Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68499C522DB111ED9751459FF1222468.roa
File: 68499C522DB111ED9751459FF1222468.roa (raw, json)
Hash identifier: YmRWdTEQDpYjHC7tZG8LLD47bJOHrso+MfUhLyCTdWQ=
Subject key identifier: 6C:96:D6:D8:A2:A6:4B:A2:09:52:99:76:4F:35:76:F9:2D:80:7D:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1898
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68499C522DB111ED9751459FF1222468.roa
Signing time: Tue 06 Sep 2022 06:59:10 +0000
ROA not before: Tue 06 Sep 2022 06:59:07 +0000
ROA not after: Thu 31 Aug 2023 06:59:07 +0000
asID: 400618
IP address blocks: 154.197.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6296 (0x1898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 6 06:59:07 2022 GMT
Not After : Aug 31 06:59:07 2023 GMT
Subject: CN=6316efbe-1216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:c4:be:23:4c:b2:73:22:2f:56:c3:e5:47:
5c:b9:d3:19:02:d8:32:91:f0:ee:21:a1:9a:1b:e8:
22:27:84:bb:e9:46:c4:a8:e9:f3:86:23:5f:64:e7:
d1:65:72:8d:6e:e7:be:86:e4:1d:bc:d1:87:59:02:
b4:2f:56:9c:17:cf:a4:60:48:11:9d:ba:52:81:91:
18:aa:23:f8:ed:03:3f:6e:10:91:1e:b8:97:79:d0:
7a:a0:aa:3d:dd:fc:31:96:6c:5e:92:9e:0c:a1:f1:
70:ec:d9:cf:6c:d3:ff:0b:eb:d7:fe:29:f4:cb:d1:
05:2b:5b:ca:19:a5:37:99:ac:20:45:6a:bd:a0:c7:
49:14:17:14:56:20:4d:14:c7:41:d0:7c:38:6e:f5:
96:03:95:af:05:1b:56:7d:04:d3:04:9c:53:2a:dc:
ef:5a:a3:b5:f2:57:47:21:c6:73:e7:bb:aa:83:22:
e3:13:c0:1a:c4:98:5f:f4:f3:d4:3c:74:46:d8:85:
1d:ee:79:1a:f0:4e:68:ee:99:7f:92:c2:3c:84:86:
af:48:48:6b:42:59:7a:49:9a:65:66:86:90:a8:01:
70:1f:3f:3b:af:9e:af:2a:1c:1b:7b:fa:bc:ad:b0:
9b:92:9d:e4:f3:f0:68:7d:78:92:00:2c:6c:7b:4c:
2c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:96:D6:D8:A2:A6:4B:A2:09:52:99:76:4F:35:76:F9:2D:80:7D:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68499C522DB111ED9751459FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.12.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:b1:1f:47:8c:0e:2d:34:43:9b:d3:33:bc:67:e0:27:cc:d1:
c2:ac:04:30:7a:87:f2:db:1c:88:b6:b1:57:60:71:f5:68:6a:
d2:66:7c:62:a7:26:75:59:de:49:92:52:3e:c1:12:69:75:0a:
61:7b:10:6a:92:f0:98:8f:f6:f6:14:45:ba:a8:37:ce:71:e3:
1c:3d:f4:f1:d0:05:7d:5b:33:b8:14:16:74:66:6c:d3:43:24:
ac:c7:9a:55:38:fe:1c:d5:02:55:d0:32:1b:82:23:ec:c6:6d:
e3:56:6c:fe:33:63:92:65:eb:dc:db:21:e2:89:5b:7b:3b:43:
64:18:94:2e:9b:b1:cf:45:71:e3:9b:3d:ac:e8:4a:18:c9:c9:
ec:ca:a1:07:8f:a6:c3:31:d8:08:6b:5d:7d:56:6b:9a:cd:a5:
24:a8:b8:d9:70:b1:2b:36:ed:56:ef:a9:c5:43:b3:fe:6f:78:
61:d5:33:61:e8:49:eb:de:be:94:f1:a4:c3:34:ba:87:98:0f:
62:3f:aa:32:d5:13:84:ac:02:ab:6a:a7:2d:5d:2d:43:b7:d4:
37:55:13:f7:41:be:a3:c4:b4:9d:bd:e3:3c:82:2b:ff:58:35:
49:6a:1e:c3:6d:21:ed:28:07:7e:e5:48:62:47:73:d3:be:0a:
9b:e4:2e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 01:18:05 2023 by rpki-client on console-ams.rpki-client.org