Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C9CBE2CDB1111ECA4079F8FF1222468.roa
File: 0C9CBE2CDB1111ECA4079F8FF1222468.roa (raw, json)
Hash identifier: E184EEvp2qLKymuTc6kOZ4e+5tzHP2V4tz+T26s/bkg=
Subject key identifier: 76:53:08:6A:36:A7:C8:9E:3C:35:3A:EF:A8:FF:06:E9:EB:5C:60:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 166A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C9CBE2CDB1111ECA4079F8FF1222468.roa
Signing time: Tue 24 May 2022 03:24:42 +0000
ROA not before: Tue 24 May 2022 03:24:37 +0000
ROA not after: Fri 30 Jun 2023 03:24:37 +0000
asID: 141216
IP address blocks: 154.205.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5738 (0x166a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 03:24:37 2022 GMT
Not After : Jun 30 03:24:37 2023 GMT
Subject: CN=628c4ff9-0386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:71:29:22:9b:88:c2:2f:94:3f:2b:4f:97:cf:
4b:c1:1f:3f:ec:fa:11:ae:1d:07:d7:8d:00:bd:5f:
1c:d5:4d:69:2a:af:7f:d6:c1:33:d4:ba:ed:44:5b:
fb:b5:90:ab:0d:3e:22:b7:44:36:5a:35:1a:9a:86:
2d:b4:73:b3:98:68:61:9e:c4:98:c6:2f:5f:ce:0e:
9b:43:4a:3f:dc:19:5a:2d:10:ab:59:d1:01:24:c1:
c8:e2:c5:75:e0:f0:44:87:61:30:fc:c8:9a:c0:c2:
eb:0c:81:fe:e3:f9:73:97:72:b4:02:d0:00:9a:a1:
c6:15:e0:19:be:d6:10:d1:18:20:7a:28:c3:e3:09:
b5:d9:ca:ea:35:47:66:6e:3d:90:a0:6c:6e:59:44:
9d:0a:25:ef:31:d0:27:52:58:12:ed:4d:99:5b:47:
cb:28:7d:6e:d9:81:a9:55:61:1c:90:37:55:0d:93:
fd:3f:5c:75:6a:9b:86:73:8c:fa:5e:5f:99:96:41:
ab:e1:e4:d7:b3:50:aa:d2:55:ad:2e:fc:6c:7c:1c:
e7:cc:b2:b4:26:69:97:cc:0a:46:1c:6b:08:70:28:
0a:4d:c7:15:09:38:3a:65:94:93:c6:7f:f2:67:36:
92:0e:c3:bd:05:b5:4a:52:db:86:d5:78:26:d5:9d:
cb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:53:08:6A:36:A7:C8:9E:3C:35:3A:EF:A8:FF:06:E9:EB:5C:60:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C9CBE2CDB1111ECA4079F8FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.186.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ea:48:3b:9a:d3:0d:7c:b3:78:71:7e:8f:60:04:98:25:34:
2e:7d:29:8b:cf:4f:81:35:56:ab:91:36:46:5d:cc:52:b4:63:
0c:65:af:56:75:3c:00:ab:b0:c0:82:03:c6:88:72:ae:a3:10:
80:82:ff:50:de:91:86:98:48:17:e7:fe:a5:06:bf:8c:38:01:
92:b6:60:95:f2:3d:5f:e6:85:9a:04:8b:93:fa:34:98:c6:ec:
24:9b:77:3c:9e:94:55:6d:b3:7d:3e:38:b9:4e:7f:26:da:73:
05:30:ce:5f:78:f8:50:3e:08:59:b1:24:71:39:a2:cc:bc:19:
e0:e2:4d:87:4f:30:de:2d:00:ed:d0:73:8e:22:95:5a:5b:b9:
b9:34:81:4a:78:e1:89:86:fd:5d:55:1f:f3:d8:86:81:b3:be:
b1:eb:f8:6c:34:ab:f2:e8:27:0b:92:a2:24:2b:39:fe:16:8a:
36:5e:3b:b8:e7:f2:ee:95:94:00:3c:24:71:a1:f7:65:c2:ab:
64:85:8d:d0:2d:f6:3d:2c:eb:e4:91:f3:84:42:f4:86:d3:6b:
76:4f:0f:1f:90:c1:b4:d0:7e:30:9c:8a:e0:96:7a:e6:03:0d:
ed:dd:24:63:e9:d4:c4:a1:51:fc:24:d6:79:5b:5f:41:93:6f:
92:80:4e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:04 2023 by rpki-client on console-ams.rpki-client.org