Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA87E5EE0D8C11EDBEB920B7F1222468.roa
File: CA87E5EE0D8C11EDBEB920B7F1222468.roa (raw, json)
Hash identifier: 0KAGjcuM7mQXsbD7EVG9gRUiNR6hLjmITqfkGTEnJvQ=
Subject key identifier: FB:E3:30:8C:3C:FA:4B:C7:8A:49:81:68:20:2D:DB:46:13:F8:58:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1795
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA87E5EE0D8C11EDBEB920B7F1222468.roa
Signing time: Wed 27 Jul 2022 09:16:26 +0000
ROA not before: Wed 27 Jul 2022 09:16:23 +0000
ROA not after: Fri 30 Jun 2023 09:16:23 +0000
asID: 136907
IP address blocks: 154.83.0.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6037 (0x1795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 27 09:16:23 2022 GMT
Not After : Jun 30 09:16:23 2023 GMT
Subject: CN=62e1026a-e8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c4:93:7e:28:b4:9a:cd:8c:4e:03:a6:b9:a3:
82:02:ed:d2:5a:e2:6d:c6:3e:6a:6c:6b:4f:cd:e3:
6f:c4:33:d7:88:6a:a9:70:2c:03:45:a2:7d:d3:df:
34:a3:ef:12:85:ee:7a:b9:73:99:b7:d4:bd:d3:b6:
4d:25:6c:d8:e4:ac:d3:22:4f:4d:e3:92:3b:b5:ec:
18:df:ec:c8:40:91:77:fa:06:d5:15:7a:9e:c6:05:
42:2c:e8:05:50:83:82:87:7e:5e:a3:d7:13:2a:aa:
1e:ae:94:19:d6:e9:ce:c4:22:e1:c3:d1:c5:bf:82:
ea:29:13:82:55:e8:07:d2:a7:88:1f:4c:c6:6f:f2:
63:33:95:a7:ab:a1:0f:30:65:af:c7:d6:eb:92:7f:
35:57:1f:4a:ad:cb:2a:64:bd:aa:90:43:e8:9c:91:
ba:5c:7d:e8:27:1a:f0:ea:c9:9d:bd:e1:79:a9:21:
2e:35:95:34:d4:d1:0c:62:65:ab:69:93:d2:7d:64:
8f:b5:bc:e3:cd:bb:96:1c:94:12:59:2e:40:f0:cd:
91:fd:d2:6e:52:cf:af:9b:77:62:b7:ac:3f:bb:97:
61:dc:a6:87:40:7a:bd:69:13:2c:75:18:3f:8e:44:
c4:68:53:bd:91:51:0d:12:37:f6:ba:ca:53:18:21:
24:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E3:30:8C:3C:FA:4B:C7:8A:49:81:68:20:2D:DB:46:13:F8:58:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA87E5EE0D8C11EDBEB920B7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.0.0/23
Signature Algorithm: sha256WithRSAEncryption
71:b7:0e:d6:eb:08:51:5c:93:7c:4e:9a:98:9b:4c:14:1d:25:
b9:12:4f:6d:cb:7e:13:f7:29:60:77:c2:cf:a5:b9:b8:f8:c4:
19:cf:e1:11:ec:03:da:cb:98:cd:5c:dd:53:43:2a:78:8e:13:
eb:23:6b:5b:8f:98:fd:88:27:5b:04:1b:3c:ba:f8:f0:46:27:
fc:0f:26:a4:02:2f:30:77:85:11:5d:cb:8b:a9:bf:8b:18:ae:
c2:69:88:6a:0e:f4:a1:a6:5c:89:3c:49:d3:a5:26:b4:25:dc:
f3:62:2b:22:8f:8f:63:dc:16:3f:2a:73:df:90:1b:96:88:e4:
5f:57:67:ce:83:19:62:f2:3a:e3:9f:48:53:f1:17:fd:8f:60:
8d:9c:b1:22:dc:cb:7c:7a:87:77:60:13:58:44:96:10:a4:e6:
53:63:6e:48:a4:f7:b2:ff:ca:08:a6:9a:06:d1:df:c0:04:10:
f5:f4:48:94:a0:32:b4:99:ae:ff:87:bf:c9:3f:5b:9a:99:1b:
6e:21:e7:57:82:a9:12:55:4d:f3:b7:31:3a:39:54:91:11:90:
80:1d:97:d2:d9:9b:11:c5:b5:1f:21:74:5f:10:03:3c:68:d1:
e2:75:fc:dc:a0:50:e3:31:4d:aa:1f:60:dc:21:c9:2b:29:ac:
ba:d7:e4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-ams.rpki-client.org