Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/213F33EE014011EF8A302913017001B1.roa
File: 213F33EE014011EF8A302913017001B1.roa (raw, json)
Hash identifier: F9P37Q1wdOaZWLecD5jvdIjilD/KNpmeuREc4ZzSv1Y=
Subject key identifier: 43:57:16:80:1F:79:30:E6:0F:57:78:33:2A:A6:D9:65:7B:2E:56:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AEC1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/213F33EE014011EF8A302913017001B1.roa
Signing time: Tue 23 Apr 2024 07:07:22 +0000
ROA not before: Tue 23 Apr 2024 07:07:17 +0000
ROA not after: Sat 25 May 2024 07:07:17 +0000
asID: 135983
IP address blocks: 154.200.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44737 (0xaec1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 07:07:17 2024 GMT
Not After : May 25 07:07:17 2024 GMT
Subject: CN=66275e2a-84f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3c:08:91:a5:cd:9c:71:40:a9:0c:84:12:97:
cd:90:bd:5a:76:7e:d1:c4:11:bc:51:b0:7d:64:2c:
10:16:3a:58:14:6b:56:15:6e:32:70:e6:39:f5:7f:
ed:e8:d5:51:5e:d3:8d:64:4f:a0:37:36:d9:1e:8f:
ac:04:27:1e:db:63:3d:08:96:9f:c7:88:71:7b:80:
b0:36:76:b4:33:6a:58:71:d6:dd:53:e5:b9:ce:e4:
60:c6:b9:94:0e:3b:fe:ca:71:3d:0e:2c:b0:0a:1c:
c7:75:60:3a:d1:49:69:1b:4f:8b:e8:ff:81:48:de:
16:05:7c:42:bf:fe:34:81:84:88:31:b1:92:27:96:
26:36:19:91:b5:18:f0:ca:6d:16:b1:15:94:c0:3b:
bc:26:52:b0:d7:18:5b:2e:89:86:9a:27:f4:ac:98:
ce:dd:08:d2:9a:09:03:ad:56:1c:3b:a2:f0:08:b2:
52:34:94:c0:14:68:4f:eb:ee:87:47:47:c0:5f:38:
4d:7d:5f:24:3c:50:86:54:8a:ce:4d:71:65:68:14:
cd:87:22:62:d2:aa:af:e4:55:8e:99:5f:54:54:f4:
35:a9:6d:fb:8c:30:78:fb:ce:c9:f8:69:30:2e:41:
b6:43:51:b2:7a:d9:72:41:fa:b8:69:b3:c0:95:80:
0a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:57:16:80:1F:79:30:E6:0F:57:78:33:2A:A6:D9:65:7B:2E:56:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/213F33EE014011EF8A302913017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.35.0/24
Signature Algorithm: sha256WithRSAEncryption
95:1c:3e:a3:20:58:34:40:65:80:37:d4:47:43:b4:bd:fe:6f:
9d:79:ff:78:86:b8:89:d6:7f:37:0a:48:0f:63:0d:1a:9f:a0:
3b:ff:05:99:16:f7:25:f0:6c:88:1e:3c:e4:6d:27:e7:c3:73:
4d:45:40:c7:4e:cc:f9:58:e2:a8:40:3f:61:1d:fd:44:f4:55:
23:fd:d4:c3:a1:62:d3:d0:b8:3e:6b:25:e5:fe:6e:91:27:c2:
b8:81:b5:1f:1f:32:60:17:b6:5a:14:e9:04:a4:ce:95:47:e7:
e7:4f:8b:d0:7c:db:17:8b:b4:08:d3:71:e2:bc:1c:21:f9:4f:
14:35:74:05:92:7d:0c:13:b0:70:a1:7c:c7:e6:0f:bf:b7:6f:
5f:55:59:e4:07:e2:e5:6f:8e:8b:58:89:a7:80:73:16:4a:d0:
54:4b:76:2b:40:bf:cc:3d:bb:fe:94:21:2b:03:a4:57:2f:e8:
58:61:d0:56:73:d2:4b:ab:d7:d8:24:7d:0a:a9:75:65:1a:87:
d9:48:0a:47:bc:4a:37:94:7f:59:25:aa:91:7c:a1:26:fa:53:
b9:8b:0c:00:f5:1e:86:c2:17:76:b5:26:f2:54:95:2f:d2:ed:
6f:7e:26:96:53:5b:38:32:09:14:63:fe:4f:bf:b3:7e:50:57:
57:87:fa:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 02:14:34 2024 by rpki-client on console-ams.rpki-client.org