Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8152F680125411ED93FC54E6F1222468.roa
File: 8152F680125411ED93FC54E6F1222468.roa (raw, json)
Hash identifier: YHTuillwccaQ0WVG+xVdRILdmLvt6Cs72wiZDqyticw=
Subject key identifier: B8:51:10:B4:DD:02:9B:00:4A:EE:C0:62:E5:83:25:09:87:AD:10:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 17F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8152F680125411ED93FC54E6F1222468.roa
Signing time: Tue 02 Aug 2022 11:16:07 +0000
ROA not before: Tue 02 Aug 2022 11:16:04 +0000
ROA not after: Thu 10 Aug 2023 11:16:04 +0000
asID: 133861
IP address blocks: 154.204.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6134 (0x17f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 11:16:04 2022 GMT
Not After : Aug 10 11:16:04 2023 GMT
Subject: CN=62e90777-3d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:71:87:5a:f1:eb:b9:ba:e5:c1:9b:78:4e:5d:
aa:6d:41:28:a1:1b:52:aa:d0:5c:20:c7:16:cd:08:
70:53:e7:2f:7e:76:fa:d0:fd:b4:ee:b8:dd:2c:8d:
b6:33:64:5b:ad:b5:71:ba:98:e8:5c:1d:0d:38:40:
f2:29:68:a9:cf:02:ee:44:f7:ed:62:84:78:a7:21:
c6:07:dd:d1:e3:63:80:18:77:13:4e:1a:1a:ac:57:
b0:44:a1:0e:dd:79:21:22:a6:40:5f:4a:d1:5b:8c:
63:f0:08:ef:17:ec:51:45:43:6e:d2:05:51:6a:aa:
2a:f3:87:22:95:0d:52:85:5c:67:a0:0e:45:06:f1:
ea:68:a5:b9:57:c5:53:34:97:34:49:f8:cc:20:10:
84:e9:a7:b9:03:0e:60:7a:66:60:c8:3b:d1:36:47:
9e:0b:41:b1:df:3c:b1:a4:c3:7e:00:e6:3d:0c:61:
a9:16:92:9c:d0:94:cf:8d:ad:a2:9c:eb:ec:d5:d3:
63:1b:7a:4b:1c:08:8a:15:36:bc:e3:4f:c3:ec:cc:
e0:66:b7:4e:6a:67:c4:f6:75:4f:5b:58:15:70:0f:
e9:45:85:eb:25:ca:7c:e3:25:52:48:4f:1c:8d:30:
70:c4:a3:79:0c:2e:c5:b6:a7:01:01:9f:ea:1b:76:
13:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:51:10:B4:DD:02:9B:00:4A:EE:C0:62:E5:83:25:09:87:AD:10:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8152F680125411ED93FC54E6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.43.0/24
Signature Algorithm: sha256WithRSAEncryption
55:d4:a6:51:4f:7d:60:f9:b5:25:9e:58:2e:c3:8c:ec:ae:19:
68:be:aa:d2:74:a3:32:e1:28:74:35:82:70:18:6a:99:fb:73:
f4:6a:cb:9a:99:7e:b0:a7:cb:c3:2c:08:c9:6c:00:10:90:b3:
8e:04:0a:cd:c9:b8:21:fa:12:c3:6f:39:f3:aa:38:d5:94:27:
41:a7:d5:4c:92:bf:7f:87:c3:a0:8b:3e:6f:9d:a1:2c:e7:e9:
a2:fa:fa:82:47:05:63:3a:4a:57:5d:0c:ad:ee:ae:bc:50:35:
9e:d2:7f:97:15:70:20:36:7a:26:78:5b:23:bb:26:09:12:34:
b1:89:00:ed:02:1f:9f:c2:fc:e4:c2:e0:47:80:09:e8:48:d0:
9d:8e:43:b7:59:84:73:b9:2e:74:c3:b0:d0:b6:a6:02:38:59:
e3:af:c8:ae:49:dd:f4:96:db:f0:31:d8:ce:ca:e3:a9:65:54:
eb:12:8c:5d:92:77:a5:8d:ca:6b:20:4f:92:61:15:8e:1b:c4:
7e:25:2d:ff:cc:88:5d:1e:7e:d3:a5:84:0c:fc:31:b8:6c:4e:
39:c5:ab:7d:c2:28:bc:f6:91:82:1d:4f:64:e6:89:a9:fb:cd:
e4:5d:16:0b:49:0d:d6:50:e8:f8:50:94:aa:39:46:1a:a9:34:
f9:59:2f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 11 01:11:55 2023 by rpki-client on console-ams.rpki-client.org