Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FE3580001BF11EDAFFA4DB4F1222468.roa
File: 5FE3580001BF11EDAFFA4DB4F1222468.roa (raw, json)
Hash identifier: RgiIFRMK54YiiPvN2HLMQA1BTrwlSDm4vy9bvXqVJV4=
Subject key identifier: 30:95:F8:8C:FD:44:56:11:9E:74:CC:30:75:D1:5D:0D:2E:58:6D:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1764
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FE3580001BF11EDAFFA4DB4F1222468.roa
Signing time: Tue 12 Jul 2022 08:48:18 +0000
ROA not before: Tue 12 Jul 2022 08:48:14 +0000
ROA not after: Fri 30 Dec 2022 08:48:14 +0000
asID: 328608
IP address blocks: 154.91.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5988 (0x1764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 08:48:14 2022 GMT
Not After : Dec 30 08:48:14 2022 GMT
Subject: CN=62cd3552-3bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:9f:a6:cb:b5:c6:21:40:46:d3:f2:59:f8:
30:b1:af:9b:96:43:c3:7f:7d:a5:34:52:12:06:0f:
7e:97:5f:a7:d6:e1:59:8b:0b:65:f2:57:29:94:84:
92:c8:44:62:ed:cc:5d:1b:59:79:a6:7c:5a:85:fa:
32:4b:75:b3:af:dd:81:df:03:24:55:0e:ae:6f:72:
07:19:a4:cb:4a:cc:82:c4:07:38:ea:18:91:78:ad:
5b:45:9a:6e:03:2d:58:d4:93:07:50:81:c6:12:ac:
04:c9:15:53:bc:02:47:f3:40:3e:98:ed:85:5a:f5:
27:13:c2:cd:a4:40:04:3c:f0:73:8c:d7:11:28:ca:
9c:7c:a5:2e:71:35:b9:b1:29:a5:8d:d4:fe:2e:21:
fc:63:09:e7:39:d2:0b:42:61:2d:0b:98:c9:b2:20:
84:b6:fc:06:1c:27:1a:6a:73:a0:50:d9:b3:9c:9b:
f6:1f:dd:65:db:ef:fb:ac:8c:19:e4:68:e0:42:a1:
34:30:7c:13:37:4e:73:27:a4:65:93:8f:4b:dd:36:
3f:9e:8d:8a:f3:94:8f:93:75:af:69:b6:b2:8a:52:
a0:fe:d2:ae:dc:68:c1:1c:b2:26:ba:5c:86:0d:5a:
94:0a:6f:6d:f9:15:a4:ea:66:b4:70:e8:98:03:c8:
63:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:95:F8:8C:FD:44:56:11:9E:74:CC:30:75:D1:5D:0D:2E:58:6D:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FE3580001BF11EDAFFA4DB4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.200.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:da:ff:26:73:84:b8:97:39:16:5f:b6:b4:70:ba:fa:19:ef:
3c:bc:17:77:e6:99:7b:1b:b2:77:b5:dd:3d:e3:75:0b:29:0f:
81:6b:9e:96:e6:28:58:83:76:2a:64:cb:fe:a0:eb:8a:78:6b:
37:92:32:de:e5:d4:7e:29:ca:19:dc:e7:06:ce:47:95:fb:47:
79:78:9f:80:73:73:27:a1:17:50:30:94:67:6b:86:96:d1:bd:
e9:ce:a9:eb:22:ad:f7:e9:9f:9e:88:db:b3:52:b2:64:48:a1:
26:fd:cc:13:35:26:76:4a:a8:28:72:cf:8b:ea:3c:72:13:23:
93:bd:45:e2:ae:ed:64:9c:9f:ca:31:64:b0:b4:93:ff:76:8f:
71:ea:8d:62:14:e7:f2:2c:15:ff:33:36:c6:9e:f2:67:6e:09:
3f:c0:ec:cb:9a:ce:5d:b7:63:29:03:65:3c:bd:7d:ab:24:a0:
d8:39:42:44:2e:79:a2:1b:cc:d0:24:c7:34:36:4d:79:6b:b7:
fa:ee:ce:55:84:7c:78:7e:7d:1e:bf:5b:df:58:1b:e8:28:75:
52:0d:1b:7d:db:99:50:15:4a:90:98:dd:e8:39:de:7f:5c:08:
a9:9d:23:6b:ba:9e:e3:d5:83:27:8c:39:4a:a7:11:69:92:03:
e6:5b:7e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-ams.rpki-client.org