Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6865F202E57E11EBB2BF5B2BF8AEA228.roa
File: 6865F202E57E11EBB2BF5B2BF8AEA228.roa (raw, json)
Hash identifier: DltZNQhfPdDMVVWOt8unXbpi/FxCUOc5sG9OwU3jcJU=
Subject key identifier: 70:BC:69:34:C0:C7:9D:DE:A2:DB:3F:49:3C:CE:DA:3F:63:32:4C:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 07C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6865F202E57E11EBB2BF5B2BF8AEA228.roa
Signing time: Thu 15 Jul 2021 15:07:44 +0000
ROA not before: Thu 15 Jul 2021 15:07:40 +0000
ROA not after: Sat 09 Jul 2022 15:07:40 +0000
asID: 397630
IP address blocks: 154.201.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1986 (0x7c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 15:07:40 2021 GMT
Not After : Jul 9 15:07:40 2022 GMT
Subject: CN=60f04f40-0558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e3:4c:8d:ee:cc:b1:1a:29:44:54:15:08:87:
cb:bb:40:36:ba:21:6a:e7:80:10:80:86:50:5d:89:
fc:0f:b4:fa:f0:22:7a:49:5e:e6:3f:5d:63:34:8a:
65:41:6c:45:8c:28:25:cc:a0:a6:33:73:fb:0e:05:
b8:a7:e2:cc:ae:8a:7d:4a:72:3d:2d:af:68:49:e4:
8b:8e:da:d9:ee:83:ec:f7:81:28:d9:21:83:4e:5a:
64:52:e8:c4:3b:e2:57:97:24:29:d2:7e:83:8f:27:
8d:fc:88:da:50:50:7e:ec:9a:c3:fd:25:b8:a9:52:
1e:cc:8a:79:ee:97:37:d1:fc:de:a9:b8:ad:4c:a5:
5a:a4:b7:98:8f:06:c0:1d:b7:80:6d:dc:37:64:8b:
e1:71:c4:7d:13:e8:1e:52:28:b3:2a:08:df:02:c6:
9a:1b:ab:0a:68:b1:72:50:d4:53:1e:ef:08:f6:75:
38:4d:3d:9b:8c:3c:d4:2d:74:35:40:84:e3:5a:e9:
fa:a3:85:20:8e:1a:1e:65:df:d3:c1:2c:38:20:59:
b7:ae:51:e5:20:4b:71:68:d9:d4:bd:16:2f:34:a8:
6c:44:cd:3a:b3:6f:be:50:7f:16:5f:97:33:32:5c:
18:72:85:28:ce:ce:e3:79:88:71:e0:d6:6a:11:eb:
89:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BC:69:34:C0:C7:9D:DE:A2:DB:3F:49:3C:CE:DA:3F:63:32:4C:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6865F202E57E11EBB2BF5B2BF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.61.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f6:7a:b0:89:a1:28:28:54:3d:77:66:11:c8:f6:c1:c3:91:
71:87:dd:15:3e:6b:0d:88:ff:62:43:29:f4:d5:58:8c:f8:32:
e0:22:8f:d1:18:92:14:79:b3:9e:33:0c:06:e9:1a:1b:36:c2:
85:bb:df:9f:5f:bb:61:74:68:b7:21:c5:4a:37:0e:03:77:37:
d5:c7:16:6e:00:42:1d:5b:fa:12:d9:6e:2a:a2:2d:f0:4a:fe:
21:37:7e:1e:a1:e7:c9:17:20:86:55:19:cd:42:34:9e:db:47:
c8:1b:db:da:12:63:b1:bb:89:96:bb:6a:9f:61:ed:0b:bf:04:
ea:52:b6:a0:49:2d:09:9d:0c:64:c6:16:99:b5:ec:03:9e:1f:
9f:90:7d:71:1e:0e:10:77:d2:79:97:5c:cb:cf:5b:6d:43:db:
da:b7:72:00:59:b7:ce:8e:39:a6:9b:4b:55:dd:03:a7:e7:8d:
b7:d7:68:38:92:7c:f9:51:d1:b2:ec:a8:05:67:6a:8d:9a:9f:
a4:7c:e8:d3:3e:53:94:be:1b:48:c7:97:a9:80:29:b8:60:2f:
c2:3c:6d:5a:87:9d:38:57:46:2c:1a:15:31:a9:67:ba:af:35:
31:54:40:75:ff:63:dc:ab:59:72:73:2e:db:0e:a8:3b:98:43:
b3:89:67:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-ams.rpki-client.org