Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A774BAE257EC11EC9A8B988D5A40D577.roa
File: A774BAE257EC11EC9A8B988D5A40D577.roa (raw, json)
Hash identifier: lLWblguqqiWwbn5jSXZRsUxF4GfkL4t6/FDCZpKybjg=
Subject key identifier: 2E:1B:DC:E7:13:DF:0D:08:BC:03:9C:0A:D0:90:46:AA:E1:BD:C5:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 136A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A774BAE257EC11EC9A8B988D5A40D577.roa
Signing time: Wed 08 Dec 2021 06:04:08 +0000
ROA not before: Wed 08 Dec 2021 06:04:04 +0000
ROA not after: Sun 30 Oct 2022 06:04:04 +0000
asID: 135386
IP address blocks: 154.206.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4970 (0x136a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 8 06:04:04 2021 GMT
Not After : Oct 30 06:04:04 2022 GMT
Subject: CN=61b04ad7-3a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:01:20:da:3c:a2:9c:74:32:12:ac:20:f4:a5:
05:d5:7d:d0:ae:cd:78:56:7f:f0:86:a0:8a:bd:39:
f1:be:39:f9:bf:5b:ce:65:67:e7:bd:bc:1c:34:f7:
2b:f1:26:56:cc:30:3f:2b:ff:19:db:1c:16:53:6d:
cd:cf:c3:2e:75:0b:3d:fe:29:9c:c6:1e:cd:b0:93:
52:d8:b7:ea:7c:70:ac:d5:c5:bf:28:f5:6e:2d:4f:
fc:0c:84:05:d6:31:bd:06:45:00:4b:c7:4c:ee:d6:
de:8e:63:3b:b5:a7:46:17:32:f8:8f:55:6f:6a:97:
59:d9:4a:1c:2b:cb:1c:39:f7:50:19:27:e5:5d:86:
d1:5e:43:38:86:f2:ed:bf:e7:33:da:30:d3:ef:68:
d8:79:d5:81:e9:9a:bb:8d:8e:4d:e0:04:24:36:99:
c1:a1:9a:15:9d:9a:bb:76:67:06:f8:9d:70:68:97:
2b:d0:c1:ed:56:57:0b:41:df:41:70:d2:5e:d4:48:
d5:22:e5:8f:ca:fc:15:8c:93:9d:09:ed:f9:d4:11:
91:d5:4c:5a:86:a2:32:84:37:af:bc:1f:35:d8:cb:
fc:8e:ad:b9:fe:5f:ab:e6:eb:1f:f4:0b:a5:b8:77:
a1:38:b0:b6:3f:60:cf:12:4b:fe:68:6f:58:ef:c5:
c5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1B:DC:E7:13:DF:0D:08:BC:03:9C:0A:D0:90:46:AA:E1:BD:C5:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A774BAE257EC11EC9A8B988D5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.64.0/18
Signature Algorithm: sha256WithRSAEncryption
aa:4d:9c:59:5c:0d:95:27:2e:c3:e9:32:39:b7:31:b6:17:02:
63:3f:e3:db:93:37:af:94:26:8a:38:40:6a:ef:2d:fe:b8:5e:
f4:61:a9:87:81:68:1c:8a:de:c3:15:a7:cb:5d:fd:c7:1b:7a:
39:2b:f0:5b:bc:f8:c2:c1:1f:41:18:4b:5c:d4:7e:83:22:20:
84:08:5b:e8:d5:eb:a7:a4:6b:58:bb:68:a0:43:9f:67:1b:82:
54:d8:ff:79:e6:e0:0a:33:37:bc:b9:54:8a:52:d9:f3:20:e2:
9d:4e:96:72:47:ad:41:0a:47:05:64:25:fe:9f:ac:d2:ed:3a:
f4:cd:ea:85:93:32:dc:ef:f1:cc:7b:73:bc:b2:b6:9e:07:a8:
ad:1c:cb:a7:19:42:ea:a5:2c:af:64:b9:81:ac:b6:2f:fb:1d:
31:d4:f8:51:c7:d5:b8:b2:d6:62:e1:5e:6f:8b:e1:98:4c:4a:
a5:e4:46:a2:73:d3:d9:32:86:e2:69:7b:f2:ae:64:8a:13:30:
13:76:f9:e1:c1:35:21:80:31:8f:97:70:b7:76:e0:46:20:5d:
27:41:1a:54:4a:a3:d9:ad:0a:e7:e3:ed:42:27:31:7c:47:86:
9c:1b:50:13:c2:91:2d:c2:3d:33:4f:f9:38:2c:9f:1d:74:e6:
49:01:e2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-ams.rpki-client.org