Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF312B7001B611ED85619498F1222468.roa
File: AF312B7001B611ED85619498F1222468.roa (raw, json)
Hash identifier: wjQyL/KG3SdsOKcDoJ2X7yw9Q9bPkbLfYcK5CvSTKd0=
Subject key identifier: 9A:2A:9C:6E:C8:80:0B:CF:04:35:E9:24:81:96:B4:31:B8:46:2E:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1750
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF312B7001B611ED85619498F1222468.roa
Signing time: Tue 12 Jul 2022 07:46:05 +0000
ROA not before: Tue 12 Jul 2022 07:46:02 +0000
ROA not after: Tue 11 Jul 2023 07:46:02 +0000
asID: 138630
IP address blocks: 154.212.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5968 (0x1750)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 07:46:02 2022 GMT
Not After : Jul 11 07:46:02 2023 GMT
Subject: CN=62cd26bd-2380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:7d:0c:ce:bf:52:3f:6e:46:56:1e:a7:aa:
ba:fa:c5:cd:a9:53:3c:c5:ac:f3:72:25:12:92:74:
35:80:49:aa:6d:06:4f:e5:73:ed:dd:35:24:0c:b6:
22:db:76:73:cc:ef:ae:19:96:f1:50:7a:82:80:1d:
28:ee:e0:63:79:b0:bf:ab:71:2f:2d:0d:76:e4:c6:
28:35:82:67:20:70:cd:b8:2c:d6:1b:a9:dc:5b:1c:
e6:af:e5:50:7e:ed:87:34:82:8e:94:ed:92:8f:c5:
77:ef:60:99:e0:7e:37:62:20:53:97:c0:5d:aa:a1:
79:84:b7:55:fa:ff:7e:cb:f1:9c:12:3b:a4:48:16:
b1:3f:1f:0a:c6:01:ce:d1:1c:30:7e:04:11:80:a4:
4c:bd:53:25:97:54:5e:f6:80:01:01:57:43:c6:7d:
36:36:dd:d8:5f:95:65:8b:77:bb:e2:96:04:f5:96:
50:76:be:21:4d:c6:9b:ce:6d:41:5e:1a:55:aa:df:
0e:12:4e:fb:8a:60:77:cd:7f:d6:97:1f:79:28:94:
5d:21:cb:16:b6:2b:fa:2f:c6:40:cd:8c:59:31:95:
5b:55:ce:08:bd:59:17:82:b8:9b:e5:ab:3f:2c:37:
6c:d0:fe:5a:9a:9f:31:e3:44:87:e2:bf:61:dd:02:
0f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2A:9C:6E:C8:80:0B:CF:04:35:E9:24:81:96:B4:31:B8:46:2E:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF312B7001B611ED85619498F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.151.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:19:b6:28:57:bc:dd:5e:e6:06:91:05:6f:10:25:f8:0b:6e:
56:9a:ec:ed:47:40:09:5c:50:b9:87:75:e8:96:2d:59:62:ce:
32:d9:cb:43:1a:4b:28:e5:c0:e9:54:4e:d8:4a:28:39:84:71:
38:f9:5d:f1:52:60:7e:ce:74:43:a0:30:b1:2a:8a:5a:a1:23:
d3:1c:d7:dc:7b:57:e1:a4:e3:d1:f2:98:a3:2d:7a:4d:81:7a:
52:27:04:50:28:a3:1a:44:a5:6e:bf:6d:0e:7c:0e:09:9d:43:
d8:7e:27:a2:ac:d2:aa:42:92:04:bb:c6:a0:43:2e:82:86:2c:
5b:55:1d:e8:c3:40:44:08:98:37:8b:20:4e:2f:5b:9c:c6:67:
cb:8d:36:2f:d1:a6:f3:33:1c:b0:cd:c2:70:e9:4e:2d:7c:88:
6e:27:20:76:99:e3:b1:9a:ca:9c:1d:31:ba:7e:b7:00:2c:cd:
a1:ea:fd:66:3f:b1:3c:a4:6b:a6:e8:4a:d6:af:7b:df:fc:29:
dc:04:0f:f7:fb:59:65:7a:a0:65:6d:57:5c:61:ba:01:fc:c4:
de:6d:dc:d8:41:ac:69:3b:d5:ea:04:4c:29:66:ca:05:bf:d2:
3b:a2:68:40:d5:15:20:1a:d1:73:e2:89:92:d9:eb:2e:1b:71:
87:4f:5b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-ams.rpki-client.org