Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/105CA650C1EC11ECBBB7B5F6F1222468.roa
File: 105CA650C1EC11ECBBB7B5F6F1222468.roa (raw, json)
Hash identifier: SsiaaDJHsKDYW+nkUb8AuBeo7snyHHowjoutkTltsOk=
Subject key identifier: 3D:08:E7:D5:4B:5D:44:C7:AA:40:98:77:59:6E:B5:C4:C4:23:98:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 15E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/105CA650C1EC11ECBBB7B5F6F1222468.roa
Signing time: Fri 22 Apr 2022 03:26:57 +0000
ROA not before: Fri 22 Apr 2022 03:26:54 +0000
ROA not after: Fri 30 Dec 2022 03:26:54 +0000
asID: 133201
IP address blocks: 154.205.36.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5609 (0x15e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 03:26:54 2022 GMT
Not After : Dec 30 03:26:54 2022 GMT
Subject: CN=62622081-ada9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:bd:06:c0:24:0c:06:1a:7f:22:25:ec:cd:
55:9b:37:c8:0d:a5:4a:d5:f7:1b:0b:4f:93:39:14:
62:68:99:17:89:54:9d:14:4d:f3:e3:e4:f4:1f:82:
eb:48:4a:b9:9d:53:79:b5:07:bc:89:87:06:3a:cb:
b4:07:dc:f5:67:28:ed:69:99:79:86:0d:c1:50:3c:
b1:17:a7:fa:72:17:d5:c9:9b:1e:f3:ae:d4:a5:5b:
e5:6b:7b:b7:99:6c:55:a6:ed:e7:a6:29:9d:b9:22:
e0:93:d0:ee:e8:c2:79:47:cd:34:8a:79:60:cb:6d:
5d:61:b2:ee:28:da:ae:41:da:0b:db:91:af:3e:14:
b0:83:7c:f5:ac:6f:be:50:c9:46:b7:76:b2:4f:aa:
e4:88:d3:b7:99:f6:5b:14:aa:a6:8c:42:80:b2:a6:
42:9f:ac:2e:32:dc:b2:8d:0c:35:e8:b4:45:f4:96:
3f:9c:0f:c8:8c:ec:01:82:41:5b:3b:f9:32:22:3c:
cd:ef:1a:75:f2:5b:64:86:8f:00:6d:28:b6:13:61:
5b:d1:4a:0a:41:29:76:20:94:18:b9:e7:23:2e:fb:
6b:ce:db:d4:24:13:de:0f:a2:af:41:01:8e:f1:d9:
8c:77:97:45:41:81:5b:fd:8a:ef:2c:67:55:2d:74:
08:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:08:E7:D5:4B:5D:44:C7:AA:40:98:77:59:6E:B5:C4:C4:23:98:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/105CA650C1EC11ECBBB7B5F6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.36.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:4b:9a:b7:8d:be:e3:56:38:d3:e8:e5:43:e3:15:d2:6b:a2:
ff:96:e6:0a:0b:a9:25:bd:b3:4b:d4:37:d5:d4:ac:11:5a:d1:
46:8f:b3:2f:19:ea:cc:ca:5d:aa:48:0e:43:7e:5d:73:01:89:
27:5a:48:94:d9:bd:4e:8c:d2:df:01:d2:8e:fd:b5:54:90:b8:
3b:60:e6:05:15:58:91:2f:71:75:5a:b3:34:bc:c1:21:3c:4c:
02:4b:e3:48:d6:48:4d:3e:6b:83:b0:f2:a6:8e:f6:22:2f:c8:
93:94:c1:d6:8d:18:16:aa:01:d3:4d:4a:84:cc:e1:1f:ac:56:
f2:31:ab:be:87:1b:d7:2c:bf:52:21:1b:0c:98:f5:21:3b:3d:
f6:e5:b3:b4:68:1a:84:50:69:bf:8d:da:72:16:fa:3b:06:4d:
77:0b:b0:87:e2:9f:a5:0a:1b:13:0b:0c:51:5d:25:99:70:a6:
a9:16:fb:3c:5d:34:33:1f:e6:fd:6a:d0:ff:b5:0c:e9:8c:83:
0b:7d:f1:73:4d:92:fb:c3:02:17:ca:2d:47:8f:10:23:03:2c:
84:27:88:88:6a:a4:1f:dd:3d:58:86:e7:5a:39:b2:09:e2:20:
9c:19:13:ed:82:8d:27:09:fb:54:fb:d6:44:9d:1a:8c:cc:74:
ff:96:f5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-fra.rpki-client.org