Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD23AF6C3B0911EDBEC7E49CF1222468.roa
File: DD23AF6C3B0911EDBEC7E49CF1222468.roa (raw, json)
Hash identifier: Xhq2/RC9+kh/GJNFCtZ+H+ffic4VV1sT4kK/DRWEzmE=
Subject key identifier: 1F:51:FC:72:70:65:4E:E4:C7:AD:BA:57:8D:F4:48:8D:B3:3D:B2:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1903
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD23AF6C3B0911EDBEC7E49CF1222468.roa
Signing time: Fri 23 Sep 2022 06:35:07 +0000
ROA not before: Fri 23 Sep 2022 06:35:03 +0000
ROA not after: Fri 30 Dec 2022 06:35:03 +0000
asID: 328608
IP address blocks: 154.85.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6403 (0x1903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 23 06:35:03 2022 GMT
Not After : Dec 30 06:35:03 2022 GMT
Subject: CN=632d539b-b126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:10:94:8b:ec:05:1e:e2:2e:f2:49:93:58:91:
31:40:29:71:bb:13:b5:81:82:fe:2b:39:f9:c4:83:
15:c0:b6:98:fc:d3:8a:5e:22:eb:44:20:99:6a:48:
09:6c:29:f4:fa:22:bb:f3:d1:33:d7:54:8e:3a:41:
58:df:e4:8d:b1:6f:df:5d:bb:88:7c:1a:6e:c4:57:
2f:fd:84:11:0d:be:8e:0e:2f:32:7e:d8:82:b5:e0:
3c:6b:3c:7b:b7:2e:a6:66:a7:f0:9a:84:3a:bc:ae:
81:7d:3e:1d:30:56:68:e0:44:f2:9a:f8:fe:c6:63:
3a:a4:07:2e:63:ab:dc:1c:ca:15:59:b1:77:83:eb:
8e:d3:65:d9:76:12:d3:81:eb:d3:7c:95:f6:f9:70:
70:28:f4:37:8f:c2:a4:7d:51:41:5f:51:f2:4c:3d:
32:88:19:33:e3:a6:24:0d:4f:3b:76:09:e2:55:11:
8a:aa:d9:76:75:42:1c:fc:f6:95:e3:0a:cd:fc:37:
23:a8:63:16:1d:de:4f:14:c5:ae:6b:9f:9e:78:ab:
b0:84:20:65:78:46:66:06:b5:bd:47:1f:65:ce:30:
0d:f4:04:61:0f:19:0d:00:90:a1:9a:fc:ab:4a:02:
0d:e6:7e:5e:e1:16:34:bc:20:a6:d1:3b:e2:34:81:
3e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:51:FC:72:70:65:4E:E4:C7:AD:BA:57:8D:F4:48:8D:B3:3D:B2:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD23AF6C3B0911EDBEC7E49CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.64.0/19
Signature Algorithm: sha256WithRSAEncryption
36:e0:c2:7b:23:08:7c:bf:30:af:ad:8b:81:4a:96:39:0e:f7:
de:d9:85:f4:35:1a:1f:d7:90:7a:cb:ff:c2:ae:21:6f:1f:4a:
6f:eb:76:17:05:9f:47:91:51:e8:54:2e:2b:18:9d:fb:6c:24:
b5:9a:96:43:31:08:0e:9d:38:43:1a:ca:a4:c6:c8:5f:2b:95:
46:24:3e:74:6e:ca:38:bb:70:0d:c2:3d:8b:fc:3d:df:6b:9c:
b6:47:30:fb:66:f3:66:7d:ad:91:94:d4:fa:a5:5f:49:3b:81:
02:b1:5f:93:8c:1b:98:09:09:98:be:6a:c4:4a:f2:9e:43:90:
2a:da:9a:ea:9e:ad:fe:05:58:6c:32:6f:8d:d7:e0:7b:1b:5e:
58:42:bc:06:70:d6:dc:99:1a:58:35:b0:d3:80:f8:5b:36:21:
bb:2d:48:e1:39:e0:30:d0:5d:6a:39:a4:7f:4b:de:26:93:e9:
76:04:d8:90:88:98:21:5b:ba:e1:d9:99:39:6b:88:0c:7a:26:
3c:c8:67:a4:a8:2c:12:f4:c3:63:83:61:fa:f5:c2:ee:d5:b8:
a9:43:5c:50:3a:4f:82:03:c7:da:b6:21:a1:ca:e5:46:d1:bf:
dc:81:92:9b:f6:36:eb:f4:13:45:d2:c4:2a:f7:34:1a:b0:b7:
84:19:6a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-fra.rpki-client.org