Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E923D65257CF11ECAF6E94B55A40D577.roa
File: E923D65257CF11ECAF6E94B55A40D577.roa (raw, json)
Hash identifier: 6pUrYArpgPg4Tqm1K6gKl4s6dkx+DmCtVHvT4/nGb0Y=
Subject key identifier: 77:80:2A:18:9A:F6:46:2F:83:AB:E5:F2:AF:6C:A9:81:FB:A3:9A:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1323
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E923D65257CF11ECAF6E94B55A40D577.roa
Signing time: Wed 08 Dec 2021 02:38:22 +0000
ROA not before: Wed 08 Dec 2021 02:38:19 +0000
ROA not after: Fri 30 Dec 2022 02:38:19 +0000
asID: 9009
IP address blocks: 154.95.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4899 (0x1323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 8 02:38:19 2021 GMT
Not After : Dec 30 02:38:19 2022 GMT
Subject: CN=61b01a9e-4eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:d2:7a:e0:39:47:49:ff:e7:72:cb:8f:2c:
98:da:c4:ad:8e:e1:c2:de:69:d1:13:23:4d:9e:54:
0e:3a:00:22:91:0e:c4:ed:d8:a0:f8:0c:2c:20:32:
bd:0e:d2:d7:8a:ed:6d:cf:44:18:b1:b0:84:78:5d:
6b:1e:6d:5c:c2:4f:f2:56:28:8c:e8:02:16:aa:93:
c4:95:79:b2:2b:04:c4:80:0a:97:bf:35:08:8b:17:
f6:b0:e3:80:74:01:24:b2:c2:aa:98:43:f9:a0:66:
d5:db:28:87:c8:25:24:8f:f9:eb:14:53:38:4a:14:
1d:db:1f:82:53:c7:15:fc:54:eb:dd:e7:02:df:5f:
9b:53:6e:01:04:bc:34:38:c1:fe:0e:a7:2c:60:ee:
15:77:6a:51:b2:01:1f:c8:2c:81:33:6d:e1:3d:65:
7c:7b:93:ba:ab:fa:ae:c6:8c:59:c9:c1:69:f5:d1:
e0:e1:32:b4:8d:f4:d2:50:e6:24:fb:3e:65:c1:48:
ec:b1:9e:53:dd:44:7e:d0:50:18:ce:36:f2:3e:e7:
5f:46:80:22:81:ad:27:8b:9e:2c:a8:21:03:c6:7e:
16:33:00:ec:f3:53:15:39:90:1b:5c:f0:3f:60:10:
31:a6:7f:be:4a:ca:c2:58:f3:e3:9d:3b:7d:f1:82:
ad:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:80:2A:18:9A:F6:46:2F:83:AB:E5:F2:AF:6C:A9:81:FB:A3:9A:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E923D65257CF11ECAF6E94B55A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.33.0/24
Signature Algorithm: sha256WithRSAEncryption
03:21:c2:cc:57:75:bf:bf:41:d9:9c:00:fc:fb:52:cd:a0:c4:
7a:ee:1a:42:d7:04:41:62:3a:fe:cc:88:c3:ff:04:64:ee:3b:
5b:d3:60:c1:0e:7e:d1:11:7e:7b:ce:23:67:49:0a:3e:40:23:
9d:40:65:51:c0:70:55:a7:88:5d:ad:10:7d:0c:0a:7b:e4:45:
62:e2:60:45:0a:b7:d7:27:99:2b:03:43:cd:45:24:04:bf:42:
ab:d4:96:7d:93:43:c1:b6:09:a4:f1:58:fc:5b:40:01:7a:8f:
9a:9c:e3:51:20:1b:b0:ed:05:03:aa:a7:5f:5c:ad:e0:94:60:
fb:75:8e:cf:de:4b:5f:4f:3f:b9:94:85:87:50:0d:47:08:35:
1f:f6:0d:1e:78:d1:e2:ef:7e:4a:33:cc:5d:4c:5d:c3:27:50:
c6:4d:ae:b3:97:a9:4b:e9:ec:f1:7a:b1:e4:47:bf:2b:bf:22:
9e:a1:2f:77:66:79:20:e0:4b:18:5d:a5:01:3c:95:7a:ef:ea:
96:e6:4f:bd:d3:98:99:bd:c2:d3:9f:41:63:81:67:b6:1d:47:
f5:ab:56:63:70:87:8b:2e:64:90:e9:b6:19:ed:da:91:cd:dd:
12:b2:39:bd:5f:27:90:f0:14:07:28:e8:c2:e0:7c:85:bd:30:
ed:91:cd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:13 2023 by rpki-client on console-ams.rpki-client.org