Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5C39D60E7D611EC85935AE3F1222468.roa
File: A5C39D60E7D611EC85935AE3F1222468.roa (raw, json)
Hash identifier: w8SI0CB5iAX4ToFD+fbQgl948MxzNLByX366VRWooks=
Subject key identifier: F9:B0:D1:C3:C5:27:C7:9B:8C:E6:48:49:CB:43:E0:10:E6:E4:F0:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 16B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5C39D60E7D611EC85935AE3F1222468.roa
Signing time: Thu 09 Jun 2022 09:29:23 +0000
ROA not before: Thu 09 Jun 2022 09:29:20 +0000
ROA not after: Wed 30 Aug 2023 09:29:20 +0000
asID: 133199
IP address blocks: 154.204.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5814 (0x16b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 9 09:29:20 2022 GMT
Not After : Aug 30 09:29:20 2023 GMT
Subject: CN=62a1bd73-f79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:75:c6:4e:e0:3d:1d:4d:00:1c:85:45:d3:
8c:e8:59:2c:1a:f6:cb:32:62:bc:b3:39:73:79:fa:
06:8a:85:90:68:10:67:f1:47:46:91:b0:be:be:d1:
3b:62:01:bf:5b:9e:88:60:f0:b9:ad:b5:05:18:e6:
61:37:c0:f0:0f:f6:c1:e0:f0:1c:16:9b:72:00:a0:
42:f7:c1:93:86:d0:1e:fe:06:39:2e:fb:de:3f:07:
ec:69:6a:71:27:5b:26:53:76:ae:a6:22:c2:39:d6:
ca:4b:95:e1:be:db:6a:c5:d7:b7:96:d2:3f:c0:b9:
4b:a7:8b:8f:12:d9:e5:25:0d:d5:bb:ac:a1:dd:39:
42:5f:0f:0e:21:d9:5c:3c:83:07:1f:32:85:c6:90:
6b:18:41:0c:f0:f4:0b:88:8d:29:7c:03:c2:57:7d:
bf:94:c5:b3:e6:cd:7d:4a:ed:70:ec:7a:32:44:be:
06:2a:d2:af:a3:a1:4c:ed:84:a5:8b:02:35:53:6e:
ac:15:3b:75:e8:aa:08:3b:67:a8:1c:5f:3d:c9:5b:
f9:fe:ac:f3:96:f0:b2:67:ce:cb:cf:56:50:98:9a:
03:75:db:9a:31:92:93:68:38:42:1d:b7:d3:3c:5d:
94:5f:83:e8:81:34:af:99:00:8c:61:ac:cc:f4:11:
eb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B0:D1:C3:C5:27:C7:9B:8C:E6:48:49:CB:43:E0:10:E6:E4:F0:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5C39D60E7D611EC85935AE3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.38.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:a8:0e:7c:ca:6d:62:c2:b0:10:53:4d:33:cb:0c:92:d3:0f:
3d:0d:ca:b9:4e:32:ea:2a:72:06:5e:6b:cf:99:9b:49:83:a5:
22:4f:eb:75:2d:66:1c:18:2a:ae:35:41:b3:3b:6a:1d:72:09:
03:b6:ea:fa:a1:1b:e7:70:09:a3:29:e4:4a:fb:40:bf:f8:35:
7f:48:40:81:13:b2:b2:2c:a3:81:01:b9:d5:fd:fa:7b:94:ce:
a5:79:42:be:de:c4:d6:b1:41:81:20:d7:17:38:68:db:94:d5:
d7:11:72:ca:24:36:7e:30:07:56:08:35:79:8a:9c:22:d4:8a:
87:7f:40:1a:e8:1c:bc:d4:70:20:44:d8:91:07:9f:94:2c:88:
fc:86:96:81:ef:d5:f4:ce:f6:7f:5a:8c:b3:e6:1a:ac:97:6e:
8f:18:69:7a:a8:25:ca:84:d5:7e:fa:a4:f7:b4:d3:4e:90:9d:
ee:81:b4:87:ff:bd:7c:27:88:a6:69:c1:58:23:61:a4:18:97:
a5:02:a6:d0:bf:5f:32:78:93:b8:f6:56:b4:7a:5c:b7:dc:c4:
3b:03:f3:5d:db:bb:4d:25:8f:eb:b2:c6:7f:9a:8d:2d:0b:d3:
f9:bb:5f:08:cb:61:89:4d:fe:11:5c:5f:b1:68:71:eb:6e:42:
fa:30:d2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 13:21:34 2023 by rpki-client on console-ams.rpki-client.org