Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3E03EAC07B111EF965B701C017001B1.roa
File: A3E03EAC07B111EF965B701C017001B1.roa (raw, json)
Hash identifier: Sb8/TqiPHtJSqiAXzkLTteo+Y1q73hzBOV+aPSz0TdU=
Subject key identifier: F8:54:9F:0C:4F:C6:AB:0E:08:88:D7:25:41:39:4E:4D:B4:69:29:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B3AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3E03EAC07B111EF965B701C017001B1.roa
Signing time: Wed 01 May 2024 11:55:01 +0000
ROA not before: Wed 01 May 2024 11:54:58 +0000
ROA not after: Sat 11 May 2024 11:54:58 +0000
asID: 44559
IP address blocks: 154.223.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45997 (0xb3ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 11:54:58 2024 GMT
Not After : May 11 11:54:58 2024 GMT
Subject: CN=66322d95-3ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cc:71:8e:58:a3:f5:f1:d2:25:e2:95:77:bb:
53:68:9f:18:a7:bd:65:9e:fb:93:b7:ff:a5:b2:5d:
c5:ee:31:95:a0:17:63:75:3b:3e:1e:d7:38:bc:ee:
f5:5b:9e:8b:e9:61:f3:89:15:91:69:c9:10:db:e2:
4c:9f:20:88:a0:fd:4d:23:f7:e7:f4:7d:70:90:99:
da:29:8a:b2:c7:94:52:80:20:82:7e:d1:23:14:05:
80:e2:ee:7f:df:c0:3b:dc:93:50:d5:45:79:63:c6:
ad:51:6a:55:2c:94:1c:d9:56:f3:5b:9f:2e:29:02:
ea:c7:8f:bf:d8:be:b9:d6:77:60:c7:06:6c:38:40:
a1:e4:5f:ac:b2:99:c0:cc:f7:89:62:d6:04:e1:45:
c0:84:a0:0a:4a:4e:18:2c:f9:0a:fd:3f:a7:18:59:
36:4e:ff:44:e5:c2:61:02:de:fc:a6:ce:d2:8f:21:
92:fd:a6:52:3b:51:e9:44:25:9b:7d:46:89:c0:2a:
1e:33:22:ab:29:3a:20:ca:46:02:67:55:89:34:0c:
49:f9:16:b2:4c:ba:c3:29:ad:a7:24:b0:14:97:75:
7b:e7:74:ab:e6:ee:03:99:d0:c1:37:81:2d:53:63:
7e:7c:ec:d0:43:7b:96:79:68:4c:6d:28:30:b3:e8:
5b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:54:9F:0C:4F:C6:AB:0E:08:88:D7:25:41:39:4E:4D:B4:69:29:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3E03EAC07B111EF965B701C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.192.0/18
Signature Algorithm: sha256WithRSAEncryption
c2:eb:79:c6:3f:04:cc:2a:cf:be:73:44:f5:f2:cd:66:e5:9d:
cd:51:3a:d9:7a:13:97:2b:ea:81:b8:2a:33:e3:12:71:9d:3c:
07:ef:e6:b0:8b:7e:5a:98:2d:37:44:e6:c5:5e:e6:e9:17:8a:
30:4f:7f:63:51:3f:ca:c9:b1:1e:73:c8:66:a6:b4:5b:47:e6:
4a:06:1d:d7:37:da:5a:c0:45:9d:f9:92:4a:39:e2:0d:ec:a9:
90:12:c5:e3:10:1c:49:9f:70:73:3d:83:d3:ea:44:00:ec:61:
30:21:99:3b:50:ed:da:e0:00:ff:0f:16:d0:23:76:63:a4:eb:
7a:de:ff:1e:1a:fd:75:78:73:0c:95:7f:75:6e:a1:76:d6:99:
f9:fc:99:a2:9b:8e:8f:63:89:66:b8:25:45:af:67:f5:d7:6b:
5f:3b:84:38:be:a4:76:8b:84:ac:ab:6b:15:6e:b0:a5:48:36:
b1:71:c5:fd:f9:75:a8:7b:66:1c:8b:92:28:2f:7e:71:8c:40:
7c:cb:85:e5:32:15:25:9c:4d:22:12:3a:ff:96:8e:20:9c:34:
ef:f1:ab:52:7a:db:aa:a8:c9:c0:17:07:9b:6e:e7:11:47:e1:
65:ea:19:e8:85:db:35:a8:81:c3:ae:a4:e9:5c:8b:72:d1:e4:
07:3b:6e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:21 2024 by rpki-client on console-ams.rpki-client.org