Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7665DAE5BB511EC910C7CC15A40D577.roa
File: F7665DAE5BB511EC910C7CC15A40D577.roa (raw, json)
Hash identifier: j4p1vMpa/WmEzk833dVRs+egNI6O9bV0MoxLl9pG9aU=
Subject key identifier: 2F:1B:69:29:C8:8C:C7:D7:E0:79:BD:B6:3B:1A:E1:F2:0D:21:F2:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 13A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7665DAE5BB511EC910C7CC15A40D577.roa
Signing time: Mon 13 Dec 2021 01:42:44 +0000
ROA not before: Mon 13 Dec 2021 01:42:40 +0000
ROA not after: Fri 30 Dec 2022 01:42:40 +0000
asID: 135097
IP address blocks: 154.204.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5025 (0x13a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 13 01:42:40 2021 GMT
Not After : Dec 30 01:42:40 2022 GMT
Subject: CN=61b6a514-ccec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4e:f1:34:53:c4:7f:e8:52:ab:3e:02:ed:65:
87:87:e3:0d:77:b0:42:84:c2:47:5c:84:f1:96:a1:
7d:4f:47:63:48:1a:f4:f1:18:6b:e0:1a:c7:9b:0c:
7a:08:55:d9:70:95:00:4e:fb:1b:dd:5e:25:19:6f:
4e:ae:fe:d0:b1:a5:13:05:0a:db:c4:14:a3:77:97:
4c:9c:8b:57:6d:ee:b7:19:8c:e6:6b:1e:a3:11:a3:
93:6e:db:fb:d0:f8:19:3e:da:27:7d:53:6b:cd:e2:
d6:ec:fe:51:97:ee:07:12:0a:58:73:31:52:b8:50:
13:f4:f3:0c:62:1b:78:f9:cf:ab:44:a6:6d:65:94:
5d:46:61:6a:25:2b:8f:75:4b:6d:9e:c6:fd:76:93:
82:4f:a5:5d:42:03:03:43:3d:40:84:3b:6c:c8:1b:
65:4a:a4:47:e7:75:3e:68:5d:45:bf:23:23:89:8d:
54:5f:fb:c6:24:94:86:00:a7:e4:b0:d1:9d:5b:71:
2f:0b:ce:48:c9:1a:1a:6b:27:1f:a2:13:ad:1a:0c:
ca:64:7d:30:f6:b4:81:fa:98:72:2b:98:b7:11:ab:
2e:e5:9c:19:a8:8a:e5:30:d9:2c:82:be:03:39:18:
58:48:a6:97:ab:d8:c8:36:8f:a3:6a:70:27:cd:d6:
6f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1B:69:29:C8:8C:C7:D7:E0:79:BD:B6:3B:1A:E1:F2:0D:21:F2:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7665DAE5BB511EC910C7CC15A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.67.0/24
Signature Algorithm: sha256WithRSAEncryption
73:10:ed:bb:90:49:16:ac:f1:52:1f:93:70:2e:dd:9c:72:f4:
ce:64:5f:ac:27:cc:06:e1:04:3f:09:36:58:16:1d:43:79:f8:
22:ac:e0:18:36:92:20:e0:81:d4:f5:ab:48:9e:cf:f7:71:5c:
fb:29:6d:28:7c:39:0e:63:1f:9b:dd:ae:72:56:75:69:66:78:
72:1e:22:8b:d3:1d:b9:a8:a1:01:b9:e5:08:9b:b4:c4:12:e8:
d9:14:ca:6a:b8:0f:30:ac:83:0f:2f:9c:7b:f5:8c:df:f2:6d:
92:ce:6b:2f:9c:79:2c:bc:33:25:c5:74:11:b0:0f:db:d5:d2:
33:38:ff:e0:b0:00:26:ec:df:23:ea:8e:a9:46:1e:e2:6e:03:
ea:9a:8b:6c:79:a7:2f:77:b2:ca:fc:dd:d5:0d:06:d6:df:87:
97:4d:3d:fc:05:4c:3a:4c:cc:40:13:d2:16:d8:90:7b:3e:e3:
3a:8b:7f:f3:27:5c:03:d4:13:f3:7e:3b:6a:de:17:6d:b6:f9:
84:f1:e8:11:9b:d9:2f:bc:15:1b:e8:0b:7e:64:78:73:da:51:
1c:07:bb:ca:ea:0e:b0:55:f9:77:74:6b:e3:73:05:45:0d:b5:
4c:83:0a:49:d0:c4:3a:bb:d1:d6:7a:1f:2b:9e:a3:94:46:de:
21:4f:0e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-fra.rpki-client.org