Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24D640BA5BC011EC8A8814DF5A40D577.roa
File: 24D640BA5BC011EC8A8814DF5A40D577.roa (raw, json)
Hash identifier: YcCuA4fyLyVUiD4EklU3jgcaRStkeJBg2l8jglcGclg=
Subject key identifier: F7:78:AE:8F:88:01:BD:28:A1:B6:51:C9:80:0B:D8:B5:D4:A9:BE:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 13DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24D640BA5BC011EC8A8814DF5A40D577.roa
Signing time: Mon 13 Dec 2021 02:55:35 +0000
ROA not before: Mon 13 Dec 2021 02:55:32 +0000
ROA not after: Fri 30 Dec 2022 02:55:32 +0000
asID: 133201
IP address blocks: 154.204.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5087 (0x13df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 13 02:55:32 2021 GMT
Not After : Dec 30 02:55:32 2022 GMT
Subject: CN=61b6b627-7b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:2c:90:4f:24:f7:bf:83:71:f2:67:0d:a9:
cf:5e:4c:72:07:b1:b8:e4:83:0b:97:12:de:6a:ae:
e1:85:18:8e:bd:af:e2:cd:58:a6:da:1a:e9:ee:21:
32:3b:9d:28:21:6c:15:de:01:1d:66:9e:92:cb:c6:
e8:22:15:71:aa:b1:b3:2b:bc:e3:4a:1e:ae:1a:22:
d6:d9:1a:fe:f6:7a:31:9d:57:c6:18:56:eb:0f:97:
73:a9:f6:61:6f:aa:07:8e:41:5e:84:2e:4a:f5:23:
43:26:8b:b8:f8:33:7c:d7:8f:64:43:6f:f8:05:3d:
2a:08:7a:72:7d:90:bf:b4:67:37:1c:72:39:5e:f9:
6d:88:14:7d:73:31:ed:3b:d5:0b:30:d2:0b:12:0a:
89:88:e3:a9:fc:81:7e:e9:66:10:e0:9b:99:22:2e:
62:49:5e:02:22:8e:0b:77:d3:6f:73:f7:b8:42:3c:
8a:86:5d:95:1c:09:38:ee:84:3b:8c:1c:b8:4e:0f:
09:0b:b1:e8:db:26:d0:9d:b0:0b:50:a1:87:e0:7a:
bf:15:50:e5:50:6e:8e:1e:c6:7e:29:09:cf:72:2c:
37:7d:7d:10:07:c7:ee:b2:5f:b9:34:be:64:54:d6:
0e:ec:ec:bd:32:16:43:33:5c:78:ef:c9:3c:bf:e0:
2d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:78:AE:8F:88:01:BD:28:A1:B6:51:C9:80:0B:D8:B5:D4:A9:BE:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24D640BA5BC011EC8A8814DF5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:3f:d5:ef:a8:31:a8:c3:08:ca:30:43:bd:56:4a:00:e1:00:
12:fc:d8:24:5c:13:0c:15:b8:56:83:97:de:55:cf:ff:40:bf:
1f:e2:31:26:b8:a7:b8:ce:62:02:65:81:f0:e1:d4:22:11:45:
59:1a:c6:81:9f:51:44:16:df:2e:6a:25:74:b0:b7:a3:51:8c:
df:96:84:b8:0a:62:67:29:54:5d:16:b3:30:94:05:8a:a4:01:
84:ef:a7:34:00:73:8a:a6:e2:b3:1a:44:12:cc:15:70:b8:90:
a5:f2:76:1f:f5:d5:b8:1f:94:e0:ef:f2:12:05:04:68:e3:04:
49:75:91:3e:7a:55:3e:4c:ce:a1:3c:b4:a8:77:30:00:dc:f1:
ee:d8:97:d9:83:70:5a:05:91:ba:eb:51:00:75:76:2b:4a:b0:
3f:ad:72:20:05:af:e6:85:26:5d:95:7c:5b:5f:98:dd:8a:5f:
13:45:2e:7f:74:04:9a:3b:83:5c:2f:02:e6:7a:e3:7a:9f:6b:
56:cf:da:ea:cc:a4:97:68:0e:57:3e:ed:5a:1c:4e:58:80:3f:
c6:4a:2d:08:a7:ad:1b:e7:4c:0c:a6:03:d0:58:85:c9:aa:3d:
f0:2a:88:a7:aa:f8:c0:6c:86:dd:50:ce:d1:9c:e1:08:a2:cc:
38:00:a9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:05 2023 by rpki-client on console-ams.rpki-client.org