Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/914E1844125411ED8CA673E6F1222468.roa
File: 914E1844125411ED8CA673E6F1222468.roa (raw, json)
Hash identifier: HUHD4KeLbpi3gG1Wo5jYkn1tXLJ3Ltk5p1nHuFFSYtI=
Subject key identifier: F6:EC:40:AA:7B:E1:DB:A8:31:9A:D8:AB:F4:C6:8A:0B:C4:B4:E0:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 17F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/914E1844125411ED8CA673E6F1222468.roa
Signing time: Tue 02 Aug 2022 11:16:34 +0000
ROA not before: Tue 02 Aug 2022 11:16:31 +0000
ROA not after: Thu 10 Aug 2023 11:16:31 +0000
asID: 133861
IP address blocks: 154.204.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6136 (0x17f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 11:16:31 2022 GMT
Not After : Aug 10 11:16:31 2023 GMT
Subject: CN=62e90792-04dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:f9:2a:cd:4a:b7:48:69:4a:92:44:54:28:
a0:64:d8:22:33:f5:ef:31:a5:ff:b2:6c:88:cb:c5:
84:9c:b8:29:07:9c:a0:dc:cf:3d:00:db:53:7e:d6:
d6:2b:1a:46:3b:d4:19:b8:75:d1:a2:93:f0:fb:27:
cc:46:09:4d:c1:f3:84:ba:de:ec:e3:0d:08:8b:d4:
50:70:dc:a2:8e:de:7f:26:22:a4:f8:fd:a9:54:0e:
03:57:0c:b1:c8:e4:d1:d8:ca:0f:a6:03:b2:d0:a0:
7e:36:85:f3:03:8d:c1:ab:85:f1:f1:f7:c6:28:0d:
84:fb:b9:bf:8c:e0:58:bd:fd:e4:21:c5:57:8e:fe:
a6:ad:77:9f:0f:a4:16:64:b1:c9:ee:10:a7:e0:4c:
79:a1:24:d3:8a:c3:ce:ec:01:c9:e6:55:2d:3c:a9:
56:7e:c4:9b:11:1b:33:3f:0c:f0:18:38:16:39:22:
be:8f:e0:7d:87:b6:98:32:43:77:4d:22:da:42:ae:
69:77:2e:3e:33:6b:46:fc:f9:bb:a1:33:db:79:59:
4c:e4:10:51:8c:62:ee:af:02:5c:f6:58:8e:2f:b6:
bb:99:ae:79:61:61:60:92:85:88:d8:b3:41:56:73:
fa:fe:e6:4b:c1:43:ba:04:fa:38:c9:d6:d9:c4:d6:
ff:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EC:40:AA:7B:E1:DB:A8:31:9A:D8:AB:F4:C6:8A:0B:C4:B4:E0:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/914E1844125411ED8CA673E6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.44.0/24
Signature Algorithm: sha256WithRSAEncryption
81:f9:f0:64:d8:a0:b6:1a:03:b1:2c:dc:37:70:ae:81:a5:e7:
fd:33:58:a7:24:d8:15:6e:f3:c9:d6:9c:02:fe:40:f0:de:6f:
75:2d:10:dd:4e:42:f7:8a:85:6e:e5:98:56:3e:46:02:3a:d2:
57:61:0f:d6:16:97:33:fa:a0:98:8a:1b:55:8f:94:ae:31:94:
d0:84:ec:eb:10:90:73:17:6c:f6:be:ff:32:d1:40:ba:eb:b1:
17:fc:bf:e6:92:55:a5:fd:a1:13:d2:14:fb:ca:9f:07:ab:3f:
a7:3c:54:22:17:a7:32:36:88:04:5f:0a:76:52:8f:a1:ac:e2:
40:cb:72:0f:8a:75:66:69:60:f6:1e:63:7f:c0:cc:59:8d:2f:
10:41:c3:6f:ec:ba:71:7d:cf:e7:c8:8a:6e:1d:ef:07:48:e1:
8b:5f:2a:6c:b8:ec:12:32:1b:c4:46:3a:d2:cb:a0:97:33:a0:
e6:93:da:e4:34:d1:dc:89:a7:d9:4e:bf:f9:a3:d5:c4:a1:6a:
ca:1d:0c:67:17:f3:a3:57:d0:13:ee:58:15:03:19:e2:c7:ee:
f5:4e:ec:cc:80:c4:cf:d4:aa:3f:56:c3:85:0a:d4:5a:61:cc:
d2:ff:13:6f:28:72:cf:94:22:ba:b4:3c:b6:40:b9:53:be:b1:
f2:1c:29:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 11 01:11:55 2023 by rpki-client on console-ams.rpki-client.org