Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41911CB6294F11EF902189387DDC24C2.roa
File: 41911CB6294F11EF902189387DDC24C2.roa (raw, json)
Hash identifier: 10jmYZf+rs2v8kgQHFhau8GhckqkkiUJ05OoX+qtWTw=
Subject key identifier: 4D:CB:AD:76:30:2C:49:5F:4B:4B:6C:CA:87:0A:6E:45:E8:C2:DF:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C210
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41911CB6294F11EF902189387DDC24C2.roa
Signing time: Thu 13 Jun 2024 06:36:25 +0000
ROA not before: Thu 13 Jun 2024 06:36:22 +0000
ROA not after: Fri 21 Jun 2024 06:36:22 +0000
asID: 44559
IP address blocks: 154.223.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49680 (0xc210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 06:36:22 2024 GMT
Not After : Jun 21 06:36:22 2024 GMT
Subject: CN=666a9369-df94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fb:ae:c1:71:64:e9:fc:07:ae:04:89:e9:27:
a4:16:dc:38:52:7c:a0:cf:ff:e8:d8:af:fc:c7:f2:
58:5d:ed:5a:c2:a1:16:a7:ba:6e:ac:c2:97:9c:4f:
82:b2:2e:41:f2:bf:98:c0:3f:a1:0f:d5:1e:20:9a:
09:dc:4b:98:5a:a8:46:17:be:fe:a1:88:6a:43:06:
10:ff:a4:43:bc:86:91:6e:f7:80:27:86:4c:04:8b:
4d:f4:43:f2:bd:d2:4c:26:e4:25:b8:ca:6d:1e:8d:
40:1a:f6:45:ae:38:11:db:18:92:21:69:f1:bc:ef:
6d:91:da:2f:c9:05:59:2e:4b:06:62:f2:1a:e8:09:
db:dd:0f:6b:1d:d7:1a:c0:35:f4:d3:1a:b2:8e:ef:
55:3a:9b:8a:20:b2:a8:03:6f:5f:69:e4:2a:4c:86:
6b:c3:54:32:6c:55:92:83:ad:0e:85:c8:3e:00:4d:
88:fc:a2:cb:20:57:9b:32:74:46:ed:c2:f7:57:d8:
f5:0b:21:ef:45:58:bb:43:05:de:c9:d9:78:60:a1:
3b:10:ed:1b:ce:dd:54:f7:a2:84:83:9a:56:4d:08:
4d:19:54:4d:82:f4:30:c3:83:e2:c2:88:14:ae:f0:
61:88:d4:0c:69:68:a2:e0:fa:69:90:20:4a:2e:41:
ea:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CB:AD:76:30:2C:49:5F:4B:4B:6C:CA:87:0A:6E:45:E8:C2:DF:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41911CB6294F11EF902189387DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.192.0/18
Signature Algorithm: sha256WithRSAEncryption
11:08:80:d2:0c:e4:22:1d:b0:b2:c7:f1:f5:35:aa:d1:b8:a9:
dd:6b:04:d7:9f:70:80:6d:9e:00:9c:0c:3d:65:1d:c2:81:c9:
a8:0d:ab:7e:b7:8e:c6:b3:42:90:25:eb:0c:6a:b9:c5:e9:1b:
19:94:04:14:28:fc:99:fd:6b:1d:8a:33:98:8c:ed:9c:85:52:
d0:f1:84:3e:74:0f:9b:5f:e8:53:9c:e4:b1:c5:cf:92:03:46:
3f:56:1b:e8:b9:27:57:bf:91:8c:c8:b9:83:e7:cf:69:ef:40:
a0:81:5a:4c:cc:cf:e1:b2:fe:63:d9:fc:cd:23:ec:29:93:f4:
9c:e7:5e:eb:51:10:79:f9:64:b9:60:1b:ec:1a:34:56:b7:16:
58:1a:ac:1e:7e:cc:6f:3a:61:1d:24:69:8c:23:40:33:6a:d8:
7d:cd:88:34:b7:01:b8:de:d6:60:29:ba:ad:a8:10:9c:3b:a7:
8e:6f:a0:70:74:4f:14:6c:f3:4e:0c:0c:31:8f:9a:d6:5d:b9:
9f:ec:66:60:25:cb:1d:b5:be:1e:8f:fe:4d:d1:16:1b:bc:b8:
6b:05:73:8f:70:46:da:9c:8a:6b:fd:e1:01:5f:48:49:dc:dd:
5c:11:52:1e:70:07:d3:ef:90:f7:6a:90:3e:a5:a5:6e:40:ee:
51:e6:9a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 03:57:30 2024 by rpki-client on console-ams.rpki-client.org