Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F203FFC457D711EC96630FCD5A40D577.roa
File: F203FFC457D711EC96630FCD5A40D577.roa (raw, json)
Hash identifier: djpNP0xENzaiKRmRjxnUS4tRuVCpR5BxMyj9U/4SShY=
Subject key identifier: 86:2D:48:DE:04:B3:83:5A:D0:9C:ED:53:9C:70:CE:2C:AE:BD:5E:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 135D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F203FFC457D711EC96630FCD5A40D577.roa
Signing time: Wed 08 Dec 2021 03:35:53 +0000
ROA not before: Wed 08 Dec 2021 03:35:50 +0000
ROA not after: Fri 30 Dec 2022 03:35:50 +0000
asID: 54600
IP address blocks: 154.88.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4957 (0x135d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 8 03:35:50 2021 GMT
Not After : Dec 30 03:35:50 2022 GMT
Subject: CN=61b02819-8947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:81:a9:88:e5:62:62:7a:d4:ae:89:76:7e:f5:
42:db:a2:de:d5:9b:c4:bf:fa:a5:00:06:eb:1d:d3:
50:c5:1c:48:ca:fa:4b:1d:1a:77:5d:dd:b8:19:a9:
86:39:cb:88:8a:93:a6:9c:ae:b9:23:00:7f:2e:36:
d6:5e:b4:81:f3:ba:d6:22:c0:b1:f3:73:70:7a:20:
e1:93:c2:53:9c:9b:e6:a5:0a:d2:1a:ae:63:04:e5:
92:ac:ea:03:5a:f0:e8:46:ce:7b:88:55:d4:00:7a:
7c:69:d0:42:9c:88:1e:9c:13:d4:25:57:f7:1a:7f:
69:28:e1:6a:75:4d:85:55:7e:31:ca:a3:9d:9c:ba:
41:c3:d2:7a:03:09:e2:de:7f:6f:c0:09:48:42:21:
57:b2:09:c7:c8:00:6e:a8:7f:2f:7e:56:f6:02:ca:
23:b6:44:96:d9:e1:64:a4:0b:66:50:00:ae:93:94:
1d:ff:92:4a:79:22:c2:5e:97:ad:82:9f:45:83:54:
7e:a5:b3:28:c6:d6:67:54:07:ed:4d:6b:a0:c6:2c:
18:83:6a:fb:e7:75:25:c2:5f:54:3d:8c:80:f8:85:
32:40:b4:ab:74:e2:ab:21:7a:14:44:5b:05:98:7a:
c4:27:75:7c:59:a7:f1:1c:b7:0f:a7:5a:00:b1:ed:
09:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2D:48:DE:04:B3:83:5A:D0:9C:ED:53:9C:70:CE:2C:AE:BD:5E:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F203FFC457D711EC96630FCD5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.123.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:38:8e:70:73:d6:b6:95:fe:c3:b6:a4:d0:75:49:0f:79:ce:
64:8b:26:db:39:c5:5d:af:02:cb:86:62:a8:51:1f:07:49:47:
98:fe:7c:52:c9:11:47:1b:c3:54:31:30:78:2b:5c:83:7c:b1:
e0:55:86:3b:c3:e2:0b:f7:d9:e7:9b:40:f7:c1:c4:5a:fa:64:
1b:c3:2c:f4:43:1d:d4:6b:32:47:ff:be:43:48:79:00:8e:93:
35:8d:a6:28:83:d0:53:f5:a7:c6:fc:8f:64:a9:ba:b0:55:ae:
b9:b5:64:d6:f2:6d:8d:d3:04:bc:89:6a:7b:21:c7:90:aa:28:
ab:2a:71:88:9d:8d:b5:af:a8:07:3c:80:10:fb:d8:ad:ad:fd:
8c:9e:70:73:0b:7e:90:7b:cf:08:c7:f7:7f:35:a1:5e:58:e6:
f1:a9:ff:98:e2:97:bf:c6:c4:eb:15:7f:28:06:41:20:ee:69:
ea:63:55:8e:16:d5:69:78:c1:1c:21:65:14:15:c6:47:01:c0:
1b:df:b4:36:08:cc:2f:3d:e4:25:fc:f3:8b:ae:af:3e:20:64:
28:10:7d:6e:db:ea:45:36:1f:db:97:bb:92:0b:70:cd:55:59:
99:87:16:2c:d6:d8:0c:fb:ce:b8:66:82:89:74:45:02:d6:ac:
f2:c2:e2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:13 2023 by rpki-client on console-ams.rpki-client.org