Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43E9233EE7D711EC906261E5F1222468.roa
File: 43E9233EE7D711EC906261E5F1222468.roa (raw, json)
Hash identifier: CpTrP6s8AFCLakKdKOt2wrDap0N4pxs19unyyx41HPY=
Subject key identifier: B4:2A:BF:45:3F:67:36:B6:83:2C:41:BD:BE:91:B5:C5:23:37:2D:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 16CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43E9233EE7D711EC906261E5F1222468.roa
Signing time: Thu 09 Jun 2022 09:33:48 +0000
ROA not before: Thu 09 Jun 2022 09:33:45 +0000
ROA not after: Wed 30 Aug 2023 09:33:45 +0000
asID: 133199
IP address blocks: 154.204.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5836 (0x16cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 9 09:33:45 2022 GMT
Not After : Aug 30 09:33:45 2023 GMT
Subject: CN=62a1be7c-c0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:de:b8:16:34:b9:45:af:5c:85:ae:aa:75:92:
b8:4d:97:01:bd:f7:94:a1:12:12:06:9b:3e:0c:de:
c7:ac:e4:8a:bd:7b:ad:c9:e7:41:05:69:35:5c:b6:
12:7e:50:50:c6:36:8f:a5:70:5c:a0:13:5c:49:87:
16:7b:22:bb:4f:28:b8:6b:33:ab:24:90:b9:c1:1e:
2b:f9:bd:6a:7f:67:6d:e2:44:69:6b:90:af:2e:f4:
c5:f1:dd:2d:4c:61:15:23:46:9b:93:fc:c4:da:c4:
fc:73:10:8d:ef:41:35:73:a6:21:b6:a4:7f:3f:54:
35:e0:4e:62:53:a3:25:e0:d9:e3:60:81:0c:29:b8:
18:61:a7:1d:77:0a:a8:55:bd:4b:f0:8b:53:19:44:
70:56:a7:a6:5a:6f:4d:54:c4:a0:66:d7:0f:90:c0:
36:b7:21:cb:21:e3:01:02:ec:49:f2:75:f7:94:d2:
85:7b:e0:ee:41:d5:a6:2e:ef:47:66:18:d0:74:d2:
ae:b9:51:3b:9b:f0:3e:bc:1f:d0:13:2a:3f:51:5f:
83:81:d5:34:72:cd:30:f2:09:ae:4d:bf:bc:2b:35:
ee:0d:ce:48:68:35:28:4a:92:13:b7:4a:61:b1:81:
f0:1a:a8:90:81:e7:08:88:97:89:83:e9:73:6d:b2:
1a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2A:BF:45:3F:67:36:B6:83:2C:41:BD:BE:91:B5:C5:23:37:2D:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43E9233EE7D711EC906261E5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.57.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:df:ec:eb:d3:fa:f8:0a:30:7a:e6:2c:73:8c:d3:d6:9c:fe:
82:bf:11:03:b0:83:dc:dc:5c:e4:a1:62:2a:dc:8c:4e:2b:7e:
e1:49:d0:27:cb:42:a9:ef:7c:f3:29:f2:36:f6:76:56:22:c7:
73:9a:bd:a5:ce:91:64:c0:ca:de:8e:15:71:3a:3f:14:54:4b:
cb:92:27:1d:f6:ee:a3:61:01:7b:e5:cf:e9:c3:da:9c:bf:6e:
1f:2b:ba:4f:bf:a5:bd:a0:8e:ea:ad:b2:e3:aa:50:39:09:87:
81:e6:e9:fc:fa:f4:7d:c5:87:b5:65:60:b1:bf:a0:ff:af:ca:
4e:fc:67:78:26:67:06:f9:55:1b:14:cb:9c:02:09:43:63:2c:
49:aa:91:4b:72:ca:10:21:61:99:26:1a:90:7e:4a:23:97:ef:
11:a5:f9:0f:17:24:ba:48:63:ac:66:2c:32:e8:6d:1f:c5:cb:
3b:ee:ee:2a:c6:30:9e:5f:f6:eb:af:95:8d:60:a1:85:8b:d8:
18:e6:d0:8f:2c:38:70:45:6e:0d:26:2e:78:49:a6:3f:b8:0e:
5e:4e:0e:61:9f:87:b9:90:40:ca:46:14:f7:1f:28:46:29:e2:
53:e4:bb:e1:bb:ca:33:c4:f2:61:1b:ee:8b:68:98:02:29:a8:
29:b0:82:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 13:18:04 2023 by rpki-client on console-fra.rpki-client.org