Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3E724DC17C711ED934BECBDF1222468.roa
File: A3E724DC17C711ED934BECBDF1222468.roa (raw, json)
Hash identifier: gtb7S06QhfKNh3iDFMljwT6UfJBEPiIeYdcNTFjR8qA=
Subject key identifier: 41:95:AB:11:3B:CA:D8:BC:78:6F:CC:E1:E8:67:7C:9D:11:95:BB:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 183A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3E724DC17C711ED934BECBDF1222468.roa
Signing time: Tue 09 Aug 2022 09:42:53 +0000
ROA not before: Sun 14 Aug 2022 09:42:50 +0000
ROA not after: Sun 25 Jun 2023 09:42:50 +0000
asID: 1239
IP address blocks: 154.194.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6202 (0x183a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 14 09:42:50 2022 GMT
Not After : Jun 25 09:42:50 2023 GMT
Subject: CN=62f22c1d-72b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:21:94:6e:18:0c:7e:59:8b:e0:09:6a:54:
25:99:70:e9:95:4c:7e:89:68:38:60:38:4b:ea:1f:
ef:97:b4:b3:3c:11:b3:c2:8c:b3:3f:4b:eb:1f:ac:
41:1c:69:5a:91:86:5b:8b:0a:d9:bb:4b:8c:d9:67:
71:23:bf:4f:2b:48:6a:e9:16:20:ad:76:31:41:13:
44:28:d6:04:7c:e7:be:bd:86:eb:17:16:f4:df:50:
11:23:15:a6:4a:94:95:7e:31:c3:af:49:f5:89:8d:
77:1b:ba:fb:ec:fc:c9:66:60:0a:33:eb:ee:c4:95:
be:0f:a9:3a:91:eb:08:7f:6d:35:81:c7:11:e9:1e:
ee:da:e6:01:f9:27:61:2e:ed:05:2a:09:62:33:96:
92:e5:22:7e:a8:8f:24:22:c3:d9:7c:dd:3f:d1:8d:
e6:b3:6b:7a:ca:c7:68:6f:1b:78:33:e3:5f:c4:28:
26:14:d3:0f:56:fb:71:23:8c:f0:0c:be:60:1e:96:
37:bf:99:7f:af:1c:19:e3:ff:25:16:0c:61:80:ab:
4d:07:7c:79:bf:62:cd:73:22:8f:b0:1f:a1:d6:99:
e8:cf:d3:9c:4d:46:d0:34:d3:04:6f:aa:3a:ad:71:
04:88:3f:20:8b:cc:8a:c7:ee:2b:0d:a0:1a:15:66:
20:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:95:AB:11:3B:CA:D8:BC:78:6F:CC:E1:E8:67:7C:9D:11:95:BB:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3E724DC17C711ED934BECBDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:59:a0:0b:99:3f:5a:e2:e7:6d:c0:7c:5f:98:1f:d5:73:50:
65:fc:db:77:84:b7:44:91:e9:32:65:3b:40:c5:a7:59:fa:bd:
92:7f:8d:ca:4c:b2:13:18:34:8d:3b:8f:55:b3:95:6a:92:d8:
57:7c:ee:b0:6d:05:6f:76:a8:fb:b0:34:f9:e1:21:41:43:60:
02:0b:ea:9c:0d:58:57:88:13:66:d3:b7:0e:03:25:16:d5:f7:
8a:10:43:14:57:60:a3:73:9b:91:0e:0c:7f:ba:6e:95:d0:fa:
b9:90:e1:61:37:4b:01:19:c4:96:0f:19:20:7b:94:41:fe:71:
27:22:82:fe:21:58:6a:5d:74:78:ee:03:b4:1e:54:11:42:f2:
84:91:b1:8e:ba:42:23:94:c1:69:31:8c:bf:51:2e:27:d0:95:
2a:a8:eb:0f:12:ce:21:a3:7a:ec:2e:8b:6e:0f:f7:36:b5:32:
5c:22:98:10:e3:6c:43:34:76:5b:b6:f3:03:d1:dd:a2:26:b4:
3b:31:25:06:0b:12:92:40:8d:bc:54:0a:63:0b:3c:c7:dc:64:
79:0d:03:58:fa:d0:60:16:69:02:c5:51:dc:f3:d6:bc:65:60:
a2:92:e4:f2:c0:4b:10:45:6d:df:5d:96:72:3d:36:1d:fc:08:
13:15:db:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:12 2023 by rpki-client on console-fra.rpki-client.org