Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFD498BC17C711ED8693BABEF1222468.roa
File: DFD498BC17C711ED8693BABEF1222468.roa (raw, json)
Hash identifier: WmBNXQfXHczvWlGpRuEDm5PpmLUjRhthjxeXGLsk31I=
Subject key identifier: 60:E1:E9:49:DC:55:DD:F9:F4:51:01:74:61:8C:74:A6:AA:53:77:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 183C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFD498BC17C711ED8693BABEF1222468.roa
Signing time: Tue 09 Aug 2022 09:44:34 +0000
ROA not before: Sun 14 Aug 2022 09:44:30 +0000
ROA not after: Sun 25 Jun 2023 09:44:30 +0000
asID: 3356
IP address blocks: 154.93.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6204 (0x183c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 14 09:44:30 2022 GMT
Not After : Jun 25 09:44:30 2023 GMT
Subject: CN=62f22c82-715e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4d:80:d7:af:6a:63:f3:6d:e9:c2:30:ab:ca:
e8:83:02:a6:6c:dd:16:a9:f4:54:cf:55:dd:c3:da:
af:4c:00:bf:f5:b7:84:62:87:aa:ec:89:4f:01:37:
f8:cc:37:a1:5e:d3:97:d9:17:74:01:41:50:dd:11:
92:a3:ac:8e:64:15:b8:d8:01:18:ba:f8:14:36:4b:
96:3f:62:66:29:cf:f1:9c:63:dc:1a:c2:96:ac:f3:
76:88:1d:c7:fb:74:1b:f0:f9:c1:7c:c6:01:eb:17:
5c:58:73:57:eb:c3:a9:cc:c7:f2:ec:0c:38:ad:6c:
40:97:80:67:f3:f2:3c:a1:10:10:83:53:4f:bd:94:
70:83:a6:57:6f:31:10:0f:a7:2b:7c:6e:0c:26:1e:
98:e9:28:89:b7:60:b5:c8:fe:85:86:4a:a8:40:e4:
02:cb:01:44:c6:aa:39:a4:e2:b8:2d:af:cb:bb:1b:
b0:52:73:0d:79:7d:db:2b:f4:fd:a7:85:df:fc:ee:
14:c6:59:1b:42:10:b3:11:8c:73:3f:28:33:c8:a9:
bc:15:ac:3c:89:34:5a:c4:19:0a:0d:78:fe:ad:b1:
80:ca:b9:9f:60:ff:f8:76:65:93:f3:65:df:21:92:
44:05:64:68:9b:23:66:ec:46:c9:43:bc:85:10:5c:
1c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E1:E9:49:DC:55:DD:F9:F4:51:01:74:61:8C:74:A6:AA:53:77:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFD498BC17C711ED8693BABEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.28.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:f4:7b:3f:33:a9:38:4e:f7:5e:02:ae:fa:10:9b:7c:13:b4:
25:9a:61:76:09:52:fc:e7:df:8f:2f:26:fe:23:54:c0:a9:91:
08:00:d2:9f:ea:30:56:d8:28:9b:25:db:75:0d:f3:7d:c4:6d:
cd:a6:51:03:5a:5d:32:ee:ef:70:f2:38:f2:34:77:08:4b:4a:
3a:71:4d:cd:b8:34:b5:d8:6d:83:aa:de:03:3d:d3:58:08:fe:
7c:94:24:23:7f:d6:e2:4a:56:8b:21:25:9e:53:c7:82:91:7a:
94:59:b7:02:27:5b:51:ed:2a:d9:23:6f:0e:95:b4:70:33:32:
86:7f:58:91:59:eb:08:e4:0b:a1:09:23:79:b4:08:b9:fe:33:
28:32:a6:4e:c2:ab:63:b0:ed:cc:6f:8b:ed:be:06:4a:3b:90:
b6:c5:64:b0:6d:58:9f:38:4c:51:55:a2:07:98:c5:98:e0:2f:
93:8a:39:aa:cd:cc:9e:1b:14:66:10:20:c5:90:43:a2:66:50:
7c:1d:6f:1d:db:87:e3:6d:83:11:1e:a6:6e:c0:4a:a8:cd:4a:
02:b7:13:3b:c4:f3:a6:4d:c7:84:fd:60:6d:22:f9:df:ae:0d:
20:00:11:3b:59:95:91:aa:ff:dc:2d:64:25:d8:da:73:dc:af:
ec:c3:4f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-fra.rpki-client.org