Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DECF344037A11EF90974538017001B1.roa
File: 0DECF344037A11EF90974538017001B1.roa (raw, json)
Hash identifier: gW2qVyZEhnNn4Pbl7ZGUy7IU4sydqF+jjDU+SJnkips=
Subject key identifier: 3E:A4:98:F9:5D:98:3A:76:38:34:D1:D0:6A:A4:E9:4B:A9:3F:F1:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B112
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DECF344037A11EF90974538017001B1.roa
Signing time: Fri 26 Apr 2024 03:07:03 +0000
ROA not before: Fri 26 Apr 2024 03:06:59 +0000
ROA not after: Fri 10 May 2024 03:06:59 +0000
asID: 135097
IP address blocks: 154.214.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45330 (0xb112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 03:06:59 2024 GMT
Not After : May 10 03:06:59 2024 GMT
Subject: CN=662b1a56-c9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f8:cf:5a:d7:35:c9:d1:f6:8b:af:3f:c2:2b:
e0:dc:23:0e:ef:00:d5:94:5b:ca:d4:3b:30:98:8d:
05:63:60:49:98:bf:32:65:3d:f7:7a:7a:10:a6:f8:
0f:56:d4:26:c1:27:f4:0d:d2:40:6a:2f:a8:f0:f1:
fc:c3:93:c0:6d:78:a0:b3:59:86:b9:87:3f:e6:a9:
ee:ff:02:63:87:37:2b:a9:01:b6:93:71:c7:19:de:
95:fe:d8:7e:1e:61:54:7b:29:f9:4b:e4:25:97:ba:
95:9b:71:73:11:2e:22:9b:8f:5a:82:19:a8:1b:1e:
5f:7e:da:b4:11:90:8b:fe:1a:c3:ef:0b:e9:b5:26:
c7:1d:43:1f:07:24:0c:19:11:14:94:99:b9:fb:53:
35:bb:c3:bd:07:8a:7e:3a:6b:24:6e:37:62:0c:43:
0e:22:60:62:aa:46:e2:82:84:ce:fe:2e:d5:34:c5:
4b:e1:5e:02:35:d7:99:55:98:ac:03:fd:be:59:3f:
db:f8:f5:b6:f4:f3:9c:90:35:89:e7:40:93:1b:6e:
0e:2c:b0:65:9c:5d:26:f1:6d:c4:2d:cc:88:63:b3:
9f:73:23:c6:77:79:cf:d7:8f:91:76:69:91:45:39:
ab:4e:7f:7a:75:c3:8a:b1:91:b1:62:51:cd:ec:7c:
72:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A4:98:F9:5D:98:3A:76:38:34:D1:D0:6A:A4:E9:4B:A9:3F:F1:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DECF344037A11EF90974538017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6b:c7:15:96:d8:33:42:96:a7:23:97:bf:cd:32:10:a3:1d:18:
95:47:57:5b:b9:b1:aa:d5:ca:44:ac:17:47:da:84:92:92:65:
8d:3b:5e:64:c1:f7:4f:12:44:53:73:be:3d:16:32:cf:7b:bf:
e5:dd:2e:dd:11:78:17:72:50:4f:9a:00:1a:bc:d0:2b:7e:55:
1a:a6:8e:19:43:37:6e:b5:a8:ba:e8:1e:fd:db:eb:39:bc:30:
01:fa:73:27:40:4f:f4:2c:75:44:ba:76:57:50:52:3e:74:1a:
03:e6:8c:d2:c0:76:c4:3d:d2:2b:8c:b1:35:03:6f:e9:27:de:
db:d9:97:7f:7d:39:7b:85:c5:9f:47:17:d0:35:12:2b:00:9a:
bf:b5:05:70:e2:e5:d2:88:89:23:25:85:a9:4f:ec:41:ba:c6:
10:de:6d:5d:1d:73:69:f8:54:be:8c:d1:a2:2e:e0:f9:d3:f2:
c0:f8:d1:b4:19:c6:ad:41:66:34:14:12:18:84:03:8e:0f:bc:
4a:70:7f:90:b4:87:aa:e2:0e:60:96:65:93:81:fb:99:6e:9e:
7e:f8:63:73:8d:b3:42:7e:9f:cf:b4:df:71:a7:39:5f:ed:68:
38:42:2a:26:14:8e:0c:2d:7c:90:f9:b9:27:cb:67:5c:1d:68:
92:39:e9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 10:50:10 2024 by rpki-client on console-fra.rpki-client.org