Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7468798C4C3D11ECA431BD1ED8A014CE.roa
File: 7468798C4C3D11ECA431BD1ED8A014CE.roa (raw, json)
Hash identifier: r3XJ9cF3mluMSVk5uEpg749JxLg3iKeOrirduUnEmWw=
Subject key identifier: 8A:39:32:BC:D1:87:4C:3D:44:85:50:A5:18:09:ED:CE:03:DD:36:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 125E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7468798C4C3D11ECA431BD1ED8A014CE.roa
Signing time: Tue 23 Nov 2021 09:12:17 +0000
ROA not before: Tue 23 Nov 2021 09:12:13 +0000
ROA not after: Wed 23 Nov 2022 09:12:13 +0000
asID: 54600
IP address blocks: 154.210.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4702 (0x125e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 09:12:13 2021 GMT
Not After : Nov 23 09:12:13 2022 GMT
Subject: CN=619cb071-93ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:f5:23:7b:a7:c1:61:04:45:91:1e:e4:3f:
c5:8c:8e:6f:a1:78:9f:37:77:bb:fd:7a:93:a6:7d:
1b:5f:a0:d9:21:a1:b5:ac:fc:a1:2c:8c:7a:5b:79:
88:85:cd:96:8f:8f:2a:0c:4e:65:5a:0f:6c:fa:27:
af:43:26:0c:55:a5:fe:98:d4:7b:02:f5:a6:4b:65:
03:c4:b9:51:20:8a:0a:7c:44:04:17:80:3b:b0:4b:
5c:e4:b6:d8:36:3a:e7:1c:1f:6a:b3:4a:f0:9d:75:
4e:1f:20:c5:d2:d1:3f:b9:05:61:8d:b7:3e:e6:6d:
d8:ba:e4:1f:75:b8:22:d5:9c:36:aa:f7:a3:4b:06:
e6:30:8c:e8:5d:16:26:ce:b4:83:95:29:46:0b:32:
03:1b:3d:c9:d3:5e:3b:ce:a9:13:df:1b:9c:94:45:
0b:eb:95:a9:39:ca:a5:49:98:6c:65:e8:2e:4b:fc:
9e:3e:b1:a1:72:30:13:53:17:19:9c:49:80:5a:8f:
0d:7c:93:1a:d6:60:4d:9d:c8:0a:90:90:75:c3:e0:
f9:d8:b2:7e:9c:80:7a:d0:bf:ff:97:8a:69:1f:a5:
51:14:23:5b:9d:d3:2c:83:1c:46:75:84:25:61:bc:
3b:4a:97:7d:31:25:4c:b5:58:4b:cd:0e:cd:e7:d5:
ab:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:39:32:BC:D1:87:4C:3D:44:85:50:A5:18:09:ED:CE:03:DD:36:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7468798C4C3D11ECA431BD1ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.94.0/24
Signature Algorithm: sha256WithRSAEncryption
30:29:76:40:e8:e9:07:8a:14:09:d9:b4:30:ab:f8:31:75:8a:
cf:d5:88:3b:dd:6a:b0:f9:63:8f:f7:54:5e:27:0c:63:82:22:
db:de:df:4d:fb:b7:4b:90:29:ef:a9:0a:ac:dc:77:00:2d:c2:
7d:cd:fa:3d:40:be:4e:2d:eb:f6:b4:42:25:84:ba:b7:26:29:
08:d8:19:ba:a2:ef:ed:67:91:1e:18:6b:11:02:86:e0:aa:e0:
8d:92:a2:73:bb:6f:2d:21:4d:7f:92:ad:f3:22:d5:88:14:88:
e9:8e:d5:22:3b:b8:8f:a5:f5:a5:d0:c5:74:c1:97:3d:1e:d7:
23:fd:87:5d:ff:46:93:68:04:6a:1a:45:b5:54:0a:4d:d1:42:
a5:10:e1:21:a4:92:68:ad:22:07:f4:51:e7:1e:fa:1f:a2:d7:
e2:5c:11:3b:b1:cb:68:6c:47:e6:30:ed:5b:b6:f5:d0:90:79:
0b:b6:7d:df:bc:05:f7:a9:ff:58:17:bb:0b:a9:ed:d0:8f:71:
61:61:ac:f1:3c:d6:01:98:bb:bb:ab:e2:e2:3a:51:69:75:7c:
44:7a:8e:e5:07:e9:8c:07:4c:44:47:04:c3:35:3d:75:c6:a3:
2c:13:51:b6:3a:1b:27:4a:1b:7c:47:8e:ed:72:0c:83:33:7d:
e4:26:cd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-fra.rpki-client.org