Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9497981AE08E11ECAF96FFD5F1222468.roa
File: 9497981AE08E11ECAF96FFD5F1222468.roa (raw, json)
Hash identifier: +sXQL+6y12hF3mhcD+MyMxL1Jgf947jtoP8j0S9hCGk=
Subject key identifier: E1:FA:8E:FD:EE:CF:8E:21:FB:FC:C8:F8:0A:07:3C:23:A5:0D:B2:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1684
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9497981AE08E11ECAF96FFD5F1222468.roa
Signing time: Tue 31 May 2022 03:05:52 +0000
ROA not before: Tue 31 May 2022 03:05:49 +0000
ROA not after: Fri 31 Mar 2023 03:05:49 +0000
asID: 136950
IP address blocks: 154.213.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5764 (0x1684)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 31 03:05:49 2022 GMT
Not After : Mar 31 03:05:49 2023 GMT
Subject: CN=62958610-ec75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:fb:e6:6c:cd:0d:88:55:52:71:63:68:04:77:
43:db:22:f0:84:65:2c:dc:d4:86:8a:c6:0d:b8:e4:
50:e3:f2:08:9f:72:7c:21:e7:ef:50:98:d7:9d:35:
83:56:cf:3b:1d:97:15:ad:b1:e5:9e:66:56:7e:2f:
9d:69:15:10:94:80:ce:e5:b1:09:a8:65:73:1d:b8:
fd:85:bb:c1:81:cd:38:57:f3:ff:29:5d:31:7d:b7:
0e:18:04:5b:b8:e1:68:a7:5a:8c:8f:38:74:2f:02:
1e:d4:d7:11:87:f6:4a:22:b9:c3:1d:09:f6:63:f1:
f5:19:79:58:6f:db:19:c2:24:9d:fa:89:91:c2:10:
b5:30:7a:fb:2d:ab:39:d9:5a:76:ac:4d:5d:c0:37:
3a:24:99:c2:2c:c1:0f:08:db:cc:ef:57:df:05:e3:
01:00:62:48:b2:96:ff:d9:97:1d:67:3d:f5:84:72:
1d:b0:ef:0a:da:0d:6d:1e:a6:cf:1e:db:60:84:6a:
d9:25:51:63:c7:80:b9:35:52:72:ba:bf:d5:41:31:
85:a4:be:45:4c:67:a2:ef:66:63:66:6c:e9:b2:6e:
73:66:a5:b8:35:e5:51:74:3a:34:46:59:a9:06:54:
73:ab:23:55:42:27:5c:8a:df:e1:e6:e3:71:cc:f7:
da:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FA:8E:FD:EE:CF:8E:21:FB:FC:C8:F8:0A:07:3C:23:A5:0D:B2:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9497981AE08E11ECAF96FFD5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.18.0/24
Signature Algorithm: sha256WithRSAEncryption
36:58:c4:1b:a7:84:4d:7e:1e:27:ad:5b:4d:02:23:1a:c4:5c:
d3:5c:91:c4:cb:f2:4f:26:8c:91:de:64:12:6d:9d:13:89:c5:
a0:0d:e3:d9:10:76:e9:a5:9f:05:7a:b1:13:96:e3:ac:89:06:
23:d1:bd:61:76:b6:63:f9:a8:7b:7e:0e:bb:ee:80:a7:42:fb:
b4:8f:fe:74:f1:21:4f:4c:db:a0:69:40:b8:2d:f5:79:1d:03:
e8:cd:4b:bf:78:a6:78:c7:bb:52:1e:ca:34:4b:c5:90:66:c6:
7e:8d:0a:5c:2d:05:ba:b7:72:80:e3:a7:c6:2d:b5:70:bc:df:
66:2c:0f:12:c2:aa:93:83:6e:67:5c:89:9b:be:cc:8c:9a:5e:
4b:e9:90:cb:1c:7c:8b:5c:77:ef:1f:c4:47:89:cd:8c:88:d8:
5f:ce:cc:74:4c:b6:37:6f:d7:d7:af:13:65:fb:c5:41:59:81:
ec:48:a6:fe:15:37:a9:01:ef:69:3e:07:3e:54:79:69:72:6b:
98:50:4c:cf:b3:6c:71:e7:64:ed:81:e0:9e:7c:62:fb:1b:63:
44:e6:c3:f4:c0:57:dd:76:45:38:c4:d8:fa:c2:1a:9c:9a:16:
9e:3a:b1:e3:ec:83:04:5a:91:55:54:28:07:36:d5:36:00:53:
27:60:a9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-ams.rpki-client.org