Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D714428014B11EF9014F270017001B1.roa
File: 5D714428014B11EF9014F270017001B1.roa (raw, json)
Hash identifier: x/sZwGp+y+6hRkspND8oFV1+1fAjIPnbvc7dpE3hKKo=
Subject key identifier: C9:E3:BE:EE:40:DA:AB:D8:35:97:DB:2D:67:FD:59:4E:5B:01:26:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AF05
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D714428014B11EF9014F270017001B1.roa
Signing time: Tue 23 Apr 2024 08:27:47 +0000
ROA not before: Tue 23 Apr 2024 08:27:44 +0000
ROA not after: Mon 13 May 2024 08:27:44 +0000
asID: 204721
IP address blocks: 154.215.2.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44805 (0xaf05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 08:27:44 2024 GMT
Not After : May 13 08:27:44 2024 GMT
Subject: CN=66277103-2333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a2:07:fb:0e:16:30:9f:fd:11:69:02:68:08:
fe:1f:d8:91:44:66:0f:02:45:e4:59:9a:d9:36:f6:
7e:de:27:e1:cc:bc:c6:93:96:05:e7:52:a6:fe:d7:
cf:6b:6b:89:ed:e2:ac:92:f0:5d:6b:d4:61:3b:23:
a3:ab:89:9b:78:bf:eb:66:37:a8:4b:a7:11:76:e6:
5b:eb:4c:32:85:75:f7:5f:bd:a0:82:41:0a:a5:bf:
62:3b:a1:85:0a:fd:07:42:85:ea:98:18:50:80:19:
68:9a:4b:3e:b3:b7:70:74:6e:80:24:66:03:d0:22:
ad:5b:0e:a7:dd:9e:d8:96:c9:3e:05:16:df:64:a4:
a4:33:39:f3:c0:06:fa:ee:9b:1f:cb:1e:dc:27:52:
bf:ee:69:0b:bc:0d:bb:69:eb:26:db:a6:ca:4a:28:
16:e3:ce:2d:3a:74:5c:9b:d5:50:bd:22:53:8c:e4:
90:12:0c:21:ba:e2:f5:5c:03:ea:ad:e4:0b:40:0a:
9c:5a:ab:e5:90:39:cf:f1:de:5a:c0:dc:12:05:72:
3f:50:d9:98:dc:d3:10:dc:4e:b3:38:17:d4:1f:5e:
d0:70:78:e1:44:34:ef:61:d7:e9:c1:4d:6a:d5:a1:
35:90:77:0c:b2:37:f8:1c:22:14:b9:21:cf:44:cf:
d4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E3:BE:EE:40:DA:AB:D8:35:97:DB:2D:67:FD:59:4E:5B:01:26:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D714428014B11EF9014F270017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.2.0/23
Signature Algorithm: sha256WithRSAEncryption
94:ce:0f:c0:f1:b6:22:4d:9f:56:7a:c1:73:96:a7:3e:ae:48:
42:91:f8:30:35:31:ee:fc:d4:66:6a:1e:5f:9b:dd:89:95:14:
ae:35:dd:54:e3:e8:b1:29:e1:25:7a:fd:63:6b:a9:ec:b5:f1:
de:19:f9:95:55:6f:13:c8:6a:56:15:6d:9c:90:94:ea:1c:71:
8b:63:52:98:2e:5f:2f:9d:b4:79:6a:4f:3e:64:15:b1:9a:ec:
b9:62:e0:4e:f0:72:45:74:95:88:96:ac:a5:1c:6f:17:45:82:
dc:8e:2a:65:1f:01:f3:31:00:82:88:be:79:43:0b:3c:16:12:
ff:c5:0c:de:e5:f5:49:32:8f:8a:4f:ab:2e:eb:61:9d:5c:ec:
1c:bd:77:b0:92:7f:e1:c6:97:d7:78:cb:d3:d7:0d:72:d5:82:
6c:5c:b4:e6:40:6b:32:5a:c3:04:14:16:3e:77:84:86:30:16:
65:3b:96:71:b8:9d:d4:03:9f:5b:78:d7:c4:fd:92:89:ed:c7:
c1:4d:be:f1:2f:18:96:43:f5:ff:05:cb:c5:ac:3b:19:8b:2e:
33:f3:6b:2e:7b:ac:17:14:46:22:8e:38:92:15:8a:09:55:68:
06:2f:38:4f:bc:49:11:09:9b:ac:cf:c7:ca:60:1c:1e:d7:5d:
5b:71:32:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 15:01:43 2024 by rpki-client on console-fra.rpki-client.org