Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/839BD3C8E7D711ECBD912DE6F1222468.roa
File: 839BD3C8E7D711ECBD912DE6F1222468.roa (raw, json)
Hash identifier: MpcqJKCHharRtcXbRhZxFsVwFtvSrc8xjBUNdck/L1M=
Subject key identifier: 69:7E:D9:76:52:40:0A:CF:06:7F:60:7F:7F:E0:B9:AF:0C:3D:DA:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 16D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/839BD3C8E7D711ECBD912DE6F1222468.roa
Signing time: Thu 09 Jun 2022 09:35:35 +0000
ROA not before: Thu 09 Jun 2022 09:35:32 +0000
ROA not after: Wed 30 Aug 2023 09:35:32 +0000
asID: 133199
IP address blocks: 154.204.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5846 (0x16d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 9 09:35:32 2022 GMT
Not After : Aug 30 09:35:32 2023 GMT
Subject: CN=62a1bee7-e19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:4c:5b:55:8e:ce:5a:d6:2e:ab:43:39:23:
00:31:00:18:8d:e9:59:95:92:2e:28:96:19:a6:1a:
00:2e:a2:ff:cf:9b:2b:e1:87:30:9c:8d:7e:75:89:
6e:82:cd:1d:2c:d3:c4:40:06:b8:10:11:2f:41:47:
88:95:7a:de:72:c9:96:ae:55:24:bf:f6:71:92:2f:
1c:44:14:b1:af:24:15:b9:5d:1f:ee:ca:95:70:3f:
28:bf:8a:0e:b3:3f:7e:63:b0:d9:33:e9:09:44:1d:
f0:49:f3:54:43:5c:93:1d:9b:0f:5e:96:8f:1b:4d:
bc:f3:0b:2e:b3:6e:d8:24:9b:bb:4d:ca:8d:15:b1:
b4:bd:ea:79:61:15:32:08:e1:2b:d8:a7:94:1a:c5:
97:7c:b2:8d:86:44:21:4e:27:2e:1f:fa:a4:ee:a1:
3d:df:17:d5:22:7d:e0:cd:74:4b:ec:bb:69:b6:f1:
bf:1b:7a:a0:e0:bd:a1:9a:c3:a4:b7:5f:05:4b:05:
da:ea:92:00:74:5c:f2:e7:31:c4:81:35:48:da:be:
d2:7d:28:37:77:a5:68:3f:b1:b7:13:23:aa:db:6e:
e9:90:ad:6e:c9:bd:e3:85:b6:b0:9d:72:6f:83:a0:
4c:70:59:0d:b7:80:7b:a6:35:a1:6d:ca:0a:65:07:
eb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7E:D9:76:52:40:0A:CF:06:7F:60:7F:7F:E0:B9:AF:0C:3D:DA:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/839BD3C8E7D711ECBD912DE6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.63.0/24
Signature Algorithm: sha256WithRSAEncryption
61:df:19:ab:f2:fc:16:78:c0:10:b6:95:d4:09:6b:8f:57:33:
e0:a4:de:3f:d3:0e:86:39:01:de:e8:75:03:9a:09:22:da:09:
6a:13:6a:d3:18:a9:a0:e4:f4:00:2a:a2:36:b8:1f:f9:21:33:
29:7b:a2:52:d7:5d:23:c7:72:ff:16:5d:0c:ff:51:e5:6e:a6:
0e:97:70:ee:4d:7f:c8:ea:96:04:5a:27:04:ce:71:7b:da:39:
45:c6:aa:99:0d:59:8c:a6:02:2f:63:97:17:27:84:22:40:65:
0f:dd:c9:1a:ec:bd:f4:2b:9f:98:9e:0f:52:93:90:a8:27:d9:
23:99:ea:54:54:67:23:96:42:0b:7f:21:5c:35:a6:76:b3:66:
73:41:06:63:e9:52:62:68:d9:8d:6a:c6:5a:6d:8c:f5:8d:0b:
94:51:85:9b:91:59:26:13:20:96:b1:53:c4:3c:da:d8:49:c1:
eb:0d:55:6b:b3:a8:df:1c:8e:45:21:34:1d:ef:8e:89:0b:87:
52:65:56:20:25:79:b6:68:f7:f1:e2:ed:06:61:4d:4e:92:18:
50:66:9e:ca:3f:ba:9b:27:2b:92:11:4d:9e:36:1b:bc:5e:b8:
a0:74:45:a8:7d:4b:1a:91:91:4f:c8:85:51:5a:89:4b:d3:b3:
6d:4d:47:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 13:21:34 2023 by rpki-client on console-ams.rpki-client.org