Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC0D9CA00CB311ED85A34088F1222468.roa
File: FC0D9CA00CB311ED85A34088F1222468.roa (raw, json)
Hash identifier: NOXu65LtvPgDQijkGrJCTVCrPUALcahzuzbc71vT2bY=
Subject key identifier: 24:88:3F:38:55:44:20:E3:64:CD:5A:86:95:9A:73:53:AA:D3:EB:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 178A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC0D9CA00CB311ED85A34088F1222468.roa
Signing time: Tue 26 Jul 2022 07:24:29 +0000
ROA not before: Tue 26 Jul 2022 07:24:23 +0000
ROA not after: Fri 25 Nov 2022 07:24:23 +0000
asID: 142012
IP address blocks: 154.84.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6026 (0x178a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 26 07:24:23 2022 GMT
Not After : Nov 25 07:24:23 2022 GMT
Subject: CN=62df96ad-92d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e0:cb:a1:c3:b8:06:90:23:89:34:89:89:59:
a8:c5:80:76:54:bf:3f:68:5e:7d:29:9d:59:e7:ee:
5a:4d:b0:60:f1:4e:ac:83:e9:5d:d2:1c:a9:3b:e4:
34:08:94:f4:b0:7e:24:ac:c0:05:17:85:15:bf:ba:
45:e0:b2:ed:ae:b2:7d:52:b7:86:0a:86:12:59:b2:
e4:22:72:c3:03:16:06:e6:42:80:67:8c:41:10:ab:
f0:76:58:f1:4a:b8:3b:81:51:1f:a5:ef:e1:9e:d1:
a7:49:f6:70:37:b3:8d:88:45:bc:fe:63:02:f4:50:
8c:23:d2:08:83:b2:a4:81:2b:0c:d5:31:69:3d:96:
1d:74:70:78:81:0c:77:15:8a:24:45:bf:8f:b5:87:
6a:8a:22:d6:48:b3:4c:b0:7c:0e:1f:40:78:8d:bc:
5a:2b:c3:34:46:62:f0:38:31:f9:5e:86:04:bf:90:
00:a2:f1:c0:69:a3:40:12:76:94:cb:ab:28:9e:1d:
41:bc:53:4e:79:9e:64:01:4c:59:4b:4f:d7:77:d0:
37:87:84:95:26:0a:e4:1c:3c:c4:7d:82:fb:0e:07:
a5:0f:43:d0:27:58:18:07:e7:96:cc:cb:49:ef:cb:
24:19:cb:3b:ea:ba:bf:5e:28:45:1c:ad:13:15:43:
5b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:88:3F:38:55:44:20:E3:64:CD:5A:86:95:9A:73:53:AA:D3:EB:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC0D9CA00CB311ED85A34088F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.154.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:9b:7d:5b:51:af:af:2b:cf:f4:ab:1b:1f:2b:96:ad:67:e9:
47:62:36:a9:65:d5:a0:8c:21:fa:6e:53:f8:a4:dd:86:72:c8:
18:ea:83:7a:c4:ee:3b:09:97:b8:63:ba:06:49:f3:c6:19:8b:
d2:cc:88:b2:5b:a2:b7:04:19:a7:0c:4f:5d:d2:4c:28:4f:dd:
01:01:02:7c:c6:61:f5:82:36:ab:16:46:87:4d:f2:5e:6c:58:
dc:a3:3f:1c:74:4f:59:77:2e:3e:28:7c:19:48:b3:3e:8c:2d:
a8:34:e4:a6:a9:57:2c:00:83:e7:05:a2:f0:ae:a5:29:d2:0e:
de:e3:bb:bf:be:f3:22:98:40:39:76:83:30:28:19:eb:9e:78:
e0:ef:f3:d6:52:a3:0c:e1:16:c3:d5:21:d6:85:fa:0e:b0:bb:
a5:98:65:9d:90:ac:13:61:28:d1:a1:f5:25:e2:c0:9f:0e:4f:
07:a1:ae:00:36:67:af:16:e0:3d:d8:43:39:12:46:00:fc:12:
5a:05:b1:12:40:7a:ca:12:7b:c5:64:3b:45:47:ef:d7:11:e7:
d2:9c:48:ef:f3:1c:f5:d7:f6:4f:7f:fb:42:f8:d6:c1:f0:5c:
2c:5e:16:da:2e:79:8c:d1:b1:4a:2e:f9:79:17:83:8d:75:cd:
b9:6f:c2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-fra.rpki-client.org