Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CE70B8417C711EDB468D6BCF1222468.roa
File: 4CE70B8417C711EDB468D6BCF1222468.roa (raw, json)
Hash identifier: ky2YpW4m/wFwaxeOc7bY4gd1XMTL0yTUZDARfH1mw0w=
Subject key identifier: 08:E1:A3:B4:D7:24:63:EB:0E:89:E9:1D:32:1B:C7:09:99:55:A7:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1836
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CE70B8417C711EDB468D6BCF1222468.roa
Signing time: Tue 09 Aug 2022 09:40:27 +0000
ROA not before: Sat 13 Aug 2022 09:40:24 +0000
ROA not after: Sat 20 May 2023 09:40:24 +0000
asID: 7018
IP address blocks: 154.201.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6198 (0x1836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 13 09:40:24 2022 GMT
Not After : May 20 09:40:24 2023 GMT
Subject: CN=62f22b8b-bc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1b:81:53:35:60:f9:66:4c:c9:02:f3:c9:c4:
55:5a:0d:27:1f:d3:a4:19:24:a1:d2:4c:9f:37:1e:
58:3b:52:5b:30:83:f6:59:d9:cb:ac:5b:7a:01:61:
3d:f0:c6:83:31:8c:ce:f5:1b:04:30:ec:d5:32:95:
75:da:e9:38:9b:4e:72:da:26:00:c8:fd:f8:8e:58:
f1:03:1a:40:36:ec:f7:53:90:19:2a:4e:ae:9e:ec:
12:fa:a1:af:37:db:91:2c:9e:2b:ac:d3:0d:e4:64:
73:c4:06:84:54:25:fd:2e:7c:4c:7b:06:ab:c7:07:
e3:17:07:a4:20:92:74:01:da:d3:86:a6:64:b6:4d:
fd:e4:2c:9a:7c:8a:59:dc:70:88:d7:55:03:a2:37:
cd:e8:be:9a:79:07:90:0f:84:45:71:b5:c7:8f:31:
40:8d:e3:33:ca:d3:6b:8a:7e:49:32:b7:1f:c0:f2:
da:64:5a:1f:64:0f:f7:2f:d6:49:00:9b:3c:c2:da:
f6:08:1b:d1:1b:67:32:32:7e:56:7f:02:10:94:c9:
4d:82:84:de:b3:5a:07:83:8e:a2:8c:c7:9b:0e:b1:
23:ff:94:ef:a3:f2:6b:48:db:82:44:4d:45:1c:8a:
97:21:f1:01:15:ba:01:86:96:ec:f4:5c:18:ce:ff:
cc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E1:A3:B4:D7:24:63:EB:0E:89:E9:1D:32:1B:C7:09:99:55:A7:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CE70B8417C711EDB468D6BCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.0.0/24
Signature Algorithm: sha256WithRSAEncryption
73:b9:60:6b:9d:62:89:5a:47:8a:96:00:94:a7:8b:c5:46:e6:
58:d5:87:c1:ef:91:86:08:3b:58:79:c8:21:44:ab:cd:63:dd:
b2:d5:ca:de:29:c6:dd:43:6f:50:f1:4b:ad:f9:ae:c2:b3:86:
2d:b7:5b:70:94:f0:27:a8:ea:b2:f3:a4:e0:03:a0:1e:1c:20:
88:af:c1:dd:da:a8:8c:dc:bf:0e:fe:4c:8b:42:50:f4:16:c3:
8e:ae:62:95:8b:e3:79:38:9e:2e:0d:d1:b1:30:47:99:39:0e:
bd:f3:b5:10:2e:38:88:e0:93:d1:0e:1c:0a:dd:9d:d0:dc:dc:
42:ad:88:74:29:88:77:be:f5:d0:02:37:af:84:04:9d:86:36:
2c:13:03:04:70:1f:42:de:64:fc:dc:5a:86:80:f0:cd:e0:d6:
23:41:ef:9a:1b:32:6f:9d:49:3e:1a:80:d0:e4:76:d7:fb:0e:
1d:64:c5:de:20:56:45:c4:44:3d:2b:f5:ac:40:f8:b1:5a:a6:
45:04:81:45:0f:4e:9d:a0:01:cf:73:d3:72:95:68:40:99:97:
0d:6e:16:a3:31:ba:46:bc:b5:ea:11:f1:fa:2b:ef:12:63:80:
93:44:08:7e:ef:09:14:f7:99:03:9b:cd:f9:87:68:45:31:71:
3b:73:21:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:06 2023 by rpki-client on console-ams.rpki-client.org