Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/571B97CACFA411EC8266799FF1222468.roa
File: 571B97CACFA411EC8266799FF1222468.roa (raw, json)
Hash identifier: G/ndWkKa4jE1PHp5+4kDibje7PJB6SXGhNKtxo7Eeeg=
Subject key identifier: FF:F6:62:37:BA:34:4D:65:25:F1:DD:E2:EE:9E:29:C8:29:F9:CB:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1623
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/571B97CACFA411EC8266799FF1222468.roa
Signing time: Mon 09 May 2022 14:28:48 +0000
ROA not before: Mon 09 May 2022 14:28:45 +0000
ROA not after: Wed 31 May 2023 14:28:45 +0000
asID: 136970
IP address blocks: 154.213.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5667 (0x1623)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 14:28:45 2022 GMT
Not After : May 31 14:28:45 2023 GMT
Subject: CN=62792520-c1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:8f:47:24:d3:30:50:ab:cf:bc:95:a4:19:
12:80:98:ad:7b:de:f2:d8:36:14:09:b4:14:61:b7:
5f:cd:c6:7d:57:77:a0:06:81:21:12:b6:6e:c9:c5:
d8:c8:54:b5:f3:7c:c6:33:24:37:53:0a:eb:59:b2:
98:35:8e:6f:03:3c:21:e8:a7:da:09:2e:a7:60:fa:
90:99:cc:5e:46:85:4f:ae:1e:25:f9:db:f1:53:42:
0e:7e:c2:2d:7c:08:8b:37:ce:d6:11:5f:c9:f9:25:
b1:2e:12:64:12:4e:ad:e2:00:26:b3:e1:af:3a:41:
a3:ac:6d:3e:ef:d9:cc:b9:e4:24:b2:bd:9c:79:f0:
85:37:50:c3:c7:bd:65:24:1b:ee:3a:82:4e:cc:98:
b3:7b:fe:a7:dc:b9:0d:46:65:7d:a1:ad:31:8b:ed:
2f:9f:d3:7c:ae:f9:b3:77:d1:aa:c6:db:3a:8b:22:
ed:26:b2:72:ee:6f:5c:b4:74:63:f7:65:95:3a:44:
b0:20:4e:4e:18:42:55:ed:20:bc:ec:4e:c2:bd:b8:
a5:eb:c3:6b:45:b1:41:bc:09:88:73:53:83:63:51:
31:42:95:88:03:88:90:ee:b5:f1:ee:c1:25:58:1e:
a4:da:aa:85:01:02:b1:c7:22:81:bc:63:e1:8a:af:
bd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F6:62:37:BA:34:4D:65:25:F1:DD:E2:EE:9E:29:C8:29:F9:CB:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/571B97CACFA411EC8266799FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.28.0/24
Signature Algorithm: sha256WithRSAEncryption
40:79:68:05:49:29:5c:8d:f8:8f:4c:78:5e:57:28:5d:60:22:
bc:1e:47:1b:29:95:ba:61:ba:b9:a5:e9:b0:f6:02:e7:47:23:
1d:f5:54:75:32:60:c8:46:f9:d7:44:1c:54:51:34:de:b4:8e:
32:71:97:3a:66:6c:91:3a:22:73:ea:d2:e0:9b:2f:ba:f4:69:
5b:54:13:43:cc:d6:5c:9f:99:7a:4c:c7:67:3e:e4:d2:eb:ce:
88:da:d0:f4:89:58:b2:2f:2b:8f:33:57:e5:b6:1d:51:ef:2b:
8a:9a:f6:0f:0a:6e:53:0b:6f:ff:aa:a5:60:60:1d:e0:f8:6b:
6d:b8:ab:76:d6:c1:82:53:fe:0d:b0:98:39:29:e4:ac:af:71:
d5:f2:bd:de:95:5e:d2:84:99:e1:3d:12:c3:88:03:31:27:58:
db:5a:0a:63:fc:0c:36:11:e4:36:89:e5:c2:fc:d8:28:2e:53:
37:8e:db:80:1e:ba:22:ab:c7:51:de:4b:30:8a:48:43:8e:e4:
9d:c7:de:0a:7c:99:cd:eb:3f:88:76:2d:bd:b7:53:aa:19:db:
7d:17:a6:95:3a:5a:40:fe:67:30:03:f5:a2:2c:26:e4:f3:d9:
40:2a:3a:57:c7:44:a6:da:b8:5a:93:59:43:2f:21:e7:3d:28:
ae:9e:6b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-ams.rpki-client.org