Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87F0C000014311EFA4CE272F017001B1.roa
File: 87F0C000014311EFA4CE272F017001B1.roa (raw, json)
Hash identifier: NwQStsRgdaTRdH98/qGyGD9ZBQeNWgj1oKhpvBtAE6M=
Subject key identifier: 4E:DE:B3:B4:1C:94:8B:33:09:D3:90:2D:AD:CA:9F:ED:D0:86:6A:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AEE9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87F0C000014311EFA4CE272F017001B1.roa
Signing time: Tue 23 Apr 2024 07:31:43 +0000
ROA not before: Tue 23 Apr 2024 07:31:39 +0000
ROA not after: Sat 11 May 2024 07:31:39 +0000
asID: 7029
IP address blocks: 154.194.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44777 (0xaee9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 07:31:39 2024 GMT
Not After : May 11 07:31:39 2024 GMT
Subject: CN=662763df-81ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:c4:af:19:38:b2:91:e9:49:8f:c2:5d:ba:
83:53:1b:4e:5b:ce:f1:52:a2:b2:2f:cb:f1:24:d6:
94:9a:84:df:c3:63:4e:51:0f:60:9c:64:56:6c:35:
3e:3a:63:38:5b:ea:8d:b6:6d:ad:c3:19:2d:39:84:
a8:9a:da:14:61:7a:79:9a:bd:bd:a8:51:11:96:ce:
67:bf:0f:b3:aa:ea:5d:9a:fd:dd:e9:76:c2:af:d8:
5b:26:90:bd:3a:23:87:1d:b9:d3:a6:b1:0c:a2:6e:
78:cf:51:74:fb:42:ba:c1:c4:c9:47:ed:ea:b2:37:
61:b9:3c:92:55:4a:16:22:74:31:dc:1c:84:a6:ee:
f5:13:80:ab:9d:1d:7c:65:15:11:ff:45:c0:df:eb:
29:23:7e:e1:90:c2:68:ac:3d:8f:5d:10:1e:f1:6a:
03:bf:bb:47:d7:0b:70:ac:54:8a:92:fd:7f:c5:c6:
4e:1e:51:9f:03:0a:c7:5d:9d:0e:d1:11:2d:75:20:
6c:35:9c:33:2d:60:28:26:6f:94:72:b2:cd:84:c7:
6e:1f:b1:9c:d5:7e:c3:ed:f9:c5:17:14:21:48:0d:
63:77:e0:6c:07:87:aa:6a:8d:41:69:0d:c7:14:39:
59:b9:bc:4e:1d:aa:39:8b:cd:cb:d5:fb:36:b8:87:
45:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DE:B3:B4:1C:94:8B:33:09:D3:90:2D:AD:CA:9F:ED:D0:86:6A:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87F0C000014311EFA4CE272F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
26:8d:9f:72:ca:9f:ab:1c:a8:6f:6b:6c:f6:c4:65:cc:78:61:
de:4f:ed:b9:05:7d:0e:16:93:c9:2a:c7:d6:14:7d:df:45:1a:
90:79:6c:be:0b:3c:5a:00:07:27:2d:44:20:ae:d9:d6:58:f3:
3c:19:34:6b:4b:a0:8e:2a:f4:ff:f5:9c:2a:62:53:b9:cc:85:
0c:f6:7c:60:54:3b:09:78:89:b9:25:4d:42:b2:53:98:fd:98:
3c:5e:c7:23:f7:c9:b3:6b:44:d4:0f:81:55:af:8c:20:5d:be:
7b:9a:89:c1:61:54:3a:b0:c4:6f:5c:99:f9:c1:cb:ee:08:6c:
54:8d:72:b6:96:54:24:ba:1c:33:85:14:c3:99:04:aa:16:bf:
47:57:5a:6e:d5:25:12:c5:f6:7f:59:de:62:35:44:3b:97:fe:
4b:85:61:74:08:8e:6c:b2:b1:df:c1:62:f2:df:e1:e2:f8:e0:
53:d1:12:6d:f1:3e:6f:be:a7:8b:de:75:18:29:dd:c9:41:67:
a9:5e:c4:c7:ba:2b:7d:34:8b:6d:97:8f:6e:79:f5:fd:e9:64:
7d:9e:0c:3b:d2:97:18:d2:36:49:74:b2:5c:38:02:97:91:8c:
35:01:88:a8:63:45:b6:5c:75:d9:62:09:f4:81:cf:2b:ca:14:
bc:b8:29:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:21 2024 by rpki-client on console-ams.rpki-client.org