Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B117002CC20F11EC997A2CE7F1222468.roa
File: B117002CC20F11EC997A2CE7F1222468.roa (raw, json)
Hash identifier: 3uUsnEDGNNbtCSL6G/O2YjFl1+q7nzxy3LFNA0kGRhI=
Subject key identifier: 9B:FA:2E:2B:3E:8F:35:9D:FD:A5:FB:E2:F0:B3:99:6C:D9:F8:41:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 15F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B117002CC20F11EC997A2CE7F1222468.roa
Signing time: Fri 22 Apr 2022 07:41:59 +0000
ROA not before: Fri 22 Apr 2022 07:41:56 +0000
ROA not after: Fri 30 Dec 2022 07:41:56 +0000
asID: 328608
IP address blocks: 154.85.14.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5619 (0x15f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 07:41:56 2022 GMT
Not After : Dec 30 07:41:56 2022 GMT
Subject: CN=62625c47-0f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:08:be:bf:c2:b7:37:4a:87:b8:47:0e:2c:4d:
e0:10:71:19:9a:2d:99:73:09:c3:5a:46:1a:1a:80:
a9:fe:43:ca:22:78:8b:61:12:47:49:18:e9:e3:65:
fa:ec:97:33:60:dc:c3:9a:d2:95:c1:fe:6e:12:a6:
e5:e0:6e:ef:31:03:c4:4f:fa:3f:a6:e9:b9:82:10:
b1:89:62:44:81:02:50:2c:d8:a5:3b:99:49:cf:1b:
84:cf:62:ba:f0:02:96:54:8a:5e:f1:18:c7:bb:37:
cd:e3:e2:cc:de:34:70:30:cf:48:01:ba:38:07:1f:
ec:42:94:53:a0:1d:3d:6c:13:5e:68:68:d3:7c:50:
06:4e:33:bc:3a:c4:57:5e:54:d8:07:92:5f:b6:f5:
d7:51:93:0e:85:a7:52:b1:ca:f1:c1:05:be:4c:bb:
a9:71:ba:a3:9d:04:3f:8c:fb:55:91:6c:9f:b7:01:
3b:ab:30:9c:0e:3a:34:5b:80:1e:7e:92:9b:da:a4:
44:6a:e7:9f:9a:d4:c5:60:a1:d9:b9:76:c6:52:02:
45:93:0c:5b:23:4a:dd:50:76:9a:3a:7c:4d:df:da:
80:4f:e3:87:08:ca:20:95:d9:7e:8d:85:61:02:fd:
b7:6d:70:9b:b5:fe:37:89:8b:4b:67:1a:53:6e:1c:
07:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FA:2E:2B:3E:8F:35:9D:FD:A5:FB:E2:F0:B3:99:6C:D9:F8:41:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B117002CC20F11EC997A2CE7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.14.0/23
Signature Algorithm: sha256WithRSAEncryption
49:25:9e:26:92:4c:68:b1:00:0a:2d:44:cf:2b:b5:82:6c:5a:
62:42:5b:d8:00:9a:72:63:8f:05:c0:9d:5b:dd:03:85:fb:1d:
36:94:ed:39:66:24:24:51:a6:c0:06:1d:09:71:f1:51:b6:6b:
4a:8c:78:f6:83:bf:df:69:7d:cb:e0:fb:f4:e9:2e:f2:44:a9:
62:6f:1e:a5:e6:7e:a6:42:95:80:33:48:73:07:62:e5:0a:06:
e8:5b:d6:64:30:12:fa:03:f8:d9:de:d8:2a:fd:31:eb:7c:3a:
2a:b2:81:48:d0:8f:44:23:b4:99:90:c8:d7:67:7d:7b:de:ad:
d2:a2:e8:2a:84:33:db:db:db:49:9a:eb:1c:c5:0a:bd:7d:3f:
71:04:dd:b2:3d:6a:bb:48:4f:47:4c:a1:0f:21:cd:cd:6b:2c:
c8:78:1c:df:12:ff:6d:bd:a9:66:43:73:57:45:71:ad:19:1c:
56:60:cf:10:5b:13:c5:90:1b:57:3c:ad:99:d4:71:2d:4b:98:
75:30:bf:ea:73:c9:84:f1:12:ce:f2:6d:ca:8f:b4:07:58:d3:
fb:90:cb:97:b2:6e:c5:6a:a4:58:d6:fe:b0:43:e6:51:d7:0d:
1b:31:5c:b2:5c:55:3b:0e:b6:68:29:67:4c:d5:4b:38:76:28:
f8:2c:9c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-ams.rpki-client.org