Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2F15C50A44511ECBBF59DD25A40D577.roa
File: A2F15C50A44511ECBBF59DD25A40D577.roa (raw, json)
Hash identifier: CeFJ71Qwqw66XLGrgsgmi//WMPCEDELNb+a/1BJ6Z3g=
Subject key identifier: 08:3B:24:F7:03:6E:E2:49:39:D9:B0:92:5D:A1:5B:2B:80:8E:74:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1542
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2F15C50A44511ECBBF59DD25A40D577.roa
Signing time: Tue 15 Mar 2022 09:52:34 +0000
ROA not before: Tue 15 Mar 2022 09:52:30 +0000
ROA not after: Sat 31 Dec 2022 09:52:30 +0000
asID: 135097
IP address blocks: 154.205.36.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5442 (0x1542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 15 09:52:30 2022 GMT
Not After : Dec 31 09:52:30 2022 GMT
Subject: CN=623061e1-7c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:a1:ad:14:4b:67:7d:b0:a4:0e:50:79:f0:
84:0c:ba:f2:f7:ec:d4:98:c9:7b:fc:fd:9a:53:eb:
a1:d3:55:0b:c4:76:2c:6d:05:0f:76:a2:fb:3a:da:
9a:35:1f:4d:30:51:8b:89:68:8d:1a:3e:b9:7d:54:
fd:53:37:23:70:ba:f6:c8:1f:e4:94:c4:e0:dc:97:
d6:e5:64:09:40:49:ee:52:92:dc:76:1f:ff:5b:b7:
0f:96:30:f2:71:9a:87:71:8a:3d:03:20:bd:2d:ef:
48:f5:f6:c9:67:c9:75:02:b7:e0:ad:0a:24:57:d4:
e0:04:38:b2:72:10:ff:e0:e6:0b:c4:ff:be:c2:57:
26:95:30:f8:ec:b1:14:25:f0:92:af:42:d6:77:8c:
1e:5a:e8:38:29:66:64:0c:ba:3b:46:76:e1:e7:8f:
98:77:a4:45:b6:3e:78:3e:87:da:2a:86:01:c5:ff:
9c:fb:1f:bb:c8:15:e2:8d:c1:1d:23:37:e4:e3:ce:
b3:38:88:22:06:62:c4:ad:e3:d2:47:2c:e4:7f:a0:
cb:7c:6a:7a:33:69:dd:68:d9:11:be:8d:df:db:0b:
ad:6d:7e:17:bd:06:d3:4c:11:ff:32:e1:11:58:b1:
01:59:ae:43:59:13:30:32:f4:9c:32:a7:81:05:8c:
2f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3B:24:F7:03:6E:E2:49:39:D9:B0:92:5D:A1:5B:2B:80:8E:74:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2F15C50A44511ECBBF59DD25A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.36.0/22
Signature Algorithm: sha256WithRSAEncryption
01:a7:73:eb:6a:69:63:f9:a3:39:15:6d:53:20:65:e7:f2:cb:
71:dc:c5:df:91:d5:10:fe:d1:c2:94:60:d5:80:dd:f3:26:ad:
c2:1f:b0:d8:01:fa:54:9f:29:b6:0d:95:a7:90:0e:ea:69:9a:
2a:b9:03:38:e4:9a:9b:76:1f:9a:b3:c6:ba:27:8f:ff:39:84:
6b:d3:94:68:85:ef:60:84:bb:af:c3:11:dc:71:97:76:7d:7b:
30:c0:58:09:78:35:d2:54:a4:b1:4f:9f:24:9d:58:d0:72:df:
b3:84:0e:d4:7a:d1:3a:0b:a9:ae:26:e0:34:4f:b0:5c:de:a7:
58:09:c4:c6:57:54:bf:29:41:79:37:d9:a4:22:c0:69:ae:1a:
cd:8d:c2:78:11:ea:54:25:ff:01:a3:5d:28:59:a7:74:c5:95:
f7:4f:f1:8b:81:05:d7:f8:d9:94:e5:44:d6:82:7a:18:fc:92:
6b:d9:b1:6b:99:35:f1:9c:0d:c0:35:c3:7d:bd:c6:1d:33:1d:
c6:60:9e:d3:94:a0:05:47:17:d9:f9:40:b2:d6:e9:7d:67:1d:
90:4b:1a:a1:c4:3c:d6:b2:7a:af:82:ed:2d:70:ed:35:ea:1d:
74:7f:86:96:e0:48:96:bd:6d:52:57:1d:77:44:aa:05:8c:ca:
a0:91:8c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-ams.rpki-client.org