Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E8387BAE7D711ECA63BD6E4F1222468.roa
File: 1E8387BAE7D711ECA63BD6E4F1222468.roa (raw, json)
Hash identifier: 10lquGN1MYVjnNr6IX33sVqC2lOzqSgG6l/TBFDUDIs=
Subject key identifier: 0B:C5:AE:FC:A2:74:61:50:12:6A:2D:6B:02:97:31:FF:66:30:00:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 16C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E8387BAE7D711ECA63BD6E4F1222468.roa
Signing time: Thu 09 Jun 2022 09:32:46 +0000
ROA not before: Thu 09 Jun 2022 09:32:42 +0000
ROA not after: Wed 30 Aug 2023 09:32:42 +0000
asID: 133199
IP address blocks: 154.204.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5830 (0x16c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 9 09:32:42 2022 GMT
Not After : Aug 30 09:32:42 2023 GMT
Subject: CN=62a1be3e-49ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:93:2f:ac:ee:b8:97:b3:ff:0c:d3:dc:8c:
26:c5:65:e8:8e:5c:dd:b5:7a:0b:b5:32:47:6c:58:
bb:7b:5a:f7:ef:db:5c:0f:57:11:1f:ec:d0:c6:a9:
e7:55:d5:c6:65:19:61:12:ea:de:8c:92:20:3c:12:
be:10:19:ea:56:37:04:1c:68:05:27:14:a6:3b:d0:
db:82:97:16:9e:ed:36:bd:80:e1:0d:22:dc:9b:32:
6b:e4:e5:87:10:de:1d:38:9b:e6:8c:c5:7d:9a:9c:
cb:01:71:bf:00:ca:be:c5:f9:ec:eb:69:6b:bc:00:
30:77:1d:43:c1:54:87:b1:0e:c4:c7:58:b3:35:8a:
45:60:1f:b6:71:53:ee:0c:e5:95:ce:f2:12:22:8f:
51:e2:bf:fb:a0:05:b6:06:c7:c8:9b:45:d3:d7:88:
b1:06:42:35:23:40:0e:8a:ea:cf:02:24:d3:5e:7c:
cf:9e:ba:b2:53:0e:7c:dc:7f:c4:71:6d:03:ed:31:
c0:cc:8b:24:0d:78:ac:37:d6:58:3d:fc:99:7a:e0:
ff:c5:64:cd:3d:18:f4:7b:d3:00:ae:13:9c:cc:e1:
61:53:48:da:a6:c3:bd:ce:ed:55:f4:9b:ab:df:db:
a8:c5:b3:9e:e6:10:1f:a0:c4:ac:c0:48:c7:84:46:
fd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C5:AE:FC:A2:74:61:50:12:6A:2D:6B:02:97:31:FF:66:30:00:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E8387BAE7D711ECA63BD6E4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.52.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:33:76:22:ce:37:dc:df:ac:bc:61:fb:56:a3:3e:eb:e6:b5:
09:38:42:0f:b2:15:28:c0:0e:51:6d:5c:3e:88:82:41:4a:67:
67:11:bc:0f:ec:2f:be:e1:0a:62:2c:a9:e7:4c:cd:92:a0:49:
8b:5c:8d:77:7e:71:2f:f0:33:a6:1e:94:8f:cd:ed:2f:32:1f:
bd:36:18:98:d7:b3:be:a9:c7:9c:f8:c9:18:58:e1:d5:51:9c:
90:65:85:c2:64:15:cf:61:7a:b6:5d:c7:b5:18:0e:2f:fa:f8:
ae:72:57:9d:11:28:d5:9d:a5:fe:f4:83:6a:30:4e:d0:54:43:
12:b7:88:6b:5d:5b:07:94:f4:dc:eb:44:12:d8:02:a1:0e:45:
1b:61:a9:6c:08:d1:21:c6:50:5d:ee:e7:92:13:d5:3d:75:f1:
f3:0f:34:14:bf:85:af:29:2e:a4:10:aa:65:7f:c6:a1:f1:b3:
ed:c2:ff:87:12:96:ea:35:41:ea:e4:ad:69:83:59:b2:38:79:
44:a2:d9:fb:0d:ca:ca:b8:87:ed:d5:4f:01:9a:90:e1:3d:3c:
c8:3c:43:09:10:80:97:45:c0:db:92:c2:ce:d4:fe:a6:a6:28:
c2:ad:53:b9:6f:4c:6f:51:f6:fd:12:78:7d:93:a9:13:1e:5f:
75:a2:62:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 13:18:04 2023 by rpki-client on console-fra.rpki-client.org