Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8052568807AB11EF85222868017001B1.roa
File: 8052568807AB11EF85222868017001B1.roa (raw, json)
Hash identifier: UO9Q7bv1IkjsD8VSzQ5ubh5Jb/86xwbavgF/co2/sq8=
Subject key identifier: D7:B8:A7:50:D2:D5:33:89:EA:7F:16:44:4D:A2:44:F9:4D:C9:3A:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B374
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8052568807AB11EF85222868017001B1.roa
Signing time: Wed 01 May 2024 11:11:05 +0000
ROA not before: Wed 01 May 2024 11:11:01 +0000
ROA not after: Sat 11 May 2024 11:11:01 +0000
asID: 142062
IP address blocks: 154.206.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45940 (0xb374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 11:11:01 2024 GMT
Not After : May 11 11:11:01 2024 GMT
Subject: CN=66322348-d8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e6:c8:91:8e:61:a3:e5:5c:ad:3f:9b:3b:80:
6f:c3:f7:f4:87:ff:53:84:51:d5:ae:c1:44:06:99:
71:b4:7f:bb:95:c1:0f:e2:f0:9e:46:55:57:22:29:
97:12:8e:12:94:fa:61:04:37:65:bc:f4:ad:b5:f1:
f8:d5:ab:5c:35:d6:e5:6c:ea:b9:56:a3:b6:f8:9a:
7d:63:92:d8:d8:cf:a2:d0:3c:00:2d:17:93:7c:39:
26:f5:04:5b:b4:66:e3:e4:ad:ec:e0:19:78:29:50:
f0:cf:82:16:a8:b4:7b:3b:1c:23:09:b1:5f:08:53:
67:0f:a6:4e:a3:a1:44:0b:63:81:ff:8e:a2:1a:aa:
57:49:da:79:dd:b8:9a:fc:26:ad:16:ec:7e:0f:0c:
43:fa:d8:e0:01:81:c0:be:6e:e0:eb:41:80:a0:a0:
78:72:e8:f3:5e:42:25:d2:f1:34:2a:98:a3:c5:bf:
13:32:bb:24:58:34:17:58:57:25:94:45:9b:b0:17:
f1:7f:4b:42:75:f0:5d:5b:3b:10:13:a4:87:8f:ef:
76:65:06:5c:53:03:29:52:8a:71:2e:b5:80:64:8e:
27:4f:c4:93:49:f7:bf:75:a6:2b:30:76:c9:21:d5:
85:4e:5c:59:de:3d:d7:aa:68:1d:cc:2f:30:1b:78:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B8:A7:50:D2:D5:33:89:EA:7F:16:44:4D:A2:44:F9:4D:C9:3A:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8052568807AB11EF85222868017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.193.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ae:fe:3a:49:94:ed:13:61:75:bf:f3:93:1d:c7:68:c6:22:
b5:15:55:92:bc:6c:9c:3c:e3:fa:c0:df:8c:0b:1d:5c:0c:6c:
61:93:2a:52:2c:22:bf:7b:94:e4:f8:c3:7b:68:ae:e1:31:b5:
9b:32:9e:cc:cb:d9:d1:8d:e9:b4:65:cb:5e:23:80:44:3a:a9:
d7:3f:a6:82:a9:a9:a6:e5:c5:98:cc:1f:93:2b:c5:af:3c:85:
9f:d2:df:cb:d5:fd:6c:12:59:20:ff:ce:6f:d4:24:92:e8:15:
0f:cd:6c:82:f7:32:9f:47:50:fe:8d:b0:87:8d:44:16:f3:15:
3a:d4:56:21:39:4d:ad:1b:d1:57:03:e4:53:49:d3:b4:4f:fb:
91:3a:f7:aa:43:d1:e2:f5:87:5b:2c:53:89:27:cc:6e:97:8a:
a5:4e:d9:06:9f:23:48:81:c2:31:46:dc:d5:c1:15:dd:82:27:
8d:cc:b1:74:9b:8b:39:ab:e1:5f:ec:74:e6:0a:b6:8f:83:13:
10:e5:3e:9c:82:c5:60:1a:76:f6:8c:7b:6d:70:40:da:de:27:
4b:df:3e:7b:4d:48:f7:50:8e:e5:12:3d:92:69:e4:63:a1:b9:
7b:a9:d9:8b:00:16:40:2d:9e:59:91:69:a4:5d:12:a7:3b:ee:
95:62:96:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:47 2024 by rpki-client on console-fra.rpki-client.org