Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32CD468217C711ED8EFC86BCF1222468.roa
File: 32CD468217C711ED8EFC86BCF1222468.roa (raw, json)
Hash identifier: knuG9JyObIm1fIPnADjcw8GzuyH1RxbwDN0X+DtbaE0=
Subject key identifier: A0:C4:41:B3:16:8F:95:47:69:C5:7B:CB:3A:98:A4:78:31:DA:B3:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1834
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32CD468217C711ED8EFC86BCF1222468.roa
Signing time: Tue 09 Aug 2022 09:39:44 +0000
ROA not before: Sat 13 Aug 2022 09:39:38 +0000
ROA not after: Sat 20 May 2023 09:39:38 +0000
asID: 7018
IP address blocks: 154.208.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6196 (0x1834)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 13 09:39:38 2022 GMT
Not After : May 20 09:39:38 2023 GMT
Subject: CN=62f22b60-cd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c8:ec:34:f1:51:a4:e8:cd:5f:35:a1:5e:6a:
25:ff:bd:cb:0d:a7:c3:42:f0:5e:62:97:58:45:f9:
60:92:33:d8:9c:ce:d6:28:79:b4:ec:fd:cf:1a:35:
36:20:e8:5b:e8:a6:d4:e3:ae:c4:e5:dd:31:1a:0c:
3e:80:f5:c4:4f:08:aa:6e:5c:ae:81:75:25:90:42:
03:30:fc:be:51:98:52:64:16:aa:36:83:c8:02:cd:
01:20:97:e6:1a:af:00:fa:18:53:ff:c2:b7:32:24:
73:f6:ab:4e:26:b6:d0:9c:e3:31:e4:60:66:cf:a4:
c7:a8:f4:12:a2:cc:65:c9:e6:92:b6:70:92:49:89:
50:57:95:8f:a9:8a:a1:b2:73:6f:17:80:23:72:cd:
aa:03:e4:55:eb:11:87:76:89:f2:0f:c1:01:ae:d4:
15:6e:97:fd:e3:f7:01:e1:dd:34:83:4b:52:8a:25:
53:2d:fb:43:0a:ce:b5:83:cb:ef:51:c0:a1:42:4f:
ee:e1:96:10:25:71:68:3b:dc:70:b5:f4:59:93:77:
0e:33:b4:ea:86:88:65:9c:f9:29:eb:c5:ef:05:04:
02:b8:3a:30:b4:09:2e:c5:e2:93:61:28:46:60:26:
6d:19:33:c3:09:a5:53:0f:71:56:56:6f:4f:00:f5:
a8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C4:41:B3:16:8F:95:47:69:C5:7B:CB:3A:98:A4:78:31:DA:B3:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32CD468217C711ED8EFC86BCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.0.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:2d:82:c8:9d:cc:ed:be:c9:14:c7:42:ca:55:0d:31:1a:0c:
8d:4b:6f:29:fa:e9:c4:e6:87:bd:be:4f:94:5a:40:c7:4b:90:
c8:b8:ad:c6:86:5f:49:11:ed:06:94:b8:f0:8d:6a:f1:fd:83:
a2:11:d6:68:05:8b:06:cf:28:da:83:e6:e8:ea:96:ed:59:82:
f1:e5:4d:b2:77:96:df:48:c3:63:0e:53:9a:f6:a5:1e:0a:45:
e8:81:ac:ca:13:64:c7:a7:98:ee:34:2b:0b:8b:57:80:9a:82:
03:2e:6f:d1:f8:db:0b:83:0b:7d:5e:7e:6d:1c:ff:31:b9:3c:
23:b7:6a:c3:ea:e6:02:7b:40:02:e8:55:86:8c:e3:46:ca:5a:
71:41:dd:69:ab:ac:1b:12:8a:bb:71:44:64:62:7e:ca:68:82:
ba:a8:67:f8:8b:6c:1b:0d:f6:8a:7f:f7:f6:01:06:03:c7:48:
5d:8c:f8:89:e8:80:ed:06:da:af:9e:03:5c:fc:5a:c3:3c:82:
11:3f:95:06:12:9c:7a:e8:a1:8f:28:dd:4c:ec:a5:1f:32:c4:
60:6b:7e:04:ce:31:e7:6f:0d:76:01:aa:9d:83:de:90:88:4a:
29:f2:03:91:f9:33:7c:93:0c:5d:18:e2:55:b7:cd:88:fd:f7:
63:ff:e3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:05 2023 by rpki-client on console-ams.rpki-client.org