Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/954EA7A6708311EC85988E6A5A40D577.roa
File: 954EA7A6708311EC85988E6A5A40D577.roa (raw, json)
Hash identifier: Lq7wz1erDVjwrSCIo/Itjpql5+WnbnsyQgGoawgdyXE=
Subject key identifier: D7:E4:57:E3:CC:1D:F0:45:37:48:E0:3E:DA:13:A4:12:39:FC:11:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 146E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/954EA7A6708311EC85988E6A5A40D577.roa
Signing time: Sat 08 Jan 2022 13:04:59 +0000
ROA not before: Sat 08 Jan 2022 13:04:55 +0000
ROA not after: Fri 30 Dec 2022 13:04:55 +0000
asID: 53587
IP address blocks: 154.210.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5230 (0x146e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 8 13:04:55 2022 GMT
Not After : Dec 30 13:04:55 2022 GMT
Subject: CN=61d98bfb-cf03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:08:a9:83:bd:e2:7e:34:d7:15:8b:f5:61:09:
20:03:58:32:60:b7:bf:9f:f7:e7:e2:9d:35:ee:19:
33:d2:1c:98:10:e8:5e:a6:c5:1f:79:a4:47:5e:b9:
1c:42:dc:42:f2:c8:75:53:1a:a8:c1:40:f5:7d:ce:
e1:02:f6:a3:20:05:dc:93:eb:5c:36:9c:5e:ea:14:
89:a5:e9:b7:99:84:28:59:16:73:5b:67:16:1e:44:
13:fe:cf:54:f2:20:2d:d2:ed:33:f7:45:ef:81:c0:
64:a5:c1:c2:c1:65:12:9f:55:13:1f:d2:b7:6c:9d:
e6:f5:7b:aa:43:5c:6b:5c:dc:ff:a9:e9:49:4a:95:
69:a7:35:81:d7:2f:e3:9a:59:d7:6c:d5:7a:59:4a:
e2:47:13:3a:25:42:ec:aa:c8:ee:f4:7f:dc:4f:3c:
84:c8:5a:5e:62:7a:dd:c8:3b:7c:0d:25:a7:ae:e9:
ca:e4:f4:ae:cf:58:32:82:e2:38:da:36:a7:51:ee:
fb:cf:15:bb:87:2c:ac:a2:f0:52:4a:51:71:ca:ce:
82:a9:17:1c:31:66:a9:f6:c8:27:8a:d5:26:4a:43:
f0:07:57:07:42:a7:73:2b:32:42:89:8a:e4:9f:48:
8e:cd:fe:8c:55:2b:6b:8a:80:e1:1b:5a:09:3e:23:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E4:57:E3:CC:1D:F0:45:37:48:E0:3E:DA:13:A4:12:39:FC:11:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/954EA7A6708311EC85988E6A5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.99.0/24
Signature Algorithm: sha256WithRSAEncryption
23:b7:df:4f:bf:81:88:13:15:32:38:e1:1a:ac:a1:42:41:04:
b2:1c:00:28:a3:ff:67:4f:57:be:78:4b:8d:ab:c4:4d:b5:44:
cb:7c:39:66:2b:e1:8b:e0:ef:55:2a:ea:a1:5a:70:16:11:43:
a1:62:ae:4b:6b:ba:e2:5d:1d:8c:7a:86:79:4d:6b:72:cf:89:
df:43:a1:0a:8f:3b:b8:09:95:a3:4f:34:39:e9:b8:8d:65:88:
9c:fe:a6:07:65:2f:75:d3:f5:f9:a2:7b:7a:98:93:09:c7:fa:
27:e0:d7:d3:8d:d3:91:e8:b4:32:ab:b5:3d:de:92:a7:c2:07:
a6:ab:09:ee:8e:e8:6a:38:da:24:6c:19:f6:1a:19:bc:49:b0:
1f:53:8d:0f:46:d8:d7:9b:0f:bd:7a:a7:94:af:5c:66:b5:0b:
37:87:7e:ca:47:26:c2:c6:d9:33:eb:33:c6:21:80:78:61:99:
6a:2c:2b:dd:49:85:0c:f0:ac:4c:be:79:fd:58:8e:6e:c1:a0:
db:fd:d6:db:23:6b:cb:62:75:f4:85:6d:78:13:e6:2c:27:be:
65:88:fc:ad:0f:90:4b:eb:8d:15:15:ca:3c:bb:0f:91:49:f9:
3e:88:45:d4:7f:21:9f:c7:d0:f2:85:4b:35:b5:c0:6c:d5:92:
de:89:9e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-ams.rpki-client.org