Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18E664163D7811EDAB1FF199F1222468.roa
File: 18E664163D7811EDAB1FF199F1222468.roa (raw, json)
Hash identifier: S+tXvz8F6GeH9Il9wgg25abRwWLXxW+N3qKk4YuGU1U=
Subject key identifier: 5A:CB:0F:3B:C6:10:96:89:7F:67:45:5E:0E:C7:C2:92:2D:01:BF:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1920
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18E664163D7811EDAB1FF199F1222468.roa
Signing time: Mon 26 Sep 2022 08:49:14 +0000
ROA not before: Mon 26 Sep 2022 08:49:11 +0000
ROA not after: Fri 30 Dec 2022 08:49:11 +0000
asID: 35916
IP address blocks: 154.94.10.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6432 (0x1920)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 26 08:49:11 2022 GMT
Not After : Dec 30 08:49:11 2022 GMT
Subject: CN=6331678a-ef98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5b:eb:05:ee:e3:e2:87:a2:e0:12:c6:b3:18:
e5:82:f4:85:b1:bd:24:5f:bf:2c:4c:81:d0:3e:39:
7c:07:1c:8b:63:4a:09:54:6b:23:fe:a6:34:3a:83:
eb:c8:22:fa:dc:e9:8a:3e:fb:95:0c:88:5a:7f:3e:
d4:28:64:54:be:4a:a7:d8:da:b7:5c:cf:63:ac:f7:
60:2a:e4:58:44:fe:f6:3a:e5:aa:89:0b:84:06:d0:
4d:b9:93:f4:c7:82:50:7c:4e:d0:06:e2:6f:06:39:
40:cf:44:5b:57:27:dc:75:d6:51:43:f9:a1:73:13:
a4:32:a3:5c:92:fc:17:16:56:79:74:ac:3c:5a:e6:
45:82:49:10:6c:9d:6c:a9:03:02:e8:81:a5:c5:39:
07:6d:d4:fa:a1:43:be:7c:5d:d0:5b:e8:75:a2:e6:
3e:90:d6:64:b6:71:d3:06:43:81:12:1a:3e:43:01:
31:43:e9:35:e0:66:67:e0:5e:2e:24:76:df:b2:b9:
b1:1a:ec:8f:18:90:37:0b:54:cc:10:34:5e:f2:9f:
e6:20:f5:79:22:62:3c:1a:ad:3f:51:ce:25:fe:3d:
d0:32:98:40:b6:09:a3:c8:3b:26:21:b7:75:02:c3:
86:4b:c6:c2:13:1a:04:0c:1a:15:c5:24:2f:cb:4f:
b9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CB:0F:3B:C6:10:96:89:7F:67:45:5E:0E:C7:C2:92:2D:01:BF:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18E664163D7811EDAB1FF199F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.10.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:05:69:9b:6e:91:ca:f4:99:72:a5:58:f8:41:11:91:fb:50:
da:bc:64:90:91:b4:77:04:95:bf:e2:9d:9b:c8:5b:99:54:c8:
35:bb:f0:57:0f:90:7d:19:43:11:a1:14:05:c7:78:20:4d:e2:
2e:fc:90:ad:7a:40:b9:07:82:ac:65:51:ba:50:f7:c3:91:3f:
62:29:e8:24:60:0d:6e:dc:93:5e:15:be:c3:8d:cd:1b:51:c3:
65:8e:63:6d:cb:93:d3:60:78:e0:4d:b2:91:d4:1c:26:e5:96:
44:97:95:f1:0e:ec:28:11:02:8a:92:fb:54:18:4f:9d:3a:34:
2b:f9:6c:aa:35:e7:5e:2f:8b:6b:d1:99:28:5d:f6:cc:e6:d4:
86:90:ae:cc:66:0a:db:3a:02:39:33:2e:84:8c:e4:21:80:52:
a3:b9:ea:02:ce:85:47:36:5d:83:2b:4d:e2:9d:72:f1:26:a4:
5a:be:ae:11:e1:8a:c4:df:bc:03:9a:c1:52:b9:1b:57:8e:35:
c6:61:d1:d6:5e:40:88:f5:79:21:ac:ae:55:e5:27:43:81:6b:
53:44:f4:87:9c:84:51:24:6e:92:cd:a3:42:e7:2f:7d:ec:a7:
a4:09:26:29:64:11:97:c9:6c:05:55:5b:b7:a3:1d:2f:a5:d7:
cb:f4:6d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:04 2023 by rpki-client on console-ams.rpki-client.org