Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/466A4280088911EFA06371F7007001B1.roa
File: 466A4280088911EFA06371F7007001B1.roa (raw, json)
Hash identifier: F7XSNT2b1Jma6x+j6ZMG6Vh1VIOnF7rYefqLeZw7XWs=
Subject key identifier: 1A:6C:39:9A:7F:68:3D:D8:DC:8E:E1:B9:1D:B2:6E:02:00:D4:EC:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B3EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/466A4280088911EFA06371F7007001B1.roa
Signing time: Thu 02 May 2024 13:38:36 +0000
ROA not before: Thu 02 May 2024 13:38:32 +0000
ROA not after: Sun 12 May 2024 13:38:32 +0000
asID: 5065
IP address blocks: 154.94.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46058 (0xb3ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 13:38:32 2024 GMT
Not After : May 12 13:38:32 2024 GMT
Subject: CN=6633975c-4b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:6e:e7:80:3b:6f:e5:9f:f5:34:4e:d3:40:
19:c4:f8:6e:59:6f:33:d2:22:44:38:e9:bd:97:75:
99:47:59:47:fd:1b:e3:3b:cf:e8:72:05:74:12:71:
34:4b:76:c9:f8:09:1a:47:ed:49:57:ba:59:c8:51:
98:f4:29:14:f4:86:bb:63:63:33:c1:b4:12:f9:16:
1c:b2:68:66:7a:fd:99:de:aa:6c:bd:27:74:f7:32:
95:d1:6f:3b:11:25:ef:04:72:7f:36:de:e9:37:c1:
96:1f:94:cb:ce:92:e5:b6:db:b7:8e:c4:f3:23:11:
98:c0:47:64:17:7c:0f:d5:c8:74:c5:0c:1f:af:65:
30:47:9a:b1:4c:f3:08:8c:cf:6f:e7:f8:76:04:e4:
48:4e:d8:e7:82:09:6a:f1:8d:69:d5:f3:d8:5d:86:
51:04:bd:fc:7b:b9:aa:8a:be:52:6d:f1:b1:7f:63:
0d:48:79:30:57:b2:15:5e:4a:2d:62:f2:8c:22:d8:
9f:88:93:07:11:59:29:eb:e6:44:fd:64:ac:07:d6:
da:bc:65:c9:e1:4b:99:2e:5a:a0:ab:22:99:d6:da:
37:46:13:6a:29:ec:9b:6a:40:2f:86:3b:2e:eb:e7:
e1:4b:31:91:6e:8e:c2:25:c9:c7:ad:77:5e:94:73:
eb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6C:39:9A:7F:68:3D:D8:DC:8E:E1:B9:1D:B2:6E:02:00:D4:EC:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/466A4280088911EFA06371F7007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.37.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:ff:2e:7e:e3:05:ba:49:d1:d4:55:27:4f:53:93:45:1d:4f:
90:8e:52:e2:64:77:9e:2d:d5:b7:33:8e:3f:45:b2:35:9a:e0:
39:8b:ef:22:90:75:9e:aa:e3:64:4b:14:ae:96:7a:54:de:fe:
7e:b3:76:a5:7c:cd:c5:94:70:4f:26:cf:f8:27:36:92:66:06:
ec:c1:c2:43:43:c1:f0:c5:60:c2:f7:7d:3b:73:d0:8f:09:4b:
4c:40:12:53:b0:4d:07:96:0c:f7:b8:14:f7:b8:8c:97:46:d5:
ab:20:f1:89:86:f4:e3:84:86:93:b0:c2:15:11:16:db:c5:b0:
12:81:46:08:f0:55:7d:00:dd:a7:da:18:81:7f:bf:26:37:26:
53:bc:4e:5c:f8:af:25:cc:84:e7:27:f9:99:37:f9:93:27:59:
9f:fb:7c:76:a4:dc:13:9a:3a:6f:06:34:27:5b:48:a8:a0:cc:
18:a4:2c:27:c3:8b:08:2e:2a:c7:ef:59:34:ce:14:4b:69:db:
b8:2a:8f:1f:3c:ee:66:81:37:b5:c4:06:ff:9f:4d:96:8b:92:
15:d0:d4:c1:e3:fb:ac:fb:c9:49:ce:bf:a8:bf:94:e8:f0:59:
78:34:b3:ce:fb:76:75:06:04:9b:f9:35:99:9d:4c:d7:2e:69:
ba:10:9d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:46:22 2024 by rpki-client on console-ams.rpki-client.org