Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9236F565BB611EC96DF88C45A40D577.roa
File: E9236F565BB611EC96DF88C45A40D577.roa (raw, json)
Hash identifier: OxoR/pOUI0C+GNd909WmIZ3/y6Ce1nVq8uYGWgCz94M=
Subject key identifier: E2:2A:79:58:BC:CE:A9:17:C0:52:C3:71:82:87:71:BA:C0:B2:9E:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 13BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9236F565BB611EC96DF88C45A40D577.roa
Signing time: Mon 13 Dec 2021 01:49:30 +0000
ROA not before: Mon 13 Dec 2021 01:49:26 +0000
ROA not after: Fri 30 Dec 2022 01:49:26 +0000
asID: 133201
IP address blocks: 154.204.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5051 (0x13bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 13 01:49:26 2021 GMT
Not After : Dec 30 01:49:26 2022 GMT
Subject: CN=61b6a6a9-95df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:23:fc:66:f2:61:06:f3:b8:d9:11:9a:a5:65:
f7:70:56:d4:65:2b:38:f5:9f:45:76:db:f8:58:ef:
fc:ca:c9:85:74:ae:01:2c:c8:0e:73:b6:e9:90:43:
12:52:75:1e:74:60:d3:b2:8e:78:d1:2f:0c:5b:b3:
c5:73:06:65:fe:1a:46:09:4b:93:df:20:43:f5:33:
12:92:8f:00:4b:77:d5:1f:09:64:1d:1d:b4:02:5f:
1b:8a:e5:14:20:fe:73:7c:99:eb:29:8c:48:fa:b4:
94:c9:8b:c6:16:7a:9e:33:12:94:b3:db:bd:80:07:
a3:d4:d7:2a:d3:62:9a:c7:2e:20:de:56:49:9e:e5:
92:36:60:a6:90:c8:bc:b3:52:db:22:65:fd:e1:4a:
5c:ee:7b:a9:1d:32:94:f7:df:b2:dc:ab:0c:72:36:
f8:70:14:f1:9d:37:78:eb:a3:ac:b9:c1:d8:b7:1d:
2b:d9:d1:43:71:fb:85:06:ce:d9:9e:1c:c2:61:17:
ea:9a:ca:83:a0:12:c9:a5:02:f0:55:2f:85:91:fa:
71:30:cf:b5:70:76:9a:53:b2:8f:0f:42:9f:da:13:
7b:b4:8e:a3:b7:d2:96:b8:ba:13:1e:de:f4:8a:62:
fa:f1:c3:d3:72:c1:0c:50:e9:d7:df:bb:de:fa:f8:
11:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2A:79:58:BC:CE:A9:17:C0:52:C3:71:82:87:71:BA:C0:B2:9E:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9236F565BB611EC96DF88C45A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.74.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:e3:3e:36:c5:1d:9f:3f:3d:f1:6e:eb:dc:fa:d4:8a:3e:e7:
9d:9e:40:e7:72:d7:44:33:c8:6d:b6:6b:ff:a2:d3:35:b2:0d:
e7:32:01:88:6e:dc:98:8c:bc:c7:40:f5:7e:dd:ad:e1:38:ac:
ae:e2:2d:46:0e:b4:a0:05:a4:18:55:a1:de:7c:ed:62:97:e9:
d3:ca:de:38:61:a5:c9:32:0c:50:f4:06:5c:4a:c7:ea:10:b9:
26:30:7e:dd:87:a4:10:af:cc:4f:f8:11:ce:e4:d6:b6:72:67:
3a:42:76:59:51:12:65:79:eb:4b:06:96:cc:0d:c6:d4:54:12:
21:03:dc:4d:8e:35:3b:e1:74:53:0f:46:53:3d:84:61:f4:39:
ee:b5:d5:7f:07:8e:fb:d6:70:4a:20:ff:d1:2e:1c:c2:1e:e3:
42:05:a9:29:8c:c9:25:b6:c9:55:bf:22:80:ae:92:af:c2:10:
03:90:b0:a8:4d:70:9b:65:a1:6e:fb:2a:22:e0:34:7c:c9:3c:
f7:4b:c8:b0:5e:08:0a:37:4f:8e:7c:e0:aa:b6:73:0c:74:f8:
35:35:10:45:de:f9:57:66:f7:0b:0b:72:7c:28:76:2b:3f:6c:
d8:67:4f:13:f5:63:c6:49:33:dd:93:b1:b6:dc:4f:c4:b8:08:
ec:fa:f4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-fra.rpki-client.org