:fb:66:51:e0:c7:95:
e3:07:a2:5f:49:4b:73:5d:99:c7:b1:ad:fb:75:38:e2:ab:23:
31:d7:bc:a9:ee:7a:ab:eb:ef:55:16:50:56:4d:7a:7a:27:4e:
59:9a:c4:aa:7b:d2:05:0f:c6:7f:6b:1f:1a:e7:fc:bf:14:fd:
c2:b5:1c:a6:73:c1:26:33:5b:04:87:68:9b:48:23:c7:84:5f:
fc:d7:d9:da:fc:d5:2e:ea:6b:f1:cb:7a:3d:ef:97:02:fe:22:
4a:cf:34:0d:25:f8:11:66:a8:ad:8c:42:41:de:29:35:56:56:
3f:81:f0:64:3b:95:a6:a8:98:cc:7b:07:95:2e:a0:71:6b:33:
93:37:5e:fc:96:f9:01:bd:4c:d0:d3:6a:43:dd:03:6b:93:93:
c8:7f:a1:10:0d:c4:98:07:1f:5d:bd:2c:f7:a5:d7:a8:da:71:
c5:67:19:aa:bf:f4:34:e7:09:38:c8:23:85:6e:9d:d1:e7:19:
65:0f:a0:46:64:42:79:ba:df:92:60:67:cc:75:24:b7:44:d4:
c3:b7:36:bf:82:67:8f:59:17:eb:7b:bf:52:4a:e5:57:32:36:
c1:e8:44:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-ams.rpki-client.org