Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBBD1EF6245F11ED88B4A7C5F1222468.roa
File: FBBD1EF6245F11ED88B4A7C5F1222468.roa (raw, json)
Hash identifier: vGVW7Do2y/AMWr+BlMF4dM+8diCqmMglecw73/82SVs=
Subject key identifier: B5:6F:7C:99:93:CF:5C:14:3C:31:C4:0F:F6:0B:E7:6F:5A:88:B3:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1859
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBBD1EF6245F11ED88B4A7C5F1222468.roa
Signing time: Thu 25 Aug 2022 10:23:38 +0000
ROA not before: Thu 25 Aug 2022 10:23:34 +0000
ROA not after: Wed 25 Jan 2023 10:23:34 +0000
asID: 63673
IP address blocks: 154.213.4.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6233 (0x1859)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 25 10:23:34 2022 GMT
Not After : Jan 25 10:23:34 2023 GMT
Subject: CN=63074daa-558a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:47:99:21:13:ff:14:c7:3c:db:a6:25:16:7b:
41:1b:b2:48:6d:f5:03:92:c0:b4:52:9b:fd:0b:a5:
c4:7f:44:20:ae:9d:60:0e:f4:7a:e6:a5:dc:57:7b:
7b:2e:49:3b:c7:62:ac:63:ca:79:76:89:e5:44:60:
61:83:2f:ee:54:6b:df:8b:d0:29:2c:cf:f3:0a:5d:
9e:5c:a0:c1:58:70:48:37:8a:ee:cf:19:18:41:33:
28:3b:27:b4:b8:4d:f0:8b:3a:b3:69:06:21:fc:c8:
9b:1b:ba:48:05:40:d7:50:5a:31:ff:3e:53:cb:a0:
39:8d:a1:85:9b:17:c2:13:f3:d3:55:b3:79:db:96:
93:34:42:d5:34:43:96:40:71:eb:73:b1:f4:30:8e:
b2:2a:a0:f8:9c:10:09:d4:5d:de:40:1d:7c:2f:e2:
51:b3:4c:35:27:10:b3:bd:0a:ff:33:ea:46:a4:ad:
a5:74:01:f3:83:97:46:08:b4:8c:29:a2:2b:07:72:
1d:3a:43:01:86:ca:1e:5b:02:47:59:29:54:60:8b:
e3:d9:78:9c:fd:01:29:a4:47:06:9c:0c:d2:0b:93:
13:54:74:b9:1b:4f:8a:10:eb:1c:2a:03:de:66:44:
69:6a:04:e5:53:8d:2d:e2:8d:35:2d:86:60:40:c3:
c4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6F:7C:99:93:CF:5C:14:3C:31:C4:0F:F6:0B:E7:6F:5A:88:B3:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBBD1EF6245F11ED88B4A7C5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.4.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:8b:41:c5:4e:a8:8b:33:a0:07:c9:f4:be:93:48:22:9c:ec:
5a:65:fd:80:cb:6b:6a:03:e5:6c:79:99:ec:38:e7:28:91:d4:
f1:11:22:49:ac:76:78:2d:83:94:c6:e8:5f:a0:a1:58:0c:25:
2a:e9:31:7d:f3:d4:6a:d3:17:35:fd:c7:58:00:cf:8b:60:7a:
bc:84:d2:cd:92:a4:dd:d2:55:77:12:91:91:de:ca:30:65:2b:
43:60:af:4c:22:31:a1:0c:fb:6b:88:dd:b9:ef:2e:54:a1:67:
22:fc:ba:91:aa:a4:dc:27:4c:6a:db:31:94:b3:39:71:fc:97:
5f:43:e2:f5:0f:77:0a:7f:ef:9b:bf:cb:22:0d:69:62:29:d4:
10:1c:69:ec:bd:79:c0:cd:ce:c1:0a:54:f7:75:3e:4c:b4:e7:
23:86:90:e2:62:70:65:92:d0:a9:e9:64:d7:2b:33:e8:e5:e1:
82:c9:21:1c:54:a1:d7:08:bb:53:5f:a8:42:73:8c:a0:ff:90:
77:d1:87:45:63:6d:3a:4f:f3:e4:f2:40:60:73:8b:be:12:15:
14:93:71:00:16:a8:ab:02:4a:4e:23:c8:47:43:14:2f:29:b4:
28:d6:a9:0e:8e:85:82:89:04:a9:a8:1e:ec:0c:fc:7a:b2:0d:
16:8c:5b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:13 2023 by rpki-client on console-ams.rpki-client.org