Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BFAF1D2E7D711EC934BB8E5F1222468.roa
File: 5BFAF1D2E7D711EC934BB8E5F1222468.roa (raw, json)
Hash identifier: C8a8PLfXsXsAJX5nWI2nnvISRbTmJax0HO+pZ96Ces8=
Subject key identifier: E7:12:BD:2E:2A:EC:87:FD:A1:C8:19:41:3A:0A:13:44:5A:53:0D:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 16D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BFAF1D2E7D711EC934BB8E5F1222468.roa
Signing time: Thu 09 Jun 2022 09:34:29 +0000
ROA not before: Thu 09 Jun 2022 09:34:25 +0000
ROA not after: Wed 30 Aug 2023 09:34:25 +0000
asID: 133199
IP address blocks: 154.204.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5840 (0x16d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 9 09:34:25 2022 GMT
Not After : Aug 30 09:34:25 2023 GMT
Subject: CN=62a1bea5-0ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:09:3c:5d:3c:80:a8:7d:98:0c:a5:42:0e:6a:
b3:d0:31:ef:93:87:26:59:f5:72:c7:bb:68:ce:2b:
f1:3d:2d:01:2b:f1:93:bc:8d:3f:e2:9f:3a:a8:a9:
ee:94:53:8d:61:e2:44:12:8b:ac:28:be:e0:61:e0:
0b:85:02:63:3a:1e:44:33:18:bc:72:24:ab:9f:f6:
a2:b7:a6:18:c0:8c:40:ed:a7:67:66:2a:1d:d4:82:
88:46:d1:ac:9e:be:dd:e2:5c:24:b3:49:16:74:9c:
68:6a:d8:dd:90:e4:0a:65:14:28:a3:d5:8a:61:bd:
9c:2b:32:c3:ae:c1:5c:8c:58:32:a4:a6:19:b5:60:
2e:a2:89:53:b0:2c:3c:4e:63:83:0e:f2:e2:19:0f:
58:af:d8:09:24:fd:40:bc:8f:1a:85:bd:8c:ea:be:
8c:d7:fb:b6:65:be:dc:56:d1:d1:e5:82:37:ec:87:
96:34:80:b1:26:ad:b5:f5:76:05:cc:19:c9:8c:6e:
ff:63:96:91:23:41:de:2f:9e:61:8f:45:ef:ba:cc:
20:d4:dd:df:d9:8c:be:f0:f1:8c:87:87:2b:8d:5e:
8f:c0:93:64:07:79:b3:37:87:5e:db:86:01:64:61:
fc:aa:9e:6a:b4:cd:fb:0a:ed:39:9c:5f:79:b3:fe:
f1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:12:BD:2E:2A:EC:87:FD:A1:C8:19:41:3A:0A:13:44:5A:53:0D:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BFAF1D2E7D711EC934BB8E5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.59.0/24
Signature Algorithm: sha256WithRSAEncryption
09:0f:b0:e0:b5:44:d1:bd:cb:17:55:4a:da:5d:62:3e:b8:ff:
d8:b8:dd:92:b3:fa:4a:e2:d8:65:e2:3e:b2:a9:d2:b5:a7:31:
df:f0:4f:8f:b0:a3:83:16:fa:ef:70:dc:a6:d9:1c:c9:60:8d:
c3:a1:dc:67:95:8e:fd:55:b3:5c:ea:bf:bc:8d:59:a9:9e:b7:
fb:93:60:2e:95:54:0a:d1:51:19:a8:5b:5a:96:84:02:0b:5e:
bd:7f:1f:25:e6:d0:8c:bf:1c:87:60:45:e2:21:5a:2b:25:c3:
ad:2b:05:05:ef:f3:18:e1:9a:58:2d:f9:7a:c8:d9:86:1d:d9:
db:5b:89:fd:fa:ca:1c:4a:1b:5e:d4:a1:6b:c8:5a:48:f9:70:
e0:c0:52:aa:c5:bc:25:73:28:b6:70:02:cf:70:09:a2:ea:1d:
70:22:fe:23:90:90:c1:ff:81:e6:03:2e:81:c2:34:9b:ec:b0:
a1:b2:d0:cf:7d:8a:04:c0:a1:4a:55:fe:c7:a8:80:10:70:db:
fb:a9:56:ae:17:09:80:50:f4:28:a3:74:51:ff:81:4e:94:de:
99:f8:1f:69:c9:b3:d1:1e:df:35:60:bb:91:64:32:81:2e:de:
a9:32:5f:25:a4:a3:d3:ac:17:fe:21:1d:bc:a0:61:e5:67:5a:
52:68:ff:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 13:21:34 2023 by rpki-client on console-ams.rpki-client.org