Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BF32048088211EF9A631E3F017001B1.roa
File: 9BF32048088211EF9A631E3F017001B1.roa (raw, json)
Hash identifier: G/tZYij08EktU0aLlKg7Axfm30Lv2BabYzv9mwXNGUI=
Subject key identifier: C7:7B:62:20:95:73:C2:86:08:17:32:94:6A:FD:CD:DC:4F:97:17:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B3B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BF32048088211EF9A631E3F017001B1.roa
Signing time: Thu 02 May 2024 12:50:53 +0000
ROA not before: Thu 02 May 2024 12:50:48 +0000
ROA not after: Sat 11 May 2024 12:50:48 +0000
asID: 328608
IP address blocks: 154.219.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46000 (0xb3b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 12:50:48 2024 GMT
Not After : May 11 12:50:48 2024 GMT
Subject: CN=66338c2d-31c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:71:3b:5c:01:97:9b:0f:e9:71:f5:16:94:
88:1b:f8:5b:c1:36:d4:3e:43:64:3d:b3:53:ff:6a:
e1:fd:62:81:7d:31:0b:52:05:90:af:08:da:8c:a5:
b5:38:00:e4:17:ce:8f:e8:ba:0f:5e:68:e2:1b:a6:
aa:08:9d:0c:cd:c3:53:4c:5b:c2:f5:da:b1:e3:73:
3b:ed:ea:3e:dd:f7:56:cc:32:2d:91:1f:11:b4:56:
03:a8:9d:96:ed:32:4a:d1:37:54:2c:10:f0:e7:84:
3e:56:7a:db:19:c2:a9:11:de:f8:1c:84:e1:ba:89:
94:80:ab:19:15:12:fd:7c:66:f9:c0:ef:c7:57:ef:
8c:fc:5e:36:cb:02:94:89:bc:1d:d7:9f:12:c5:2d:
83:5c:49:b0:3c:01:b7:55:d9:e3:1c:18:27:40:ee:
cf:d0:36:a5:c3:ef:71:8b:ec:4e:73:3f:2a:7e:6a:
23:dd:96:0d:4d:e8:01:a5:02:29:d5:fa:40:18:35:
29:57:d1:5c:67:bb:37:3e:71:5e:9a:93:74:7e:ac:
6b:a0:08:fb:3c:4d:da:fb:28:a3:59:14:06:82:72:
ff:7e:1f:09:d7:47:11:19:94:5e:aa:9c:4b:2a:1e:
8f:eb:3d:47:f2:68:e9:11:85:93:79:d4:d5:6f:75:
78:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7B:62:20:95:73:C2:86:08:17:32:94:6A:FD:CD:DC:4F:97:17:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BF32048088211EF9A631E3F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.128.0/19
Signature Algorithm: sha256WithRSAEncryption
66:eb:2c:67:3b:b4:5d:bf:e4:7b:5e:ab:ff:86:fb:15:7c:48:
a4:30:1b:38:5b:34:3e:00:35:11:b2:5e:d9:f3:49:5e:f4:bb:
d0:49:4d:80:31:37:7e:6d:c2:22:97:a7:24:9c:85:c7:47:50:
55:d8:65:32:9f:e5:83:5a:63:82:df:51:a1:7e:8d:d2:b7:89:
cb:c4:48:81:06:ac:30:0d:df:f4:3c:db:e8:d7:2f:78:c9:68:
ed:ac:8b:ca:f0:72:21:4c:77:e9:6a:5c:0b:e9:ff:b3:e4:19:
04:a0:77:03:40:c6:74:58:35:d4:fc:02:99:0a:9f:3b:81:71:
da:09:94:60:2c:22:d6:6b:4e:af:85:81:9a:d3:d2:7f:24:e7:
7a:0f:d6:cd:69:01:cc:6f:13:2d:c7:99:a2:08:b8:20:d7:ad:
7f:05:f6:fc:68:db:2e:43:e8:e6:d1:c1:75:f0:97:8c:78:56:
74:c3:ea:1e:9f:92:cc:ef:58:d6:3e:03:c8:32:f2:30:5a:48:
5f:49:a5:c3:84:c8:90:db:e6:42:ca:f4:00:71:c7:6d:a8:f8:
26:1e:56:3e:08:56:07:ec:55:35:f8:50:6d:7f:28:01:dc:f5:
45:c9:b7:9e:64:0e:a9:78:a6:d9:6d:b4:25:b0:fa:f4:75:25:
5f:4d:c0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:21 2024 by rpki-client on console-ams.rpki-client.org