Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/927CAC500E5111ED8BA6C4A9F1222468.roa
File: 927CAC500E5111ED8BA6C4A9F1222468.roa (raw, json)
Hash identifier: 7nYDg5veT7tlJmvDxXae2OdDO5PY8cVVyDBfipg314o=
Subject key identifier: E5:BA:57:7A:79:7A:DE:30:D3:F8:49:2C:78:72:D4:FB:5A:1B:D6:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 17C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/927CAC500E5111ED8BA6C4A9F1222468.roa
Signing time: Thu 28 Jul 2022 08:45:03 +0000
ROA not before: Thu 28 Jul 2022 08:45:00 +0000
ROA not after: Mon 15 May 2023 08:45:00 +0000
asID: 397630
IP address blocks: 154.201.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6082 (0x17c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 28 08:45:00 2022 GMT
Not After : May 15 08:45:00 2023 GMT
Subject: CN=62e24c8f-353b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:d6:74:99:ca:ff:9b:f3:23:d5:5d:0f:fd:
e2:3f:3d:8c:c1:50:78:75:13:54:d1:ab:e3:8a:7b:
8f:93:c8:25:ab:fd:20:22:9b:96:2d:64:e2:f2:13:
ab:03:4f:fe:4c:69:f4:c7:70:d0:cd:5b:fd:f4:72:
b7:37:54:55:46:1e:68:b6:f9:a4:75:0c:b0:e0:ad:
61:f8:fd:e6:90:cf:75:a5:66:c5:01:b8:5e:a7:5e:
12:75:82:49:c7:41:97:cd:9b:0f:ce:be:4e:14:a3:
6b:12:6a:d2:ff:a9:9f:e0:3a:fe:c4:ca:06:d5:32:
28:77:dc:7a:87:f4:f9:02:8e:d3:89:89:a2:40:14:
a2:35:56:79:11:17:91:06:2f:95:a9:75:45:6b:c8:
b8:e4:a9:b0:76:13:31:c4:d2:33:40:59:28:15:91:
a7:78:8c:ff:c1:1a:a0:b1:a3:41:86:27:8a:93:7a:
b0:18:e8:ad:c8:a6:f7:1c:66:9d:42:01:37:20:00:
73:88:a6:40:ea:7e:e6:72:62:db:53:19:ef:99:7b:
01:d3:17:92:7c:1f:db:10:e6:9c:77:5d:85:0d:5e:
e4:c5:57:3b:ce:e4:fb:aa:9f:97:a9:2b:55:73:89:
6a:7c:10:42:80:b9:0c:90:a5:e3:44:5e:42:9d:80:
6f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BA:57:7A:79:7A:DE:30:D3:F8:49:2C:78:72:D4:FB:5A:1B:D6:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/927CAC500E5111ED8BA6C4A9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.61.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:27:a0:3a:97:63:26:da:95:c3:9b:fb:96:49:27:7d:5b:71:
ea:ef:03:64:52:cf:f2:37:53:e6:2c:78:9d:83:cf:51:1a:6c:
f7:5e:56:75:ab:1b:3c:98:df:f2:1c:62:8c:bf:73:6f:c1:c8:
81:c0:e1:d5:8b:2e:bb:cd:f7:71:21:a5:2f:8e:94:eb:3a:e9:
98:85:e0:06:8c:6d:f3:21:58:f3:f2:b3:30:c3:31:45:b1:e6:
60:94:15:84:76:96:ff:4f:02:4a:cd:57:94:74:c0:e2:41:bb:
c8:8a:27:43:65:cd:d8:f9:d9:a1:36:13:bf:0d:cb:ad:88:40:
56:63:a2:0b:ea:05:2d:ef:42:ab:6b:7c:84:f9:75:7f:dd:49:
ff:22:98:fa:c5:6d:0e:b0:61:99:11:62:01:33:a4:49:91:f1:
c6:d6:7d:08:88:b5:26:9f:82:79:3c:12:a3:9c:0e:80:06:34:
26:dc:c7:85:61:68:78:a3:b4:f3:b5:49:e1:b2:85:d6:b4:96:
d7:61:e6:3b:34:d7:6e:22:36:91:87:55:36:1d:8b:a7:b8:73:
8c:91:a5:be:1e:39:4f:ab:81:58:13:fd:ea:11:9f:f1:3a:d9:
82:6a:80:da:23:d1:25:25:80:5d:7a:7c:fd:b4:6e:31:0e:82:
5f:ec:f9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:12 2023 by rpki-client on console-fra.rpki-client.org