Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D5E02C0E7D611EC8D72BCE2F1222468.roa
File: 7D5E02C0E7D611EC8D72BCE2F1222468.roa (raw, json)
Hash identifier: wNvWL0plMtEFQG5tI92u6a1V+OBuTNM0DDhyjQKEKA0=
Subject key identifier: 25:4D:71:51:D6:A0:28:C7:7D:58:72:23:5E:D4:7C:4D:CB:CF:C1:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 16B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D5E02C0E7D611EC8D72BCE2F1222468.roa
Signing time: Thu 09 Jun 2022 09:28:15 +0000
ROA not before: Thu 09 Jun 2022 09:28:12 +0000
ROA not after: Wed 30 Aug 2023 09:28:12 +0000
asID: 133199
IP address blocks: 154.204.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5808 (0x16b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 9 09:28:12 2022 GMT
Not After : Aug 30 09:28:12 2023 GMT
Subject: CN=62a1bd2f-0842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:c9:6b:f7:c4:be:27:4e:44:97:09:46:72:
38:bc:54:43:8a:a2:fc:7e:dc:35:db:ad:e4:ce:02:
a7:06:b8:fa:0c:04:a0:89:e3:29:5f:5b:a8:a3:e9:
df:7e:84:e1:2e:ca:6a:dd:9d:09:bd:c9:b8:45:b9:
dc:42:8c:0c:61:66:4b:52:a6:65:23:12:86:d0:9a:
b4:e0:a2:de:62:f3:3e:7f:af:21:b8:bd:53:1f:1d:
0c:d0:75:bc:6f:71:51:08:82:9d:b5:53:6f:93:19:
5a:4c:7e:ec:19:0d:77:46:0d:d6:d7:f9:3c:55:a1:
ad:8b:96:e5:57:84:96:db:5b:20:63:4e:52:81:a9:
79:d7:ee:c2:7a:76:09:d0:f6:b3:7c:b0:3c:f0:c4:
23:24:df:2e:c6:27:eb:3c:fb:88:8b:3b:f0:02:89:
ab:3c:64:a6:aa:1a:26:9c:f8:76:cd:5a:f5:02:d3:
17:02:f6:f2:b8:80:28:1e:20:43:39:58:b2:fd:7b:
43:0b:8b:c9:bb:dd:71:da:a3:87:fd:57:c1:62:ca:
54:89:70:b6:3e:07:3c:34:e0:38:b3:00:15:e1:cf:
3a:32:eb:f9:a5:86:e9:f1:6b:11:54:77:5c:1e:12:
7e:f6:1b:00:04:be:46:3a:32:17:cd:4e:e5:93:2b:
14:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4D:71:51:D6:A0:28:C7:7D:58:72:23:5E:D4:7C:4D:CB:CF:C1:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D5E02C0E7D611EC8D72BCE2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.33.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c8:e8:fe:f4:c4:b1:8c:85:f1:12:52:6e:be:df:b1:03:04:
7a:7d:77:c7:c4:e7:43:89:30:70:ec:65:be:53:25:fb:47:8e:
35:79:32:de:2b:5c:16:41:e9:1a:23:b9:ad:54:d7:7c:dc:be:
53:78:6d:43:02:59:a0:64:20:ac:e7:1f:90:35:0f:0c:3e:11:
f0:d5:67:17:ba:1d:05:5f:e6:c2:6a:93:3f:d2:f4:19:2a:e8:
65:83:6a:af:a2:35:ea:7f:2a:e7:46:e7:15:a7:75:39:c5:91:
c5:e1:b8:68:77:0e:27:44:4a:d9:9d:7e:cf:b0:27:f7:ec:d8:
2c:5f:99:14:ee:0f:96:21:6e:16:d8:2e:4d:1f:75:fb:8c:ef:
76:cd:25:cc:e3:4b:4a:4f:57:ac:22:8f:29:9b:4b:60:99:5a:
c1:7d:e3:54:af:a3:0a:8e:6a:83:19:d0:92:a6:cc:11:73:3b:
39:f6:dd:16:af:66:c7:e9:7c:6d:83:95:1d:bc:6f:39:0c:ee:
eb:0c:8c:cf:4b:26:4f:00:a4:1d:fa:6c:91:54:ee:45:02:0f:
d6:97:78:69:37:58:06:dd:b6:dd:b8:94:34:b0:65:4e:73:2c:
17:27:ae:8d:33:0a:7f:16:bf:29:bf:85:db:26:ac:b9:b7:29:
68:07:38:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 13:18:04 2023 by rpki-client on console-fra.rpki-client.org