Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/750D20320E5111EDA9BC66A9F1222468.roa
File: 750D20320E5111EDA9BC66A9F1222468.roa (raw, json)
Hash identifier: yNv4Fjso4cU+0HL96wIFbFrKvXemTBQW+HDxfCQ23Fo=
Subject key identifier: F4:7F:44:45:3C:CF:7B:4C:48:A9:09:C8:C1:FC:97:E8:DC:B0:F9:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 17BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/750D20320E5111EDA9BC66A9F1222468.roa
Signing time: Thu 28 Jul 2022 08:44:14 +0000
ROA not before: Thu 28 Jul 2022 08:44:10 +0000
ROA not after: Mon 15 May 2023 08:44:10 +0000
asID: 397630
IP address blocks: 154.201.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6078 (0x17be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 28 08:44:10 2022 GMT
Not After : May 15 08:44:10 2023 GMT
Subject: CN=62e24c5e-d377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f1:57:48:b2:71:ec:c7:a5:0b:b2:75:72:8a:
cf:8a:90:13:5c:73:05:5a:50:ae:80:62:c2:03:97:
56:3b:31:83:12:81:87:61:22:b6:4d:8d:0c:80:17:
b7:06:44:25:b5:6c:3a:f0:f7:f6:48:46:7f:45:bc:
c7:1b:2d:19:96:82:2f:62:f3:34:b4:94:77:de:0c:
7b:d5:fe:31:2f:58:9b:6c:76:65:58:41:ce:0d:e2:
43:b6:76:f4:66:5a:b3:ca:7e:72:36:4f:7d:f0:e4:
54:ae:aa:c2:33:0c:24:45:5c:be:93:51:a5:d9:42:
2a:75:08:02:83:58:8e:22:f5:0e:3c:d2:d9:91:70:
7a:af:55:cc:d6:f3:c0:6b:ce:fe:05:66:6d:5c:0b:
dc:15:68:de:68:1e:17:3e:c4:44:19:3f:d3:30:f1:
81:a6:9d:40:96:05:63:68:f1:6e:8a:8b:43:d5:aa:
df:3e:6d:6e:a8:0a:2b:8d:cb:86:c1:fe:66:2c:c7:
b3:f4:c7:7b:a0:d6:14:c9:c5:f2:ac:85:04:3b:6b:
8f:82:19:c0:ef:5e:ca:f7:f7:94:9c:02:70:ea:67:
9c:e5:ea:f5:c5:83:b6:c9:cb:72:43:32:73:88:a1:
1c:c0:8f:b4:58:89:58:de:14:7d:78:2b:eb:a8:7a:
23:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7F:44:45:3C:CF:7B:4C:48:A9:09:C8:C1:FC:97:E8:DC:B0:F9:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/750D20320E5111EDA9BC66A9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.59.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:26:0a:97:99:ae:57:a8:ca:a4:84:28:05:7f:24:02:e0:b3:
ae:c1:26:13:16:a6:1f:af:89:24:bf:ac:db:df:61:83:cb:dd:
a1:8d:50:ee:db:90:8f:5e:03:c7:1d:26:1a:48:19:90:ab:34:
3d:75:a8:0c:d3:f0:95:c7:7d:a7:fb:f2:81:88:82:cd:f6:94:
5c:39:8c:8b:c4:f9:ee:14:de:16:75:c3:8d:c3:c0:66:a2:36:
e5:e9:e3:5e:6d:66:3d:dd:56:cd:35:7f:c2:b4:7d:a7:78:3e:
98:bc:8a:14:bd:e1:fd:50:e7:47:22:54:5f:56:4e:1f:bc:c8:
b5:e0:26:6f:d5:a2:53:0a:69:5d:98:3d:3c:70:7b:c4:0d:f1:
1b:55:1f:37:47:ad:2a:d3:0c:7b:c7:fa:d7:7d:44:29:79:46:
8f:8f:8c:1f:2b:af:e6:9a:18:8c:03:e0:7a:11:54:2e:e6:3f:
4f:11:35:b9:96:ec:c2:66:7e:b5:ed:59:72:bd:e6:82:42:91:
15:c4:ed:d7:6c:79:7b:38:c9:d0:c5:01:11:ad:d2:54:2b:48:
30:ea:80:70:54:22:d5:fb:a6:2c:00:8f:16:61:79:82:46:2c:
2e:53:75:d8:bf:b8:75:ad:0f:27:72:66:53:4b:70:b6:3c:51:
33:50:ef:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-fra.rpki-client.org