Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/949E9566DBD911EC9B43D889F1222468.roa
File: 949E9566DBD911EC9B43D889F1222468.roa (raw, json)
Hash identifier: yldctDJ7DUYUDnfiaL/eCnDZ3Jbsj3ELX1jJStdoOvE=
Subject key identifier: D8:90:D0:91:A5:7C:52:82:34:CD:AD:78:D7:CF:F2:C7:78:53:2E:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1671
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/949E9566DBD911EC9B43D889F1222468.roa
Signing time: Wed 25 May 2022 03:20:09 +0000
ROA not before: Wed 25 May 2022 03:20:06 +0000
ROA not after: Fri 30 Dec 2022 03:20:06 +0000
asID: 35916
IP address blocks: 154.196.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5745 (0x1671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 25 03:20:06 2022 GMT
Not After : Dec 30 03:20:06 2022 GMT
Subject: CN=628da069-3b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:43:58:94:84:89:d2:49:11:aa:ea:90:34:
43:c0:f9:ef:7a:78:f1:14:79:71:d5:75:4d:81:cd:
7c:ed:e5:26:14:00:6f:a9:95:77:16:e8:ee:e0:1b:
ee:8a:01:8c:9f:c7:3e:0b:d3:52:a1:d5:3c:d6:b3:
31:7a:09:52:19:5a:67:01:27:83:59:b8:5f:d8:db:
1a:38:62:6f:38:ef:1b:48:d8:26:0a:92:a7:57:7a:
0d:4e:2a:8d:4b:40:f9:c5:99:31:8b:30:b1:2b:f1:
87:0e:47:81:71:79:b4:01:2c:b2:6e:d7:57:59:94:
12:0f:e4:7a:32:dc:ac:11:80:cb:e0:2c:5f:fc:5e:
dc:3b:d2:1f:18:10:8a:25:33:fc:db:cc:b9:e9:2e:
ba:c5:5c:f5:33:40:bb:a5:22:e5:e4:78:5e:72:44:
80:90:1f:31:ee:16:24:3a:57:8b:c1:8c:28:57:61:
92:92:43:e3:5e:b7:5b:f6:14:0a:da:37:4e:70:10:
4c:58:67:f0:8a:8a:a0:cf:2a:b4:8a:59:11:f3:91:
98:71:80:3d:ca:d0:1e:c6:fb:5f:a9:bf:e4:5d:a1:
d1:d7:ae:0e:7f:8e:f9:40:36:9a:28:01:91:96:05:
89:1b:5f:c8:32:76:c4:96:08:c3:69:fc:1c:22:f0:
68:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:90:D0:91:A5:7C:52:82:34:CD:AD:78:D7:CF:F2:C7:78:53:2E:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/949E9566DBD911EC9B43D889F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.131.0/24
Signature Algorithm: sha256WithRSAEncryption
39:32:55:dd:02:e5:22:26:a4:9a:91:17:6e:be:fa:dd:8d:c8:
78:a8:2a:40:a4:ea:99:a4:33:66:df:95:43:f1:44:1f:87:31:
e3:5f:c2:0f:36:de:6b:87:2b:b1:71:c1:f8:90:12:46:c3:ff:
be:93:aa:19:5f:3a:b0:fe:20:13:d7:42:e7:69:17:3e:f0:6e:
83:f8:86:99:ef:bc:3d:c5:0f:70:f5:9f:8c:ed:ff:81:1e:e3:
b3:b8:dd:75:65:0b:c0:86:b3:df:47:72:96:99:1f:a3:3a:36:
e8:6d:2f:eb:ef:94:f6:a6:a9:c7:1b:4b:41:66:a4:e3:20:5d:
05:5a:a5:11:6b:36:4d:d7:2c:ea:79:d0:c6:6d:fa:a2:50:ea:
ba:59:7d:99:a4:ec:e3:cb:0d:40:01:c4:c4:fa:4e:1b:48:e0:
52:09:f4:bb:32:32:90:ec:f5:52:53:14:67:23:1a:32:c1:54:
84:1d:d8:80:82:c8:23:5e:a2:c3:6e:ce:d8:5a:dc:b0:ad:06:
22:28:7d:5b:f5:dc:d0:08:82:c4:46:cd:00:b4:54:40:86:6b:
f4:df:b9:e2:ea:99:44:e9:f3:cd:f5:b0:0c:46:5a:fe:b6:d2:
54:5d:a6:bd:08:a3:b6:bf:6b:3d:91:b0:90:0e:a1:16:86:58:
35:4b:a9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-ams.rpki-client.org