Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/665DC1740DB211EFBC049605017001B1.roa
File: 665DC1740DB211EFBC049605017001B1.roa (raw, json)
Hash identifier: PwnXS/98mXKqQ5QOJ5p2rLI0R7LVqsdEJsrHwkeloGM=
Subject key identifier: 87:17:EC:AF:D7:EC:A1:91:9C:FD:FC:20:FC:CD:8C:30:AB:48:CC:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B5A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/665DC1740DB211EFBC049605017001B1.roa
Signing time: Thu 09 May 2024 03:15:34 +0000
ROA not before: Thu 09 May 2024 03:15:31 +0000
ROA not after: Sat 18 May 2024 03:15:31 +0000
asID: 44559
IP address blocks: 154.203.248.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46505 (0xb5a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 03:15:31 2024 GMT
Not After : May 18 03:15:31 2024 GMT
Subject: CN=663c3fd6-4849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:bf:27:e7:c5:a8:74:95:39:1d:5e:22:b3:
ad:c1:de:4d:f1:50:cb:0b:38:c0:0c:0a:81:26:79:
99:63:31:8a:29:50:d1:c3:2e:7b:74:ec:47:b3:c7:
75:63:f5:cb:d3:86:fe:4b:64:72:b4:ab:7b:61:ba:
e1:c8:1e:02:74:1b:6f:9b:70:dc:86:84:cd:8f:42:
d8:c4:9f:b3:67:ae:fe:59:f5:49:37:26:4e:08:73:
8e:30:8f:28:60:b5:12:08:a5:8c:83:d5:8a:9b:2f:
e7:b1:f1:da:60:80:ed:75:63:84:72:41:8a:96:30:
9e:fa:49:75:1b:1e:12:5a:8e:88:7f:68:ae:aa:84:
6b:af:2f:66:53:2b:ff:08:d3:9e:48:dc:ec:8b:9c:
b5:ff:dc:78:be:67:45:67:7e:84:a1:29:85:ed:b4:
03:e8:0d:4c:2d:fd:b8:3a:ae:ef:a6:e8:e8:f4:38:
11:bb:e0:4a:3f:e9:2f:db:ac:f5:13:8c:ec:12:a3:
fe:90:bd:ca:ee:3c:98:8c:0d:e0:79:82:dd:86:ae:
a3:72:96:b6:b9:a5:8a:c3:61:59:03:0f:28:2e:11:
1f:79:5a:56:ae:e8:05:26:86:e2:b6:d2:86:df:db:
cd:42:c6:ef:54:2e:0c:f8:d4:dd:96:3a:cf:74:c4:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:17:EC:AF:D7:EC:A1:91:9C:FD:FC:20:FC:CD:8C:30:AB:48:CC:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/665DC1740DB211EFBC049605017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.248.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:b9:a8:2f:5d:04:89:6a:f5:eb:cc:b3:c6:1d:70:eb:f0:12:
9f:17:17:0e:a0:f1:c7:f8:72:9f:cd:c0:d6:2d:c8:b1:85:18:
a5:b5:c8:6d:bb:91:eb:49:43:f2:21:f3:9a:8f:80:22:0a:28:
01:a7:c4:5e:41:e2:72:66:29:61:2e:a3:d4:92:d2:4f:9e:a6:
77:9c:3b:83:6d:4d:f4:3c:e2:7c:84:ca:01:c2:ce:29:38:bc:
91:08:e8:38:1d:f4:29:b4:62:1c:8b:4c:35:f6:e3:86:93:37:
3a:20:76:6e:bf:c8:dc:8b:ae:f4:c9:6f:67:c8:9d:72:d4:b2:
38:0d:f7:06:d4:5c:dc:93:d8:d3:70:e0:0f:03:a2:05:12:e9:
da:98:4a:e5:4c:d6:7c:25:88:68:43:dc:ab:4c:5c:a4:c7:10:
c5:32:47:53:86:82:3a:d4:19:1f:e6:6d:dc:4a:a8:31:ae:55:
07:40:b1:92:fa:36:89:90:52:11:42:22:a3:dd:e0:04:22:38:
d3:8a:27:74:a7:e8:d0:7a:cf:5c:20:2d:3a:0c:bf:33:5e:9d:
92:6d:8d:4b:5a:7c:ba:85:9d:08:2a:92:0a:4a:94:78:ef:49:
ed:23:ca:b1:04:c5:6f:81:a4:9a:df:8a:3a:7f:b5:db:78:61:
4d:0c:30:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:08:29 2024 by rpki-client on console-ams.rpki-client.org