Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51030B16E7D711EC98C3A4E5F1222468.roa
File: 51030B16E7D711EC98C3A4E5F1222468.roa (raw, json)
Hash identifier: hnVrMwdg+XRYqJJqBXGifcg8iQuV2hbVKiNEEXbaB/4=
Subject key identifier: 10:56:4A:1E:0D:41:DE:1D:4E:C2:28:B9:DB:83:09:02:90:94:3F:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 16CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51030B16E7D711EC98C3A4E5F1222468.roa
Signing time: Thu 09 Jun 2022 09:34:11 +0000
ROA not before: Thu 09 Jun 2022 09:34:07 +0000
ROA not after: Wed 30 Aug 2023 09:34:07 +0000
asID: 133199
IP address blocks: 154.204.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5838 (0x16ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 9 09:34:07 2022 GMT
Not After : Aug 30 09:34:07 2023 GMT
Subject: CN=62a1be92-db6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c0:c7:cd:e1:b0:64:7a:3d:39:91:74:8c:74:
0d:ec:21:0d:67:12:eb:49:2a:ed:75:e5:2c:5e:67:
3b:94:49:e2:44:ca:c5:dd:2b:18:68:2b:0d:46:d4:
8d:c5:62:cf:ee:35:63:2e:a8:90:b6:04:6e:33:9d:
c3:9a:9a:8a:5a:a7:41:ac:17:08:2a:ad:da:4e:4e:
f7:66:10:a4:f8:88:69:76:90:0c:ec:38:9e:28:38:
a2:09:3e:70:aa:fd:e7:8f:b3:ac:a6:b5:e7:3e:eb:
ee:4b:01:e7:e6:eb:41:cc:1c:ac:61:4c:c4:a9:52:
0f:2b:ac:d8:94:87:87:b6:b3:fa:5b:04:18:56:01:
89:e6:f8:db:d3:dd:ee:33:67:c4:1e:5a:29:16:25:
5e:cd:bb:3a:35:3c:1c:a6:e2:dd:e8:15:44:67:40:
48:fe:f2:e2:3e:2e:78:ca:0b:6e:01:cf:b0:9d:5e:
3d:ad:43:46:79:92:14:08:29:3b:cc:90:0a:84:97:
0f:ec:47:0d:6a:28:81:d8:44:a8:05:3f:0d:6f:88:
b1:e6:4f:02:8c:c8:13:3c:48:2e:c1:d9:de:f1:6d:
17:be:63:7a:cf:39:24:0d:cf:a5:e5:79:71:1a:66:
c6:3d:33:7b:e7:47:25:8d:73:27:36:23:60:e2:55:
70:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:56:4A:1E:0D:41:DE:1D:4E:C2:28:B9:DB:83:09:02:90:94:3F:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51030B16E7D711EC98C3A4E5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.58.0/24
Signature Algorithm: sha256WithRSAEncryption
82:89:21:0a:a0:64:b3:3d:fe:cd:6d:22:63:33:8c:80:10:a2:
e2:82:48:4e:bf:eb:94:80:6f:56:d4:81:93:33:c7:ab:be:35:
55:61:a3:9f:26:44:cc:40:84:32:a1:69:57:8e:52:ed:60:83:
e0:86:b2:7a:85:b1:cb:93:8c:3d:24:7e:3b:61:f7:60:88:02:
60:34:67:1f:7b:4c:8e:2f:bf:0a:41:f2:d1:61:5c:a7:2f:71:
b6:98:41:ae:33:e3:0f:82:2f:f2:ff:2a:3d:a0:00:f3:bc:75:
a4:c0:9a:34:86:29:c8:37:f6:2b:c3:3a:32:9b:06:4f:1e:88:
2f:be:d6:6a:13:3b:ec:30:4c:c1:65:93:d1:68:61:79:28:36:
8f:6a:ed:8c:81:1f:b6:a7:96:ff:69:96:96:6d:d7:96:42:2e:
e0:b5:6f:ed:f8:2d:43:1b:2b:6d:44:31:fc:b7:bb:08:8e:7a:
bc:98:79:4e:68:03:dd:7e:6b:36:b4:00:46:08:60:a1:12:58:
0e:97:37:73:6c:2a:3b:98:1f:f7:bb:81:06:56:c5:4f:80:c8:
b3:de:de:5e:0d:53:8c:e6:30:10:a2:04:a7:86:9b:d7:a7:34:
5e:cc:ed:f7:ee:e5:46:fe:4f:04:34:c3:2f:4b:fb:07:2a:31:
9a:64:45:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 13:21:34 2023 by rpki-client on console-ams.rpki-client.org