Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2263A8A6125711EDA4486FEEF1222468.roa
File: 2263A8A6125711EDA4486FEEF1222468.roa (raw, json)
Hash identifier: WUbkl/G8ApQFr8+sxz5ZN5fOOWr75eS2BelfEkuFw7c=
Subject key identifier: 9B:F7:56:56:CB:F2:CF:F7:A4:8E:5C:82:4D:64:CB:7F:32:11:7C:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 180A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2263A8A6125711EDA4486FEEF1222468.roa
Signing time: Tue 02 Aug 2022 11:34:57 +0000
ROA not before: Tue 02 Aug 2022 11:34:53 +0000
ROA not after: Thu 10 Aug 2023 11:34:53 +0000
asID: 133861
IP address blocks: 154.204.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6154 (0x180a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 11:34:53 2022 GMT
Not After : Aug 10 11:34:53 2023 GMT
Subject: CN=62e90be1-a8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:54:47:19:49:64:f2:ea:3f:6a:18:ea:23:
fc:d7:bc:e3:0d:17:d3:51:a0:38:3b:46:e3:5a:2d:
b5:82:bb:fa:31:87:87:0f:71:79:af:3c:bb:fb:61:
3e:66:07:25:f9:e8:7e:e6:76:6d:12:dd:a6:19:a2:
4b:43:a0:2c:24:ca:59:7b:06:e3:c2:d5:81:6d:c1:
66:69:32:fc:33:93:24:66:36:a7:6c:12:12:bb:e8:
df:7f:a7:7f:bd:e1:63:07:45:3e:e3:9c:25:c4:b4:
d6:bf:9f:48:88:42:d7:50:be:26:ee:5b:a3:4c:b3:
ee:a3:75:c5:11:96:fd:08:74:01:bc:23:c7:55:5e:
c0:2f:4f:d5:f9:9b:e1:66:db:ea:cb:37:00:91:d3:
f3:52:ff:a4:47:ab:cf:77:41:7e:f7:0b:4f:46:57:
21:55:df:f9:9c:30:97:7f:2a:9f:17:8a:27:7b:9d:
28:74:94:2d:4f:59:03:61:c9:72:82:26:a2:cc:cc:
c0:8a:e4:ac:04:e1:f9:a1:2a:8a:90:49:ac:66:8c:
bf:44:33:c8:aa:38:94:5c:da:c7:7b:f3:19:00:11:
26:58:92:eb:22:41:3e:b6:95:de:1f:36:8d:1f:0e:
c3:c8:b1:09:77:89:0a:5f:b6:1b:35:a3:bf:f0:f4:
ba:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F7:56:56:CB:F2:CF:F7:A4:8E:5C:82:4D:64:CB:7F:32:11:7C:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2263A8A6125711EDA4486FEEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.61.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:a1:be:6c:c9:bc:71:db:bb:75:cc:b8:fb:ee:83:88:14:2a:
4b:fb:11:fb:1a:c0:34:24:8c:84:d1:60:ef:1e:d0:79:2f:a3:
94:69:c0:29:af:69:a3:9e:cc:12:e9:2b:67:f1:73:26:59:53:
02:7b:2c:0e:f5:1b:fa:3b:fb:8a:5e:b1:48:46:bc:4a:8b:c4:
51:90:34:6c:0b:e9:06:4f:6b:09:84:09:29:2f:87:8f:a8:a7:
51:c0:7b:af:ea:74:ef:d6:6d:26:0e:0b:5e:b8:a0:ef:b0:f0:
3e:d5:1a:c0:35:1d:b0:6b:94:87:25:ef:80:92:76:c1:e8:c8:
9e:39:a6:07:69:4d:fa:52:12:c3:2e:c4:27:56:09:5b:f9:2e:
09:f4:31:cb:d1:09:d6:1b:e4:d5:75:60:88:8f:54:a3:3c:1b:
19:30:3a:dd:72:cc:39:6b:48:0a:76:87:3a:66:5a:9e:9a:32:
8d:20:9e:f3:a7:f4:d9:00:f8:b5:5c:3e:21:47:cf:16:42:f8:
04:c7:f2:83:46:52:d0:69:35:79:a8:5e:e2:49:3d:22:72:b2:
d3:02:0a:aa:78:6a:7c:02:b0:46:31:10:85:b3:97:79:41:79:
e1:bd:b9:01:df:3b:42:45:e2:ec:c2:8b:a9:53:9d:45:e1:3d:
80:ed:95:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 11 01:22:42 2023 by rpki-client on console-fra.rpki-client.org