Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/044F80540B7211EF877C2229017001B1.roa
File: 044F80540B7211EF877C2229017001B1.roa (raw, json)
Hash identifier: ManYiVAnZAPS8kjjwGdQrHL99/Dea+LrYGLLcD7dans=
Subject key identifier: 1A:9C:A3:5F:C2:C3:1A:EE:70:D1:C9:83:7B:09:D0:6B:A2:6E:EF:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B520
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/044F80540B7211EF877C2229017001B1.roa
Signing time: Mon 06 May 2024 06:29:40 +0000
ROA not before: Mon 06 May 2024 06:29:36 +0000
ROA not after: Thu 16 May 2024 06:29:36 +0000
asID: 139646
IP address blocks: 154.218.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46368 (0xb520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 06:29:36 2024 GMT
Not After : May 16 06:29:36 2024 GMT
Subject: CN=663878d4-257c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9e:d4:f1:a3:cd:25:4d:e2:6b:05:52:5c:c8:
f9:e3:6b:9e:b8:93:28:24:36:8f:c6:12:db:47:f6:
25:c1:a3:aa:d8:6d:05:5b:e2:40:73:70:24:4e:ca:
55:49:ee:ff:2f:cc:25:df:12:27:93:a8:3d:9d:14:
9b:da:51:3b:b8:c1:03:8c:7b:30:cd:4f:9a:ce:11:
c2:c2:ee:fe:42:aa:dc:37:28:a2:26:23:e0:80:37:
4c:9f:26:12:3a:91:98:28:c4:fb:98:54:fa:ae:00:
0e:3d:1b:51:57:4e:46:69:37:a7:cb:38:cf:8b:7f:
b9:74:13:e1:f5:ea:21:89:4a:01:b2:7a:59:c0:52:
c3:33:81:14:93:25:51:dc:76:b4:94:53:49:ae:d7:
be:36:ec:63:b6:24:32:a8:40:94:2b:b3:94:3c:d3:
18:01:a8:6c:6d:bb:4a:eb:3e:f3:1d:6d:64:4b:11:
8f:a1:e9:91:80:85:38:71:92:0d:c7:a6:76:3b:7c:
65:80:f7:9e:64:4a:1c:c0:ea:6d:9f:42:8f:95:e7:
35:7c:33:8b:6e:11:6c:15:e0:1f:c5:c7:1b:aa:13:
b5:11:88:31:05:b4:85:54:cb:83:bc:e1:c6:c4:67:
ef:86:b9:b4:55:80:da:c4:ad:45:d0:53:c3:65:f7:
3c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9C:A3:5F:C2:C3:1A:EE:70:D1:C9:83:7B:09:D0:6B:A2:6E:EF:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/044F80540B7211EF877C2229017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.0.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d7:53:f5:0c:03:00:65:31:f9:4a:27:9f:32:54:08:87:b3:
14:e9:fb:13:ac:3c:ae:d1:b8:59:af:22:43:b2:aa:4b:ff:ac:
75:d5:81:8d:c6:bb:5f:19:51:92:be:15:d3:18:0e:71:fb:8d:
5d:ae:d8:87:33:1a:0f:7a:17:dc:82:cd:99:cc:9c:2d:3a:0c:
3b:06:83:5d:9d:42:98:ed:3b:b5:f7:ca:98:1b:b1:53:f7:cf:
15:43:af:1b:f1:03:73:43:30:7f:82:5b:24:14:df:c5:76:f4:
0c:35:4c:a7:63:15:71:8e:16:a4:47:28:e5:98:d7:92:db:98:
9d:3b:17:67:56:fe:25:b5:43:f0:90:1f:04:75:1a:87:4b:d5:
72:ff:ed:dc:f4:03:e8:2a:05:bb:8e:94:96:71:52:81:81:5f:
72:64:54:a1:98:2c:da:00:2b:da:13:cc:24:e6:2b:55:f6:0a:
03:28:d4:c7:27:7c:06:61:b4:b7:5f:17:46:ba:4f:17:ae:13:
ae:37:66:af:3a:13:de:0f:d9:d5:7f:ac:76:30:59:5b:e9:83:
0b:97:9a:c9:3f:98:1d:c2:92:46:f0:bf:bd:d6:a2:cf:b8:6b:
4b:a6:af:ee:9b:51:b7:2b:88:75:59:3b:5b:e5:e6:a0:51:46:
1d:e0:67:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 07:46:20 2024 by rpki-client on console-ams.rpki-client.org