Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA16C100FC2911ECBE182B7DF1222468.roa
File: AA16C100FC2911ECBE182B7DF1222468.roa (raw, json)
Hash identifier: EB6/VCMHLZLY9Xev2Ke+GQf/M01zQ1/xlqXYkXjfyAI=
Subject key identifier: 6D:11:8F:DF:4C:34:43:67:BE:33:2A:3C:25:BE:28:37:B3:8D:1A:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1726
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA16C100FC2911ECBE182B7DF1222468.roa
Signing time: Tue 05 Jul 2022 06:14:02 +0000
ROA not before: Tue 05 Jul 2022 06:13:58 +0000
ROA not after: Fri 30 Jun 2023 06:13:58 +0000
asID: 23674
IP address blocks: 154.192.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5926 (0x1726)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 06:13:58 2022 GMT
Not After : Jun 30 06:13:58 2023 GMT
Subject: CN=62c3d6aa-43b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:e0:40:a1:7b:84:ba:69:23:42:86:54:71:
37:ac:1b:49:7e:7a:72:d0:30:55:b9:1f:9c:9e:49:
e5:a8:e4:34:5d:f9:96:7b:27:27:0b:e9:3f:64:79:
80:42:79:17:2d:6a:d6:4c:73:fc:0b:03:c5:da:20:
c0:26:e1:be:90:2e:d0:88:7b:44:e3:f9:3e:8a:08:
ff:09:31:cb:72:ff:09:65:1f:15:79:d3:f0:45:3f:
b2:25:c9:33:3d:16:a3:5f:91:9e:da:5e:37:8f:79:
61:82:3d:a3:19:1b:e8:9e:7e:f6:45:a9:fe:7a:1d:
4b:87:7a:bf:a6:48:b0:9d:b8:79:17:a1:d3:b4:1a:
c5:38:38:08:00:a5:c1:af:16:5a:ae:ca:6a:36:93:
00:a1:27:b7:31:4b:af:e3:fb:bb:a3:b4:b9:98:3e:
77:2a:3c:a4:85:47:0d:0c:85:a2:9e:f1:19:a9:91:
90:56:79:e5:cf:dd:5d:f7:e3:a1:a7:e7:cd:57:5e:
c3:9e:6a:6f:bf:11:97:7d:21:65:89:56:7a:7d:9e:
ef:3e:13:9a:39:aa:19:d9:0c:28:64:db:d3:76:95:
49:77:4d:61:6f:c8:1b:6a:ea:3c:57:fb:51:33:6f:
00:3d:1c:4d:17:cf:d7:86:38:c9:d0:a9:c5:a6:48:
16:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:11:8F:DF:4C:34:43:67:BE:33:2A:3C:25:BE:28:37:B3:8D:1A:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA16C100FC2911ECBE182B7DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.192.214.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:c5:54:15:bf:78:d8:0f:5a:c1:5a:be:2c:14:eb:ea:23:a9:
3b:90:91:6e:95:b0:04:74:45:60:e9:f1:9b:d1:88:6f:54:f9:
c8:92:27:05:36:5c:f2:48:5f:15:8c:52:57:78:e0:60:ed:7b:
db:c6:39:31:7e:20:62:c0:e0:38:c2:d7:cb:6e:0c:31:ae:2a:
ed:5c:6e:66:f2:5f:1a:a8:b4:db:df:6a:67:1d:3b:10:cf:f7:
65:b4:29:a0:87:cf:f1:b0:21:ea:35:62:67:fa:ea:4e:c7:52:
8b:99:08:bb:cf:ab:f7:a3:eb:b8:48:7b:fb:35:1e:53:a2:19:
50:ae:01:3d:2a:ac:c0:9a:ea:be:7a:89:5e:7c:85:b4:32:ad:
7e:c2:94:46:9a:88:fe:a8:58:da:69:94:cc:c0:10:5c:ee:2d:
b6:47:d9:5e:99:74:d3:23:20:06:01:66:a7:7f:13:9f:11:ca:
7d:fe:f0:4f:81:37:2a:21:41:21:6f:f8:20:04:4f:b1:c7:0b:
23:62:4c:43:dc:2e:04:2e:b2:58:e8:d2:5a:a7:21:48:a3:cc:
44:ac:3b:03:21:28:66:d1:eb:2b:d9:e9:e2:a9:bf:84:a5:3b:
a6:dd:c0:b8:69:92:5c:80:31:a6:cd:b1:33:cb:0c:78:85:4c:
22:01:f6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:12 2023 by rpki-client on console-fra.rpki-client.org