Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA95217E405E11ED82889BF8F1222468.roa
File: BA95217E405E11ED82889BF8F1222468.roa (raw, json)
Hash identifier: Tew7lS9Rh7vk1iwLYSzli2SvcHLon7ADGlRTdNA54tg=
Subject key identifier: DE:53:B0:5C:89:19:A1:9A:3B:E5:7F:16:FF:72:EB:7C:66:97:1B:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1934
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA95217E405E11ED82889BF8F1222468.roa
Signing time: Fri 30 Sep 2022 01:25:12 +0000
ROA not before: Fri 30 Sep 2022 01:25:09 +0000
ROA not after: Thu 05 Oct 2023 01:25:09 +0000
asID: 1239
IP address blocks: 154.194.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6452 (0x1934)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 01:25:09 2022 GMT
Not After : Oct 5 01:25:09 2023 GMT
Subject: CN=63364578-6337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:6d:a8:a5:f9:69:56:5e:bd:7b:4c:49:ff:
95:28:e3:33:9d:4f:16:47:3e:a2:06:7f:a2:5f:58:
0d:5e:4d:4b:4b:34:5a:fb:e2:2c:00:0d:71:93:bc:
0d:a9:ee:87:db:f3:25:e9:7e:33:bd:bd:36:89:ea:
bf:69:dd:c2:aa:2e:99:42:4b:82:6c:22:84:46:8c:
49:4b:79:2e:b0:ce:95:78:67:74:c8:d7:37:53:dd:
fc:49:12:64:a7:99:4e:04:7c:86:8c:13:08:47:58:
9e:8a:d8:63:81:23:cf:4d:96:23:a4:f6:39:34:e6:
43:48:4b:d9:71:ff:9c:02:af:3d:74:61:b2:4c:64:
17:67:0d:00:1e:7e:f8:66:a9:78:6d:73:68:a5:50:
d8:5b:1e:e5:ed:40:da:b8:6e:d2:fc:fb:49:49:65:
c4:fe:bb:38:c1:71:d2:fa:1a:37:9f:41:ba:d0:2c:
04:fd:33:86:db:5e:63:68:01:01:59:b1:ea:8e:82:
af:19:f7:75:4a:9c:f1:38:14:64:9b:13:15:fe:59:
39:7f:32:fc:dc:65:4b:49:1c:9a:2b:43:72:1a:29:
29:9e:29:27:c8:45:95:af:0c:5e:0f:41:91:7f:c2:
7e:ad:e0:4d:06:01:ec:10:5b:c5:5a:75:a2:c6:f2:
21:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:53:B0:5C:89:19:A1:9A:3B:E5:7F:16:FF:72:EB:7C:66:97:1B:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA95217E405E11ED82889BF8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.20.0/22
Signature Algorithm: sha256WithRSAEncryption
10:ec:82:54:0c:ff:ae:46:b4:14:ba:9c:a4:90:cb:5b:52:c2:
27:35:f2:58:75:d3:e6:8e:21:3e:3c:f3:5c:ae:45:8c:4a:50:
69:34:fe:41:b5:12:31:be:49:4d:8a:4a:87:aa:5c:da:3a:6d:
e0:da:d7:d8:c5:b9:6b:b1:de:cf:76:3e:2b:22:bd:02:b3:d7:
86:5e:0a:27:1b:08:32:1c:72:10:0f:59:46:5b:8f:9e:87:87:
f9:e9:87:d8:1a:75:33:77:0c:09:98:0a:e7:fb:0d:b7:7e:05:
f2:f7:2c:1d:17:17:a9:38:59:21:63:2d:02:5d:cd:47:f3:fe:
cc:9b:b4:a6:f9:1c:de:b5:06:a4:ff:7f:3b:45:9d:f5:01:71:
ea:cc:96:2b:21:cc:dd:db:9f:28:75:65:12:31:52:39:1a:34:
22:62:2a:ad:77:47:ac:4b:b0:9d:96:61:f8:cb:94:bc:a9:8b:
75:a6:b5:db:a9:8f:16:c3:de:c1:18:93:26:b1:31:3e:b0:56:
83:d2:b0:1a:11:f8:71:a1:3b:2e:b6:88:7f:f8:b6:16:f3:28:
64:3f:90:f0:e0:0a:fe:f6:01:73:2a:51:eb:c0:61:9a:e9:6b:
19:5f:9f:5d:b6:12:75:64:cc:1d:4f:de:1e:e5:d9:d0:a5:54:
b1:a2:5d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 01:29:46 2023 by rpki-client on console-fra.rpki-client.org