Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5513937A623411ECAA5FBE6B5A40D577.roa
File: 5513937A623411ECAA5FBE6B5A40D577.roa (raw, json)
Hash identifier: yIyBsEnoXEh1/wi8kFW0Y0iMK8a96l0S7nKbjAnedgQ=
Subject key identifier: FE:45:36:4F:50:AB:C8:27:EE:8C:43:19:CE:55:72:DA:70:76:0A:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 140C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5513937A623411ECAA5FBE6B5A40D577.roa
Signing time: Tue 21 Dec 2021 08:02:25 +0000
ROA not before: Tue 21 Dec 2021 08:02:21 +0000
ROA not after: Fri 30 Dec 2022 08:02:21 +0000
asID: 328608
IP address blocks: 154.198.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5132 (0x140c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 21 08:02:21 2021 GMT
Not After : Dec 30 08:02:21 2022 GMT
Subject: CN=61c18a11-a664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1b:2f:05:47:08:be:f1:89:ee:26:9b:d9:f5:
e0:f0:f8:ff:ee:cc:6c:d6:0d:6b:28:9a:56:3e:1e:
37:ba:75:b3:64:5e:9c:36:0c:02:2d:e9:05:c7:cd:
9e:ce:78:27:00:6a:7f:15:23:51:a5:4e:fd:32:bf:
99:90:81:24:dc:33:f1:95:0d:f3:71:0f:04:3c:e3:
f1:ac:ce:18:3b:d1:e1:03:5a:5e:1e:bf:a9:f1:7e:
36:d9:df:74:a2:42:1c:6d:29:28:56:96:59:00:d9:
34:2b:29:1b:c8:cc:84:70:c9:9a:2a:5a:77:23:a7:
bf:81:94:d6:95:21:ae:df:83:65:e7:7b:74:63:28:
c0:ee:f3:5f:d2:4e:72:9f:a6:b0:4e:36:c7:24:da:
74:95:7d:30:3c:ac:79:b3:eb:3e:86:e9:30:6e:05:
ef:84:75:5d:fb:45:4a:46:50:d9:54:87:c8:d0:64:
47:c9:e8:f6:7d:49:e7:f7:3e:1c:b2:78:5b:15:6a:
f7:8a:06:36:eb:4e:04:69:dd:8c:ee:7a:70:8f:19:
85:2a:e7:37:5a:9b:68:c3:cc:ee:48:ae:1d:fa:53:
46:dd:e2:38:1d:22:e7:b9:5d:37:09:3d:4c:af:22:
94:e7:50:93:0a:76:4d:02:1b:64:84:db:68:a6:a3:
ec:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:45:36:4F:50:AB:C8:27:EE:8C:43:19:CE:55:72:DA:70:76:0A:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5513937A623411ECAA5FBE6B5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.12.0/24
Signature Algorithm: sha256WithRSAEncryption
22:31:f3:6e:8d:e9:70:e5:1c:58:14:cb:cb:b9:1e:7f:29:c4:
ed:a9:92:d8:e4:a0:ca:1a:e8:16:66:87:fa:b8:b3:a8:aa:52:
14:8b:3b:fd:6d:bb:42:0c:c2:bd:04:1a:c1:89:4b:92:8b:07:
89:56:48:48:34:5c:ab:65:de:21:15:d5:59:f0:e7:7c:e6:c8:
12:15:bf:50:3f:c9:0f:94:98:10:51:3f:e6:3c:08:1b:57:9c:
0e:80:18:90:3d:71:dc:b8:c4:e6:a3:b9:6a:81:db:4c:f3:bb:
e9:12:88:40:bf:63:d6:19:b4:f5:92:3d:4c:25:14:50:7c:93:
44:27:bc:d6:04:db:47:9b:ee:64:eb:c8:4f:fa:aa:e8:61:ba:
4e:0d:42:ca:0a:df:ba:77:9b:6b:39:5f:06:8c:31:ba:ea:58:
4c:fb:11:76:64:49:d8:03:62:a1:92:a9:f7:05:e4:22:e4:d3:
60:e6:80:85:1c:06:ba:35:a6:46:26:b7:e5:37:a5:cf:6c:75:
ba:ba:ef:ae:0e:33:d1:73:1c:86:34:d5:2b:d1:96:0f:7f:42:
80:6c:5a:68:54:3e:b8:35:3c:98:85:d0:83:97:c8:5d:9d:c5:
ac:cf:1b:94:a9:66:f3:6e:5c:e5:2c:9b:7a:0d:30:33:9f:2b:
e6:97:04:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-ams.rpki-client.org