Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C76D87A8F93F11ECB18400B5F1222468.roa
File: C76D87A8F93F11ECB18400B5F1222468.roa (raw, json)
Hash identifier: jHimDhTHLlXbZNDE7hUWhjy+XnzxQz8EEKWGYvWKWyQ=
Subject key identifier: EF:23:E8:86:5D:63:92:3D:17:47:49:07:F6:0D:40:0B:14:2C:F7:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 171B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C76D87A8F93F11ECB18400B5F1222468.roa
Signing time: Fri 01 Jul 2022 13:14:47 +0000
ROA not before: Fri 01 Jul 2022 13:14:43 +0000
ROA not after: Wed 05 Jul 2023 13:14:43 +0000
asID: 146993
IP address blocks: 154.203.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5915 (0x171b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 1 13:14:43 2022 GMT
Not After : Jul 5 13:14:43 2023 GMT
Subject: CN=62bef346-cf27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:8f:70:bc:5c:49:59:2b:26:07:51:c7:5d:
07:b4:bf:1c:0b:98:e1:10:64:cf:b2:6e:25:98:45:
ca:62:f5:2e:b4:85:1c:94:17:a8:db:1c:88:08:13:
3e:a5:79:d2:40:4c:21:56:6d:5a:14:05:16:17:49:
54:f7:bd:ce:e5:7d:6f:16:a1:93:d8:97:23:a3:42:
c3:12:e0:42:de:5d:b0:09:26:bb:17:65:42:b0:16:
23:6d:30:da:dc:3f:68:90:7b:50:43:00:75:91:b7:
c0:7b:e0:97:5d:bf:bc:d4:47:84:e0:82:e9:37:31:
4a:ba:a3:22:a9:d1:c0:a0:bc:5a:75:fd:31:c8:b4:
23:03:69:a8:1b:6f:ba:93:ed:95:7d:a7:6b:72:93:
49:c4:ba:4d:56:74:58:8f:0f:84:68:aa:17:57:c6:
99:f7:13:4c:b2:6d:31:bd:ff:dc:86:4b:af:35:85:
b2:1e:91:56:b6:8b:f7:a4:26:d5:aa:2c:d0:e5:56:
cc:41:6b:ce:17:57:32:8e:61:03:72:88:c6:6e:7d:
f5:4f:37:2a:d2:34:53:cb:01:26:ab:df:19:a7:fa:
7c:fa:e8:3b:f9:29:c3:7e:ff:4c:5e:89:ed:1e:e5:
45:d6:79:ab:bb:e9:a9:d1:b1:36:47:d6:26:51:f1:
e3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:23:E8:86:5D:63:92:3D:17:47:49:07:F6:0D:40:0B:14:2C:F7:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C76D87A8F93F11ECB18400B5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.16.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:2c:11:3b:3e:80:c8:0f:cc:51:29:08:ce:13:86:c0:60:0a:
c0:d2:a5:c2:6d:37:da:fb:96:1a:4d:20:6d:6e:02:76:c8:c0:
46:c5:64:11:c3:7b:25:03:e4:c0:cf:78:8f:89:f1:4f:b9:31:
9f:6e:f9:6c:78:5d:e3:90:aa:07:1d:5e:cb:6d:ee:dc:bc:1c:
7c:65:c7:02:d7:bd:66:00:a4:6c:4e:11:90:1d:1e:e8:f8:ae:
36:f5:53:4f:7c:ed:c6:15:a3:41:c1:03:8d:5b:9c:7d:2d:d9:
28:6e:12:49:52:df:fc:31:29:c0:c1:ad:e4:3a:5c:85:85:5f:
38:c7:e4:93:ef:58:a4:18:0b:a3:b3:fa:f6:2c:fa:12:5b:de:
fc:c5:2b:ad:2e:ac:9f:48:3a:e8:c5:af:1c:c5:6c:e4:3b:aa:
6a:30:fc:27:c2:e5:42:eb:f7:fc:b9:8b:e8:a9:50:96:4c:59:
24:90:7a:95:d8:68:10:46:cc:1a:33:6c:de:50:e3:97:50:ab:
c3:c4:3e:ff:68:50:37:b7:f3:3b:47:48:c9:b5:5a:16:ab:37:
97:c0:22:fc:1f:bc:cc:67:78:c6:1e:8a:3d:99:9f:fd:3b:10:
0f:dc:c8:12:f3:f6:1a:9d:5b:8f:5d:6e:e8:04:cd:d3:4d:99:
9e:2c:7f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-fra.rpki-client.org