Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32A818E20DC711EFBC28132E017001B1.roa
File: 32A818E20DC711EFBC28132E017001B1.roa (raw, json)
Hash identifier: FcUpzhKVm8q7af45TSE/JsvYf/NT5vGdt/9VURkyZ4g=
Subject key identifier: 80:BC:9C:33:6F:48:68:8C:72:FE:59:9A:E9:0D:20:F9:B8:C2:15:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B601
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32A818E20DC711EFBC28132E017001B1.roa
Signing time: Thu 09 May 2024 05:44:27 +0000
ROA not before: Thu 09 May 2024 05:44:24 +0000
ROA not after: Sun 19 May 2024 05:44:24 +0000
asID: 39600
IP address blocks: 154.94.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46593 (0xb601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 05:44:24 2024 GMT
Not After : May 19 05:44:24 2024 GMT
Subject: CN=663c62bb-d36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:97:2e:3b:87:fc:a4:69:34:c6:ba:de:2e:c2:
ad:f0:39:e4:51:9b:67:d9:21:be:98:92:39:f1:31:
31:7e:ab:4e:dc:5b:cd:67:69:47:d1:a5:af:d9:2a:
ec:0e:92:ec:43:d3:a7:00:06:eb:6a:51:80:a3:16:
8f:0e:2c:fc:8b:9b:2d:46:0e:26:e5:df:13:e9:11:
aa:ca:c5:72:31:5e:3f:6c:cf:ad:8e:7f:64:93:6f:
3e:7c:6a:fe:aa:4c:79:a9:70:7c:46:11:a1:28:0e:
61:6d:6e:ae:ac:5c:20:24:0b:b4:34:f5:ac:87:55:
4a:4b:b9:c1:9a:49:5b:3d:73:cc:74:66:37:b1:ba:
74:74:22:38:2c:10:d0:70:52:e5:f3:fc:1f:54:a8:
20:77:b9:53:49:71:48:0b:28:f1:a5:e4:a5:b6:0c:
3f:48:66:13:5b:9f:e3:81:bc:34:aa:22:e3:4e:f1:
d6:86:1c:52:c6:b0:28:33:0d:8c:fa:48:bd:d0:47:
75:cd:b0:53:8d:b8:51:e6:1a:ab:a8:b0:d1:9a:5a:
a4:56:6f:7f:64:15:9d:4f:a0:0a:54:42:fc:fe:e0:
e7:8d:62:f0:fc:a2:a9:1e:2c:30:4d:e0:04:aa:ac:
02:4e:83:05:36:1d:45:3e:8d:72:97:4a:e5:4e:aa:
22:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BC:9C:33:6F:48:68:8C:72:FE:59:9A:E9:0D:20:F9:B8:C2:15:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32A818E20DC711EFBC28132E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.61.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:6a:9f:ce:11:54:43:2a:40:73:ac:98:7c:7e:b9:6c:4b:14:
bb:bf:3a:ec:93:3e:9d:c7:60:a2:9e:33:53:dd:3d:4f:cc:9f:
6b:12:fb:83:a6:75:25:75:92:d7:89:18:5d:69:c5:dd:b4:78:
13:85:1d:d6:5f:c2:c6:3d:c5:82:44:e6:02:80:96:82:26:2e:
86:74:df:68:87:bd:5f:46:b6:9c:1a:d2:f6:56:6b:97:33:4f:
38:fe:9e:18:66:08:f7:f6:4c:08:44:b1:8a:a6:56:c6:76:92:
4a:1e:f4:92:f8:6c:5a:3d:bb:58:3e:4f:32:50:46:c0:d9:4c:
d9:80:2e:24:a1:6e:f5:8e:cf:98:5a:02:77:03:e2:fd:3b:ee:
8a:05:81:51:58:76:f6:38:f4:1e:b3:13:ff:ea:42:a7:bd:0c:
ad:b6:c6:4d:75:7b:d0:ae:94:9f:8a:48:7a:92:58:5d:5e:16:
8a:8c:a0:e3:2a:97:b8:17:de:10:8e:83:4c:5e:49:e8:67:4a:
4e:d0:71:36:6f:66:bf:16:83:2e:67:57:db:ff:94:1a:41:d5:
d3:22:f8:ab:73:d8:11:72:0a:0a:08:cc:f5:d2:8f:d0:b8:aa:
52:77:78:45:8b:75:22:b3:32:20:ea:34:c2:ff:ae:44:68:87:
77:0d:26:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:57:14 2024 by rpki-client on console-ams.rpki-client.org