Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F80F2FC2DBFF11EC95062780F1222468.roa
File: F80F2FC2DBFF11EC95062780F1222468.roa (raw, json)
Hash identifier: UcIbBctlkLKSUWHmL1SVwE4pavM0kZXdYDvMMnIkJRc=
Subject key identifier: 16:33:20:F7:78:41:C1:55:21:59:50:94:42:B9:2E:55:46:A6:DD:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1673
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F80F2FC2DBFF11EC95062780F1222468.roa
Signing time: Wed 25 May 2022 07:54:57 +0000
ROA not before: Wed 25 May 2022 07:54:52 +0000
ROA not after: Fri 30 Dec 2022 07:54:52 +0000
asID: 328608
IP address blocks: 154.89.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5747 (0x1673)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 25 07:54:52 2022 GMT
Not After : Dec 30 07:54:52 2022 GMT
Subject: CN=628de0d1-6353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:37:7a:fd:21:56:75:c0:a1:83:3a:39:ae:
4d:ec:33:fe:72:19:18:af:21:0d:47:c7:70:68:9b:
1f:ce:8b:54:cb:4a:33:23:f5:fe:5d:96:56:86:88:
b6:40:3f:a4:82:6b:d1:09:e8:24:c7:ea:d4:3e:45:
49:19:98:c0:62:fb:da:6d:50:87:61:98:de:ab:71:
db:55:27:fb:fa:40:a6:aa:7b:e1:fe:24:68:d1:9d:
39:95:a7:86:9a:47:76:bc:42:70:1b:fa:cc:b7:bf:
5b:48:f9:94:c3:31:2f:2a:15:08:6d:eb:86:55:7e:
cc:ed:6e:8f:50:10:80:ec:57:cd:40:8c:3c:1a:70:
9a:7d:3f:5f:46:69:d9:36:fa:41:b8:fc:57:85:cc:
79:57:93:3f:31:04:9a:ec:92:4a:e4:46:ab:02:2a:
5f:0e:d7:8d:b7:e6:f0:4f:a1:0e:34:b7:ed:f7:ae:
55:76:bb:4d:6f:b5:22:c1:28:d3:20:ff:c1:fa:6b:
63:5b:05:7e:50:29:11:8f:e1:6b:f5:71:01:3e:43:
2d:15:65:98:eb:1b:b8:bf:01:38:d8:56:51:b7:02:
47:bc:e7:32:aa:96:0c:75:80:9b:28:46:29:fd:7f:
24:3f:ef:e4:63:2e:d1:2f:e8:9a:63:b8:67:a7:28:
f6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:33:20:F7:78:41:C1:55:21:59:50:94:42:B9:2E:55:46:A6:DD:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F80F2FC2DBFF11EC95062780F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.192.0/18
Signature Algorithm: sha256WithRSAEncryption
53:12:85:da:67:65:a8:3e:0c:99:fb:5a:45:b3:74:43:bc:bb:
b2:f5:dd:5f:4c:96:c9:7a:f5:1f:c6:d2:bd:56:a2:ad:1d:66:
0b:76:a2:33:69:04:f9:f7:2b:f1:af:b1:69:a5:d3:5c:0f:b9:
e9:7e:bf:33:a0:0c:87:15:17:2e:6d:d4:f6:70:1b:d1:e5:fb:
05:be:08:94:8c:6e:f5:f0:fd:a2:ef:6f:ba:00:f8:7d:a9:60:
8f:c0:cb:3c:6e:5b:36:c3:86:74:3e:77:62:50:04:0d:40:85:
0b:a0:ec:1c:5e:c8:1e:86:3c:ca:b5:5f:36:ce:bb:6e:31:8e:
70:8d:91:9e:56:59:a3:f1:f0:ac:f1:ec:d4:39:a8:97:4c:1f:
31:d5:38:00:a8:85:15:ad:13:eb:55:03:15:e6:61:e7:ce:78:
c3:e4:3b:d0:84:34:1e:ec:7b:0a:c8:e3:a6:80:d2:df:21:90:
78:7c:33:94:2d:50:6c:4c:06:da:eb:90:ff:00:4b:69:27:a6:
4c:ca:0d:35:30:d0:90:cf:c8:bf:bc:84:30:be:70:ff:81:34:
0d:ab:1c:46:67:2e:22:0b:37:0a:a6:92:45:4b:cc:ad:a9:27:
ef:5a:fa:1d:10:c9:8b:3c:3f:d0:ab:f7:28:8e:50:56:7c:45:
e0:a7:d0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-fra.rpki-client.org