Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3086280E58011EBBAF8322FF8AEA228.roa
File: A3086280E58011EBBAF8322FF8AEA228.roa (raw, json)
Hash identifier: PoS16kmLIaKWk3BdS9KrqP/WcPuJ3ckbmdZTRYTmzWo=
Subject key identifier: 29:28:2D:65:A1:51:4C:1A:D3:2C:DE:29:C7:9D:E6:BA:EF:4C:DD:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0808
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3086280E58011EBBAF8322FF8AEA228.roa
Signing time: Thu 15 Jul 2021 15:23:42 +0000
ROA not before: Thu 15 Jul 2021 15:23:38 +0000
ROA not after: Sat 09 Jul 2022 15:23:38 +0000
asID: 397630
IP address blocks: 154.83.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2056 (0x808)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 15:23:38 2021 GMT
Not After : Jul 9 15:23:38 2022 GMT
Subject: CN=60f052fe-65f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b3:a3:e7:5e:41:45:c1:4f:4b:bd:0b:a6:8c:
2e:67:6b:50:a2:7f:fc:46:6a:f0:77:cf:d8:f1:87:
1d:01:fe:02:d7:f9:e3:fa:c7:70:a5:c8:d8:22:cb:
6e:31:af:dd:13:5e:13:33:60:e8:d3:a8:89:d1:3c:
4d:99:ca:37:e9:0d:88:f6:43:4d:62:26:1e:ad:9b:
d7:e1:89:b8:67:48:01:41:10:40:05:35:a8:7f:2d:
e7:be:38:2a:af:b3:bb:04:cd:a3:bd:d6:61:e4:c4:
c6:31:04:86:05:9e:b2:d5:b3:73:29:3f:6c:01:cc:
d7:d4:09:46:b8:ef:5d:43:28:b1:10:bf:5d:f4:b9:
2d:7b:57:bf:72:ee:ce:8c:f8:ab:10:cc:13:be:3c:
08:0f:c2:05:ad:58:32:8a:20:31:7e:b7:c0:cb:fe:
6c:0b:ed:30:a8:fb:bf:95:2f:31:de:7a:18:be:4e:
cc:23:28:33:8e:5b:88:22:2f:13:67:ce:9a:37:73:
53:89:cb:12:44:ca:cc:51:08:59:33:53:57:0e:ea:
ba:4e:8f:29:a1:14:19:39:83:1a:c8:5c:d9:63:06:
4f:b2:27:cb:42:c7:d5:2c:ed:72:9f:d6:d2:c6:d2:
34:fd:c9:25:12:fe:9a:53:dd:25:70:e2:bf:b9:f6:
fe:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:28:2D:65:A1:51:4C:1A:D3:2C:DE:29:C7:9D:E6:BA:EF:4C:DD:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3086280E58011EBBAF8322FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.9.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:28:e9:7c:7a:3b:5d:f3:0b:0e:01:6b:39:0e:72:cf:78:70:
4c:73:a9:a4:64:0e:d0:bb:78:bc:4c:17:7b:71:33:a3:82:4d:
08:81:2f:35:7f:84:a0:9c:33:80:45:36:ef:30:c3:e7:49:2e:
a8:43:ea:45:67:ef:6b:90:97:4c:3e:f0:c4:47:ca:28:2b:2d:
35:64:e8:da:b2:c6:64:b0:3a:a6:96:95:23:f5:25:b1:c4:e9:
6d:3e:41:a2:a1:63:a2:b8:ef:df:01:a5:07:f8:54:e5:06:49:
15:86:a3:02:fa:ba:c7:c9:8c:02:d3:07:7a:bd:53:a7:36:ae:
13:a8:39:9f:f6:e5:13:9a:fe:1f:6f:88:c6:6e:e7:79:18:8e:
68:dc:00:b5:e9:85:0b:44:88:35:09:2d:42:23:34:2c:dd:35:
59:08:be:dc:ba:4b:60:f4:97:ab:18:87:74:ad:2a:f0:64:78:
5d:ad:84:56:22:da:95:98:01:58:9b:36:1b:ce:03:10:95:8d:
42:8e:c0:64:56:6b:f6:34:9d:a1:9a:b0:bc:f1:c9:c0:7b:11:
ae:db:96:51:93:9d:7a:95:a6:dd:2d:86:ad:9c:d6:de:cb:fa:
e6:d2:45:41:44:48:99:81:2c:8c:28:ba:8e:6f:42:b7:3e:8a:
d8:b3:9b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-ams.rpki-client.org