Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B63F14001B711EDBB01429AF1222468.roa
File: 3B63F14001B711EDBB01429AF1222468.roa (raw, json)
Hash identifier: UBMWTc6NX4VB3CO2rwHawNVkQDfJGP/LcfdcWswE3ew=
Subject key identifier: 68:ED:C0:1D:D0:A6:31:9E:8D:AA:C0:7E:90:1D:92:4F:53:24:43:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1760
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B63F14001B711EDBB01429AF1222468.roa
Signing time: Tue 12 Jul 2022 07:50:01 +0000
ROA not before: Tue 12 Jul 2022 07:49:57 +0000
ROA not after: Tue 11 Jul 2023 07:49:57 +0000
asID: 138630
IP address blocks: 154.212.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5984 (0x1760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 07:49:57 2022 GMT
Not After : Jul 11 07:49:57 2023 GMT
Subject: CN=62cd27a8-9b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:ba:eb:05:d2:99:96:3d:fa:d7:bf:0b:5d:
63:f6:18:59:d8:c7:80:d3:74:61:76:75:60:30:a9:
26:f7:bb:6d:38:73:8a:d4:ac:a8:cb:5b:a9:00:eb:
98:a3:f7:a1:10:f9:95:68:8c:ed:63:af:1b:dd:3c:
ec:a4:66:73:b9:c8:3b:c3:42:80:89:c8:33:50:3d:
b7:7e:ad:22:86:ca:9c:cd:76:9e:83:d8:80:1c:ca:
46:7d:01:29:f9:e1:e5:62:38:e4:9a:51:b7:71:c0:
8e:eb:62:d3:62:c3:67:bd:7f:d6:d9:9c:74:27:f2:
60:b9:ac:56:6f:e0:a9:62:ef:6c:72:a7:94:e4:09:
4d:a5:9c:1a:76:16:23:3f:69:6e:a2:2b:1a:17:43:
f6:8e:d9:24:10:07:ce:9c:57:5a:e0:0f:3a:56:e4:
36:b0:60:a2:32:3e:96:f5:b1:20:09:9e:06:ca:ae:
cb:b2:b1:dd:1c:24:3e:25:ca:2f:5d:8c:69:d3:db:
d4:ad:60:96:b6:e2:49:8c:86:0c:4d:d0:e7:d3:15:
1c:28:94:93:f3:2f:4b:df:8c:24:43:02:e2:e6:e0:
06:05:50:39:74:36:be:2f:e3:59:65:e0:d5:70:99:
a0:95:1b:5b:2f:ae:b6:f1:f3:6e:1d:bb:e8:96:df:
ce:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:ED:C0:1D:D0:A6:31:9E:8D:AA:C0:7E:90:1D:92:4F:53:24:43:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B63F14001B711EDBB01429AF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.159.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:f1:0d:e8:f1:88:9f:d5:53:79:4b:57:7c:0d:f8:38:ff:2a:
94:be:df:4c:b9:cb:47:22:ac:01:7d:d3:df:83:43:b1:63:70:
41:1d:c2:23:09:85:3a:f1:e6:a6:72:59:94:d5:eb:e7:f5:f1:
f4:92:31:bb:be:26:f2:a8:61:ee:11:e0:d8:52:63:63:ef:0f:
2d:1b:02:2b:8e:55:4d:3f:e1:8a:13:45:54:f8:96:16:81:5a:
7c:43:4f:79:08:2f:07:55:55:80:59:e0:fb:c4:51:ed:67:50:
3c:18:43:4a:b4:3b:d4:9e:85:83:df:b9:0b:dc:04:0f:fa:09:
70:e4:70:f9:e5:c6:89:ae:3c:31:52:8d:df:54:da:dd:28:ff:
45:7b:a9:da:44:85:2a:f2:de:1c:71:ba:0f:26:02:fc:9d:2e:
c8:25:28:31:11:7a:9d:b9:fd:2f:fd:cf:7e:dd:fd:a5:5f:e7:
37:22:50:fc:98:90:01:18:78:37:9b:b3:27:ec:bc:f9:64:2a:
70:13:ae:2f:4e:7b:5b:44:56:47:fd:4b:de:f8:b7:59:87:67:
c5:ed:0b:c8:25:e5:0e:eb:03:12:f7:d0:19:42:67:34:db:2f:
2e:bd:1f:e0:40:ed:e6:c4:43:01:1a:8b:ea:c0:d5:b1:22:52:
44:62:ca:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:06 2023 by rpki-client on console-ams.rpki-client.org