Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD20F4800E5011ED9D5800A7F1222468.roa
File: BD20F4800E5011ED9D5800A7F1222468.roa (raw, json)
Hash identifier: NswYgSRmwUcXHeD3xiJ4ZNFI9DOyhLkHMACwXzKQHhY=
Subject key identifier: BC:56:E3:67:50:2C:BB:3F:3E:58:5A:DF:E8:34:AA:69:62:80:B4:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 17A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD20F4800E5011ED9D5800A7F1222468.roa
Signing time: Thu 28 Jul 2022 08:39:05 +0000
ROA not before: Thu 28 Jul 2022 08:39:02 +0000
ROA not after: Mon 15 May 2023 08:39:02 +0000
asID: 397630
IP address blocks: 154.201.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6056 (0x17a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 28 08:39:02 2022 GMT
Not After : May 15 08:39:02 2023 GMT
Subject: CN=62e24b29-c5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:be:2e:99:cd:66:20:3a:52:e5:c4:b1:46:53:
97:93:4e:26:85:46:51:04:39:59:93:2a:98:7a:5c:
b2:df:cf:a6:12:02:43:22:b2:f0:5f:4a:8b:54:dd:
7c:30:ef:86:39:f7:04:df:c7:0b:9e:e5:fc:85:13:
ee:e5:d9:89:10:0a:40:47:aa:f0:41:0e:27:3e:0c:
f3:4e:f5:ee:da:a9:06:2c:c0:6d:81:72:f9:44:2d:
02:fa:24:3e:74:0a:43:a1:e7:0c:d1:f6:3e:d3:29:
62:eb:95:5c:ee:ee:20:eb:40:f9:7f:e6:59:9c:51:
7a:15:b2:66:11:86:3e:a0:24:4c:4f:b6:3d:13:58:
91:bf:33:4f:78:c1:a6:a5:26:64:95:89:20:87:dc:
49:62:87:79:df:63:53:8a:c7:2c:ac:97:9b:da:e3:
93:4f:a2:82:83:02:33:4c:41:83:76:aa:60:a2:8f:
59:0e:4b:da:63:3e:0c:cd:d5:9c:7f:41:cd:18:8b:
7d:b9:48:50:ae:db:74:e4:24:3d:c3:22:89:e4:58:
47:0c:31:e7:06:47:f8:6f:5d:6b:c7:80:8b:f6:3e:
a4:5f:5e:70:0a:a9:ec:84:b6:c3:54:40:24:5e:3d:
55:56:8a:6b:41:94:6f:2d:3c:48:af:e9:db:cd:a7:
74:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:56:E3:67:50:2C:BB:3F:3E:58:5A:DF:E8:34:AA:69:62:80:B4:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD20F4800E5011ED9D5800A7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.40.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a7:f6:ea:15:18:c9:0c:4a:18:a5:f4:72:fa:09:68:eb:02:
5d:37:62:d8:95:6f:a0:8b:c7:cf:32:28:fc:56:2d:3d:b9:60:
33:2b:83:16:7f:23:56:bb:9e:56:c6:fe:d9:05:4e:78:36:a5:
b2:e0:e7:59:60:27:f6:2f:0f:8b:a5:51:93:5e:ed:7b:d5:7a:
17:aa:dc:85:46:d7:cd:7f:ba:c3:4f:1b:f6:a0:07:b9:c8:12:
5a:9a:42:d6:0d:92:4a:73:7f:89:b3:b0:0a:65:9a:5f:72:62:
23:f0:20:b5:e7:43:96:35:2f:04:de:d5:17:25:55:f0:2b:37:
96:fa:c1:5d:ab:e2:8c:a4:9c:bd:74:46:38:69:b7:40:bc:09:
ce:3c:66:5c:61:51:c6:e8:82:1b:ba:16:6a:44:bb:84:c0:3a:
56:24:22:4f:93:b5:f6:97:f8:e1:83:2a:74:92:b9:3d:0a:1d:
4d:4f:a6:c1:d4:8b:c9:53:6b:cf:06:a8:0f:a7:24:53:22:11:
2d:2e:ce:ee:cf:b0:03:95:1c:9d:56:fe:94:e2:0e:5b:56:76:
81:02:71:61:27:20:7f:eb:3b:23:6f:c4:80:3b:65:48:8e:a2:
d8:e2:7c:21:b9:a6:bd:4e:b2:4a:2e:98:c2:a5:a9:6b:15:43:
f3:b9:4a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-ams.rpki-client.org