Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75AB89FE077211EF91A30921017001B1.roa
File: 75AB89FE077211EF91A30921017001B1.roa (raw, json)
Hash identifier: rmanIK2JCZ/AC9N8+5MKhQBRPoaIyGjYT4XFUneP7Ws=
Subject key identifier: 26:B7:C3:53:07:67:BE:90:23:E7:4A:1F:1E:23:65:A7:A0:82:B0:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B304
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75AB89FE077211EF91A30921017001B1.roa
Signing time: Wed 01 May 2024 04:22:45 +0000
ROA not before: Wed 01 May 2024 04:22:42 +0000
ROA not after: Sat 11 May 2024 04:22:42 +0000
asID: 142062
IP address blocks: 154.206.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45828 (0xb304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 04:22:42 2024 GMT
Not After : May 11 04:22:42 2024 GMT
Subject: CN=6631c395-95a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:39:fa:3c:6e:0f:5f:ed:39:75:b4:9d:78:de:
7e:11:41:f2:0c:75:ed:35:eb:80:58:1d:d1:0a:9b:
7b:c3:c2:7a:79:a0:dc:a6:67:fe:cb:26:1f:ac:be:
dc:7c:24:ee:03:30:d9:3a:c0:a5:b7:05:a1:00:65:
fe:51:a4:0c:9f:0a:78:fd:53:a5:13:0f:75:89:6c:
9f:10:13:ab:44:8c:66:9a:50:ad:de:99:47:9c:86:
01:6f:4d:26:c3:cc:c8:2a:5b:e4:e9:0a:11:e1:90:
39:a3:98:01:e0:7f:d7:15:8f:f2:3a:62:ee:23:6c:
78:5e:cf:90:9f:72:cd:83:7d:2e:44:da:fe:cd:a9:
b3:cd:4c:f7:c9:b8:d6:46:62:27:7f:60:22:16:e0:
35:3c:0a:61:73:09:ca:dc:2a:51:a1:e5:66:5c:4f:
ac:0d:d0:73:53:11:c1:30:0c:39:f1:d4:8c:74:4d:
f2:ea:4f:3b:55:fa:5f:20:be:8a:5b:3e:b2:96:0f:
b5:2c:53:b7:9e:4f:a1:01:d3:4d:f0:4b:a6:e4:2f:
0b:f0:df:c5:3d:14:77:48:6c:dd:c0:89:d6:dc:dc:
7b:88:98:ae:a5:31:35:37:58:cd:fb:2a:e4:6b:a8:
a9:df:6a:e7:d6:52:7e:90:bf:c2:c6:9f:6b:b9:52:
da:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B7:C3:53:07:67:BE:90:23:E7:4A:1F:1E:23:65:A7:A0:82:B0:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75AB89FE077211EF91A30921017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.201.0/24
Signature Algorithm: sha256WithRSAEncryption
83:67:99:9c:20:f5:5f:e1:fa:03:8a:b0:ca:12:cc:80:d5:ed:
91:33:2b:56:4c:ea:c3:56:97:21:19:7b:c0:5d:fc:11:a3:f7:
b2:93:45:86:9a:90:1e:65:6f:9e:2d:01:e4:51:3d:a6:5a:39:
af:f5:ea:53:68:5e:d6:88:59:7d:8c:06:b6:48:65:f8:2c:cc:
0b:19:a8:e2:05:7a:90:7a:36:73:7f:94:46:11:f4:13:d7:e2:
af:f1:da:ab:3d:26:15:93:40:13:51:90:70:ff:47:13:ce:ff:
e4:52:54:25:a0:d4:33:f4:d7:19:bf:16:f2:6e:4d:38:bd:29:
bc:fb:52:c5:1f:15:1f:0c:a1:14:10:2b:17:ed:fe:41:02:fc:
79:bf:85:40:16:06:db:1b:26:27:85:a0:23:bb:4f:49:ee:29:
56:a6:02:d4:51:0a:31:12:ef:1e:ab:d7:90:44:c0:e4:ad:df:
f4:91:1e:5e:af:bf:6b:ad:e8:ec:98:d0:98:8d:e9:f8:55:22:
46:ff:b0:83:e5:16:05:95:83:a8:a7:e3:df:ed:c4:c8:61:79:
c5:51:22:8b:f2:ea:f6:5d:fc:9f:3c:fa:9e:0a:a4:cb:ff:9b:
8b:02:ab:7f:50:ef:21:3a:cd:62:2d:75:c8:00:f8:8c:04:8c:
e3:c1:2b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:20 2024 by rpki-client on console-ams.rpki-client.org