Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9564BD00E7D611ECAE840FE3F1222468.roa
File: 9564BD00E7D611ECAE840FE3F1222468.roa (raw, json)
Hash identifier: VY7tbXxoNxzBdbyZ55sUy0pDtMUf65RQoG6rOazXG0Y=
Subject key identifier: 5D:DF:2D:FC:A7:00:5F:4B:7A:86:A0:36:ED:81:AA:9B:F8:FC:20:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 16B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9564BD00E7D611ECAE840FE3F1222468.roa
Signing time: Thu 09 Jun 2022 09:28:56 +0000
ROA not before: Thu 09 Jun 2022 09:28:52 +0000
ROA not after: Wed 30 Aug 2023 09:28:52 +0000
asID: 133199
IP address blocks: 154.204.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5812 (0x16b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 9 09:28:52 2022 GMT
Not After : Aug 30 09:28:52 2023 GMT
Subject: CN=62a1bd58-845b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:da:80:69:0a:d0:fc:0a:8e:45:9c:7b:7d:b6:
b1:bd:98:25:c4:ab:f0:0c:2f:fd:73:97:10:03:19:
57:54:2b:64:53:e1:22:bf:04:1a:68:4b:2a:93:6a:
33:4d:0c:1b:a5:a8:96:b9:ef:0f:34:24:39:d6:24:
5e:d5:0c:6f:b3:d2:d2:3a:bd:85:48:c2:df:70:e8:
86:54:5d:09:4a:0d:ad:92:5f:41:f0:ac:cd:46:bc:
0e:85:26:3e:f7:a2:5d:21:57:69:fb:4c:29:77:65:
83:87:6d:e6:e0:60:a1:82:68:22:f3:a7:52:c7:ff:
95:cc:57:78:ab:2f:62:c3:f1:1c:ff:0b:21:81:f9:
7a:b4:03:9b:47:11:f5:72:64:87:0d:eb:69:37:ac:
3e:d2:b8:f6:ed:d1:79:cf:a2:b0:30:b4:da:55:fc:
3f:2c:3a:f9:0c:c2:56:cc:a8:da:30:0a:0a:65:02:
49:53:09:ce:50:ed:a6:30:2f:36:cb:4a:0c:87:83:
cc:03:b4:f4:28:c4:62:c0:b7:9a:79:66:48:e8:69:
5d:94:0e:bc:bc:53:aa:b0:b0:5b:54:b6:91:78:11:
3a:b6:e5:63:ff:85:55:94:75:85:58:63:88:aa:3a:
3b:e6:a8:24:fa:10:ae:19:c8:62:ec:7b:d2:40:66:
83:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DF:2D:FC:A7:00:5F:4B:7A:86:A0:36:ED:81:AA:9B:F8:FC:20:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9564BD00E7D611ECAE840FE3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.35.0/24
Signature Algorithm: sha256WithRSAEncryption
14:bd:f7:d4:08:98:15:3b:84:90:3c:50:8c:b1:ab:20:0c:44:
e4:f2:c9:5f:55:4d:e6:09:49:2b:c5:74:3f:9b:2a:fd:a9:62:
d3:06:ce:48:25:b9:0f:e4:59:b3:b3:a6:2c:9f:be:c2:c5:9b:
ea:13:f1:cb:c0:f9:11:e6:eb:0f:85:b5:e5:8c:eb:d7:4d:3e:
21:47:fc:fe:9d:8d:f4:56:7d:fb:62:16:a0:78:2a:b2:ae:ea:
70:2a:5f:8e:72:50:6b:08:84:71:58:5e:75:48:c5:27:6d:75:
4a:2d:9f:11:a8:68:c2:b9:4e:79:b0:95:47:a8:61:50:6b:5e:
73:e0:9e:b4:15:7f:3c:35:ac:73:c2:c0:88:62:d1:e7:2d:fb:
bd:80:87:a3:eb:d0:25:e3:f9:b1:15:01:02:94:c7:2f:2d:75:
e9:1e:91:51:2d:2c:1c:89:2d:da:25:7d:65:5a:e9:6a:8e:20:
af:9b:6c:6d:45:97:8e:76:2a:d3:ea:3a:d1:33:99:f4:d8:2c:
3d:d0:68:4d:42:64:e2:8f:c2:bc:d8:b4:60:8a:6a:a4:4f:5a:
2c:6d:e1:9b:34:f2:12:8b:bb:13:19:6b:d1:ce:58:13:d4:81:
74:fc:11:d5:82:5d:c0:87:e4:41:b1:6f:20:90:c2:f4:b9:d1:
01:8e:38:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 13:18:04 2023 by rpki-client on console-fra.rpki-client.org