Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7BC76122A9E11ED980C47E8F1222468.roa
File: B7BC76122A9E11ED980C47E8F1222468.roa (raw, json)
Hash identifier: sS3a0nNQeKpwLF86eJeQaQlxSH/RUwNiZgoPfB6vY7M=
Subject key identifier: B5:38:B9:4A:6F:C6:CB:B1:AE:9C:76:E0:E2:33:61:4B:FC:19:CC:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1884
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7BC76122A9E11ED980C47E8F1222468.roa
Signing time: Fri 02 Sep 2022 09:07:49 +0000
ROA not before: Fri 02 Sep 2022 09:07:46 +0000
ROA not after: Sat 15 Jul 2023 09:07:46 +0000
asID: 136950
IP address blocks: 154.91.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6276 (0x1884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 2 09:07:46 2022 GMT
Not After : Jul 15 09:07:46 2023 GMT
Subject: CN=6311c7e5-fb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b6:d7:9c:57:32:12:53:df:a6:96:60:e4:73:
b2:4e:bb:60:a2:33:2e:bc:02:74:e7:1a:ce:fa:70:
9f:24:70:64:2f:9c:bb:fe:50:cd:da:62:69:2d:e8:
9d:18:bb:b1:57:00:ba:c2:63:65:24:1f:44:6c:6d:
4f:17:18:cd:66:f0:b4:92:cd:7c:ba:00:8f:6f:92:
09:e2:a5:8a:2a:34:20:3d:e2:35:32:48:7a:41:d9:
ab:5c:60:ca:77:7b:14:c3:23:dc:0a:5d:fa:4d:b7:
c8:5c:fe:0c:d2:84:4b:1d:94:f9:fc:20:47:bf:a4:
e7:33:af:0a:01:1d:97:f4:36:07:1d:41:02:4c:e5:
fd:de:cd:b6:b9:90:e3:a4:58:f7:84:cf:25:cd:97:
eb:da:79:3c:14:c5:79:33:ab:28:a8:1a:92:cd:87:
e5:07:f0:c3:91:4e:13:e9:94:a7:80:c6:55:a9:ef:
34:55:08:2f:e1:5e:fa:00:49:33:d2:be:ef:ba:43:
4d:12:57:4e:83:f9:72:b1:67:68:1e:ea:00:e9:2b:
14:3b:c2:01:b7:f5:f2:06:e1:d7:87:8e:22:ce:16:
86:f0:2a:7f:af:df:3a:ee:1a:2b:04:ae:dc:d0:bd:
4b:64:67:9a:57:3c:de:00:95:0b:f9:db:79:81:78:
fd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:38:B9:4A:6F:C6:CB:B1:AE:9C:76:E0:E2:33:61:4B:FC:19:CC:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7BC76122A9E11ED980C47E8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.195.0/24
Signature Algorithm: sha256WithRSAEncryption
07:70:f7:54:15:be:9f:09:58:ad:78:b9:ad:e0:94:3b:0d:b7:
a3:ab:34:21:6c:aa:80:5f:e8:10:95:10:99:e7:eb:fd:b4:34:
62:ba:6c:ab:c9:cf:60:25:a0:1e:0f:1b:1f:97:97:08:9c:a5:
b4:87:dc:2c:f2:99:0b:b5:e2:1a:43:93:22:2b:a3:20:f6:9b:
91:0a:54:0e:2a:9d:ef:43:1f:ab:ce:44:d2:d8:fa:a4:8c:89:
10:d4:73:b7:6f:cb:9e:fd:a4:71:9e:e7:56:d9:74:54:52:a5:
29:6e:be:b2:eb:3a:99:64:e1:f6:de:48:07:61:5b:9b:70:a1:
7d:75:e1:90:99:c1:53:62:b5:a5:10:dd:31:7d:d0:15:b0:e9:
c4:ad:a6:9b:4d:49:cd:fd:d7:dc:78:ec:97:cd:73:07:ee:47:
20:3d:27:b7:fe:99:8d:bc:e8:51:10:75:f1:2e:bd:09:5c:40:
74:46:d1:38:11:d5:25:ac:8d:32:c5:8c:0f:61:50:0b:b6:03:
2c:80:1e:36:f2:2d:27:75:fb:54:34:67:2a:bb:2c:ea:ff:1e:
e5:89:0e:b6:4d:ac:c5:a9:df:e7:0a:3b:29:7d:82:94:75:cb:
b4:b2:d0:5f:82:5b:d7:fe:e7:88:5d:fe:a2:9e:ac:08:fd:11:
70:39:80:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-ams.rpki-client.org