Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E2824920E5011EDA5C228A5F1222468.roa
File: 2E2824920E5011EDA5C228A5F1222468.roa (raw, json)
Hash identifier: 8z/F5/aLeS1ua1nqSsImpgDKLfqHRosgDzEhSDza9gw=
Subject key identifier: 01:F4:DF:21:DA:B2:40:5E:B2:9E:D2:E8:D2:72:B9:03:B8:85:8C:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 179A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E2824920E5011EDA5C228A5F1222468.roa
Signing time: Thu 28 Jul 2022 08:35:05 +0000
ROA not before: Thu 28 Jul 2022 08:35:02 +0000
ROA not after: Mon 15 May 2023 08:35:02 +0000
asID: 397630
IP address blocks: 154.201.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6042 (0x179a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 28 08:35:02 2022 GMT
Not After : May 15 08:35:02 2023 GMT
Subject: CN=62e24a39-09db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:e1:41:ff:c9:5c:6b:25:2b:5a:14:b9:3a:
b1:d3:ee:17:86:b5:51:43:91:e1:87:8b:55:c0:af:
cc:04:70:91:c5:d4:f7:a0:24:5f:7c:96:21:da:57:
95:0b:f5:a7:ae:a2:64:33:86:d9:59:01:97:70:64:
25:4b:fd:aa:15:0b:c2:bc:46:a1:a8:cf:a9:85:24:
ca:f2:e3:cd:39:60:eb:b4:5d:0d:5b:84:96:54:75:
53:f6:fa:b2:b5:27:7f:5c:87:79:85:29:78:0e:3a:
aa:56:da:de:cd:d8:80:af:bd:28:69:35:37:29:ea:
60:7e:2c:11:62:cd:11:ef:4c:c3:19:6f:7a:dc:7e:
ab:f7:16:87:c8:77:f5:f7:ee:86:dd:4e:fa:20:75:
34:64:04:98:14:84:82:8d:17:08:f6:43:36:71:c2:
a4:2c:c3:3a:09:64:20:e0:e2:98:fb:9a:9f:0b:8f:
db:a3:01:5b:8e:cf:18:72:e5:cc:e3:38:bb:39:3b:
c7:09:d9:75:11:71:58:53:f1:53:97:dd:b5:5d:28:
9d:e6:f0:75:e5:4d:22:7f:e7:93:14:56:e1:24:23:
7b:ae:7a:c1:3d:4e:b0:1c:b7:b1:4a:b2:e0:74:bc:
a6:f7:bf:0c:43:4a:e2:99:54:68:65:23:f4:a0:c3:
57:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F4:DF:21:DA:B2:40:5E:B2:9E:D2:E8:D2:72:B9:03:B8:85:8C:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E2824920E5011EDA5C228A5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.33.0/24
Signature Algorithm: sha256WithRSAEncryption
88:8b:4f:dd:da:d2:52:0a:ca:e0:b8:73:06:ad:45:3c:d0:59:
b4:4d:7a:29:4e:99:98:f7:35:c6:bc:2e:a1:aa:04:7a:69:76:
2d:93:09:bb:91:d2:9a:2a:b1:34:90:90:50:a3:c4:30:bc:bc:
32:a6:d8:b5:96:58:6d:9d:1e:2f:b8:37:e3:4f:47:52:80:1a:
8f:4e:66:db:a6:86:a3:2c:b5:1b:be:b9:20:12:48:4c:a5:f4:
3d:00:8f:6e:08:26:3f:87:3a:06:49:c8:b1:e7:49:d1:7a:29:
72:93:30:74:38:f9:66:02:b4:6c:ec:84:d1:7a:a3:be:79:26:
68:cb:f0:61:b7:94:6c:51:21:23:c3:45:2a:f5:cf:7c:0b:67:
49:94:2f:75:f2:8d:b2:a5:b3:c1:6d:e9:c1:95:77:46:c6:7f:
76:60:dd:7a:20:4b:25:f5:c8:d8:0c:ef:23:47:b9:e1:a7:e4:
c0:9d:9b:84:c8:e1:bb:ac:86:d1:bc:a7:19:bb:63:81:d4:4f:
c6:40:63:3c:a5:e3:d3:b5:45:c8:6e:2e:01:1d:38:7f:7a:51:
f8:2b:29:19:14:26:8c:1a:5c:5a:be:27:e7:25:0f:4e:69:75:
e5:e7:a7:bc:14:d9:bf:51:eb:78:59:9e:2d:c0:aa:cd:9e:71:
df:1f:5a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-fra.rpki-client.org