Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BE48456125411ED9AA582E5F1222468.roa
File: 3BE48456125411ED9AA582E5F1222468.roa (raw, json)
Hash identifier: bqG3UhTQFD0uPysS724AfYLifVCk1K+E3GfrPjaPapQ=
Subject key identifier: 88:A7:1F:E3:8D:64:EB:26:3D:6B:A4:F5:E6:BD:CB:5B:72:A8:04:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 17F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BE48456125411ED9AA582E5F1222468.roa
Signing time: Tue 02 Aug 2022 11:14:11 +0000
ROA not before: Tue 02 Aug 2022 11:14:07 +0000
ROA not after: Thu 10 Aug 2023 11:14:07 +0000
asID: 133861
IP address blocks: 154.204.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6128 (0x17f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 11:14:07 2022 GMT
Not After : Aug 10 11:14:07 2023 GMT
Subject: CN=62e90703-17ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:3a:18:5a:96:9f:d8:0c:c1:50:32:f7:ae:
3d:2b:96:85:9b:52:61:3e:68:b1:28:f3:fc:d3:ce:
22:e4:ea:39:81:1b:7a:c3:fc:4e:f6:af:af:e7:23:
33:45:a8:da:f1:e8:40:6a:49:50:0a:ec:b7:03:25:
05:4f:5f:15:6d:e7:b0:9c:9e:b4:d6:f0:88:d7:65:
c2:09:7f:75:34:9a:68:09:d7:88:0d:50:70:4a:5b:
f7:b7:1f:1e:f4:97:99:3a:b7:d0:67:e5:0c:ab:99:
94:19:8f:01:14:c2:36:cc:1d:3b:b2:54:5a:3b:39:
93:77:92:a3:82:2b:d4:4b:f2:58:77:40:41:a0:a7:
2e:70:cd:fc:46:be:93:33:e5:3a:07:36:5b:af:8f:
e0:7a:1b:08:69:41:9e:26:f3:a7:d4:81:f9:22:0b:
fe:fa:9b:ae:65:ac:e4:4a:0f:08:3e:19:69:99:8f:
66:e6:e0:60:24:b3:9b:a1:85:70:94:9b:fa:78:45:
1c:83:59:b1:ce:c1:89:35:38:66:c1:a9:c1:d3:e1:
cc:86:e1:ff:b6:ce:85:f7:d2:23:53:23:80:ce:7b:
05:8e:5f:2f:56:39:98:aa:df:07:e4:78:f7:d4:2e:
98:59:25:dc:16:4a:43:59:cb:1b:c9:dc:7b:2c:ff:
41:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A7:1F:E3:8D:64:EB:26:3D:6B:A4:F5:E6:BD:CB:5B:72:A8:04:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BE48456125411ED9AA582E5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.35.0/24
Signature Algorithm: sha256WithRSAEncryption
00:cd:05:95:b6:1a:76:23:a7:0e:c6:cc:2b:51:85:df:a0:2a:
24:0b:4b:d3:fa:d9:19:70:83:6d:04:25:39:ac:bb:9d:67:f9:
51:b2:08:96:70:5e:44:c1:88:9a:ab:a6:13:75:dd:f4:e7:30:
4e:48:7e:5f:eb:76:1e:a4:ea:69:4c:e8:7e:8c:3b:65:50:09:
4e:df:21:09:74:be:d4:2a:92:23:a4:3f:6f:dd:77:2b:6c:28:
78:13:51:5e:b2:1a:e9:ac:fc:d3:d0:1c:0a:f3:19:bf:68:2b:
c8:b2:db:bd:63:44:42:fb:a3:91:fe:d6:6f:da:87:dd:6d:5a:
28:8d:b7:80:48:b4:3a:a9:b9:a5:43:b7:0d:bb:47:d0:47:99:
29:90:71:74:8d:48:72:d0:1b:53:ad:e6:c9:08:37:dd:c9:3d:
f3:2a:60:18:23:c0:bf:82:c3:17:d3:e3:2f:19:29:91:61:c3:
d7:05:31:e8:09:88:53:53:f8:4d:f5:c2:bf:bb:d6:d1:bb:26:
45:60:b0:06:6b:99:14:52:4a:56:d6:83:ec:09:9e:ac:0e:60:
1a:61:43:0e:93:c7:1b:d1:77:6e:da:f2:cb:25:c7:b8:4e:c5:
fd:e3:30:14:5c:62:e9:f5:0b:10:f2:2c:63:af:f8:ab:d5:cd:
b0:77:6d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 11 01:11:55 2023 by rpki-client on console-ams.rpki-client.org