Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D5DF5EAE56B11EB8E4AFD11F8AEA228.roa
File: 8D5DF5EAE56B11EB8E4AFD11F8AEA228.roa (raw, json)
Hash identifier: oTfdO2oQuZIhKJmbLXHqoTDNLRbagJdtyXJDkZtbO2o=
Subject key identifier: 08:C2:76:CA:76:EE:B7:FF:BD:FA:1B:DB:5A:D0:80:95:8A:C6:14:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 079A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D5DF5EAE56B11EB8E4AFD11F8AEA228.roa
Signing time: Thu 15 Jul 2021 12:52:46 +0000
ROA not before: Thu 15 Jul 2021 12:52:41 +0000
ROA not after: Fri 15 Jul 2022 12:52:41 +0000
asID: 397630
IP address blocks: 154.201.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946 (0x79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 12:52:41 2021 GMT
Not After : Jul 15 12:52:41 2022 GMT
Subject: CN=60f02f9e-2cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:af:a2:ef:8e:19:bf:67:e9:95:33:f1:66:b9:
6b:28:05:7f:95:63:fc:73:22:53:c6:ea:97:1a:eb:
b6:1f:15:49:bd:b7:41:f2:8b:7c:e9:71:78:8d:9e:
23:fb:7f:32:ee:29:4e:44:f8:22:d6:d4:e8:6e:14:
9d:58:c5:5d:57:12:9b:10:6a:36:10:fe:7c:d5:c0:
ce:ed:77:e0:52:0f:2a:9e:74:00:bf:81:aa:03:0b:
24:f8:22:51:f9:c5:dc:f0:5d:16:7f:54:dc:99:fe:
9b:a4:c5:6a:82:06:63:d6:3f:25:48:f8:6e:f6:80:
6d:d3:4e:19:98:ba:ba:9a:ad:c6:24:6b:0c:fe:1d:
72:0d:a7:1c:fd:91:4a:b2:f7:75:06:a5:8e:1f:97:
70:7d:1b:b5:14:d3:be:14:81:d1:e4:14:df:b9:62:
b0:7b:7e:a3:ff:25:59:99:37:26:2e:b7:2b:18:60:
65:a6:a0:47:f8:14:3c:f7:6e:e2:81:a3:68:1b:b5:
eb:fb:c2:7a:a9:85:81:13:8d:5c:bb:21:bf:d2:29:
f7:17:70:89:59:c4:a8:cb:23:9b:e0:81:13:84:db:
ef:f3:0b:1d:60:aa:e0:c4:bc:85:6d:ec:ee:3d:cf:
2c:e4:95:2f:2d:ff:35:33:43:56:bc:08:59:ca:70:
4e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C2:76:CA:76:EE:B7:FF:BD:FA:1B:DB:5A:D0:80:95:8A:C6:14:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D5DF5EAE56B11EB8E4AFD11F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.33.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:eb:a5:db:50:bc:e8:f1:b6:a5:dd:6f:91:9c:2c:91:3a:a1:
81:60:34:ee:4a:a3:92:36:b7:3b:7d:ed:2e:1e:9c:8c:43:55:
6c:a0:c5:ad:05:33:90:c6:f2:46:6f:0d:43:15:dc:c6:f7:b4:
af:d9:db:56:bb:df:3f:d8:75:9d:a6:7b:ea:70:ce:73:22:60:
29:27:6c:99:9a:e0:eb:38:b7:8e:58:fd:01:e5:37:71:8c:e9:
f4:5b:48:5a:18:f2:58:26:ff:89:10:ee:50:02:26:aa:93:60:
4e:5f:0c:87:15:e4:80:ca:88:39:c0:c4:d9:f6:0f:7a:61:8b:
0f:17:72:ae:0a:49:83:fd:46:d2:f7:a7:53:fd:c0:34:3d:51:
ba:69:a3:14:d7:81:e3:e2:7c:fe:27:45:e5:2f:e6:75:4a:ae:
ed:44:5e:ef:69:07:2c:7c:7c:d4:a6:d7:fa:21:4b:e3:8a:4a:
27:06:75:db:77:4b:79:c1:e6:15:e3:2f:8d:d1:f6:36:c5:fa:
ce:ea:63:88:06:46:91:9a:55:f1:28:76:12:5c:ec:56:4a:08:
b9:ec:06:5c:8f:24:1b:63:de:f4:5a:67:98:94:87:d0:2d:1a:
07:ab:33:7c:3c:ef:64:40:28:f2:0d:4b:c5:62:f4:4a:6a:7b:
9a:26:34:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-ams.rpki-client.org