Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6A33F3A3D7811ED94477F9BF1222468.roa
File: B6A33F3A3D7811ED94477F9BF1222468.roa (raw, json)
Hash identifier: PXiGdYmIsrGFp4l0ZwHp+o1uSTqVwraKGElBH1Rcnlc=
Subject key identifier: A1:9D:8B:D4:31:4D:57:A3:DC:03:0A:00:19:C6:47:D2:87:F1:E6:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1924
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6A33F3A3D7811ED94477F9BF1222468.roa
Signing time: Mon 26 Sep 2022 08:53:39 +0000
ROA not before: Mon 26 Sep 2022 08:53:35 +0000
ROA not after: Fri 30 Dec 2022 08:53:35 +0000
asID: 35916
IP address blocks: 154.95.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6436 (0x1924)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 26 08:53:35 2022 GMT
Not After : Dec 30 08:53:35 2022 GMT
Subject: CN=63316893-73ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:93:95:69:eb:b2:67:92:52:e3:82:4a:d7:69:
88:8f:ef:bf:92:48:13:83:24:27:fb:b5:dc:e3:8d:
db:64:b3:9f:39:a1:0b:54:bc:5b:5c:e3:d6:e6:12:
2f:ca:fd:ca:9c:17:23:b8:8e:50:92:0f:4d:c1:aa:
ce:bc:e2:0e:aa:25:72:dc:c4:e3:2b:76:e8:f0:72:
04:d0:81:34:a6:37:fb:11:d0:a7:b7:81:9b:2b:c9:
5e:5c:cc:c1:d6:98:44:b7:2e:b9:a6:44:6c:25:51:
ee:62:03:f1:10:c6:64:a4:66:5b:f0:f7:7b:1a:67:
e9:85:b0:60:60:0f:68:16:c7:c5:11:8c:6e:71:e5:
65:33:38:47:8c:1c:c9:11:20:1b:7c:23:d1:bf:6f:
74:0e:43:2b:f5:f9:ee:1b:70:8d:db:54:3d:8a:57:
b7:51:03:d6:38:de:b8:31:d7:5c:28:83:b0:18:ef:
d1:47:e5:f1:04:4b:7a:4b:59:58:19:1b:d0:93:de:
c3:bf:b4:49:dc:6e:29:57:a0:ea:10:3c:a6:71:97:
b1:b8:2a:b9:78:6b:6a:a9:fb:08:fd:fd:fe:19:5a:
1f:c2:5e:53:8e:91:48:7e:38:0c:93:0b:b7:49:ed:
4f:74:40:36:7e:a5:4a:da:e7:06:12:b7:7a:dc:a6:
0f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9D:8B:D4:31:4D:57:A3:DC:03:0A:00:19:C6:47:D2:87:F1:E6:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6A33F3A3D7811ED94477F9BF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.8.0/21
Signature Algorithm: sha256WithRSAEncryption
ce:07:a5:f2:03:f7:da:3e:28:3f:44:55:4f:70:ae:c8:bc:45:
27:fb:6a:d2:74:1a:cb:98:54:60:22:f6:d8:af:7b:a5:5f:8f:
df:b2:12:9c:8b:9d:95:51:d1:78:c2:a0:a2:19:3c:98:ee:76:
4d:7e:86:66:55:5d:82:5c:f1:b2:6f:a2:40:12:7a:8b:ae:56:
64:fc:0d:41:53:65:54:99:a7:bc:6d:95:6a:1b:b7:53:14:0a:
0e:64:bb:2f:40:c8:00:f5:a0:8a:3f:06:ae:12:a8:a2:e6:cc:
7b:81:b2:02:6f:a1:68:43:ab:99:05:e9:a9:f3:31:65:92:25:
85:1f:9f:29:a7:16:c9:78:36:3e:a1:51:e3:bd:b3:5e:7b:cf:
16:d9:d5:fc:90:93:a2:65:ee:01:27:dc:9f:fc:e7:4a:a3:32:
25:db:5d:d6:f3:fb:e6:8e:75:34:98:a9:ee:b5:b5:2f:a0:31:
b5:6a:eb:aa:38:7f:9f:45:e9:e2:71:6a:06:b3:d2:3b:28:d1:
b8:cd:b4:58:2a:38:b2:02:48:60:c2:e8:c7:34:0e:e8:2f:a6:
cc:24:04:77:c6:9f:47:0e:c0:e3:a8:49:25:56:30:b9:1c:d8:
45:51:e9:68:fe:72:93:96:bd:4e:2c:f5:65:e4:20:48:b1:c7:
69:36:2b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-ams.rpki-client.org