Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5483292037B11EFAFA9024B017001B1.roa
File: B5483292037B11EFAFA9024B017001B1.roa (raw, json)
Hash identifier: LItioSayoDyrj/A7ZbAtb9CH+Z2JHtlLZBryGlugVgA=
Subject key identifier: 54:E1:59:FC:0A:F0:57:00:6F:50:2E:61:07:D1:A9:9A:7E:09:13:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B122
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5483292037B11EFAFA9024B017001B1.roa
Signing time: Fri 26 Apr 2024 03:18:53 +0000
ROA not before: Fri 26 Apr 2024 03:18:50 +0000
ROA not after: Sun 26 May 2024 03:18:50 +0000
asID: 62240
IP address blocks: 154.194.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45346 (0xb122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 03:18:50 2024 GMT
Not After : May 26 03:18:50 2024 GMT
Subject: CN=662b1d1d-d01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:7a:75:8d:fd:a2:45:04:de:25:56:66:f1:
38:e8:e5:5b:80:9b:f3:81:7a:fa:aa:a0:27:06:40:
78:2d:35:93:72:89:6a:c5:29:b4:86:de:13:78:a7:
88:c8:ef:e4:51:3a:60:e0:d8:bb:d3:2b:67:af:9a:
4c:01:4d:9e:e8:51:89:e8:fa:62:ca:21:f8:5c:05:
21:26:76:e2:6c:41:21:05:57:7e:35:c5:7f:1e:62:
f2:db:45:58:00:98:65:2b:0c:40:cd:ad:2e:da:62:
bf:06:90:c5:15:6d:fa:4d:54:db:c8:08:22:4d:0d:
ab:03:b8:4c:7c:74:46:35:93:4a:48:ff:bb:f3:7b:
1a:2a:8b:e6:8f:4f:e4:20:51:a2:56:37:7f:70:37:
98:0b:1a:55:87:bb:cf:db:a0:be:25:31:47:17:45:
c6:e0:dd:eb:72:5f:e6:13:4a:f0:99:88:44:f4:e3:
5b:19:c5:a0:57:03:d0:f9:4c:f3:43:8b:a8:45:49:
5a:4e:06:c7:ed:52:dd:74:5f:2b:90:08:62:7f:af:
44:d1:fe:1b:88:82:73:b1:c7:f7:64:14:78:ac:b6:
56:63:11:ab:20:c9:1e:f8:39:77:9e:45:9a:57:12:
4d:ee:39:c0:b1:79:5f:d7:b3:0d:65:d4:69:0c:28:
61:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E1:59:FC:0A:F0:57:00:6F:50:2E:61:07:D1:A9:9A:7E:09:13:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5483292037B11EFAFA9024B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.7.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:b3:12:c1:29:c4:74:fc:39:74:b8:76:1a:21:68:8b:d1:ef:
45:6a:ca:df:18:87:d9:ea:96:52:d7:4b:32:50:73:cf:09:64:
40:05:64:73:0f:e0:db:19:eb:6e:d1:df:fa:4f:b1:62:83:e4:
02:21:c6:cf:50:8b:48:b0:52:c4:b5:db:6c:b5:67:c9:30:9c:
2f:eb:c0:da:82:ab:65:85:9e:71:bd:1f:aa:ac:8e:15:58:e6:
69:45:27:05:62:7a:1d:12:a2:87:0f:72:f0:ce:d8:4e:e1:ff:
78:54:b2:5c:e1:04:9e:d5:c2:2d:b4:1e:6f:c6:d9:d8:6f:c6:
36:c6:ea:38:14:24:2f:c0:2c:24:ad:05:b7:c9:c1:a0:02:bd:
27:96:ab:cb:48:1d:bd:19:cf:c3:b3:e4:59:c4:0f:bd:03:27:
ff:9f:40:43:58:17:47:9d:59:60:b5:a2:57:28:25:53:a6:6e:
0b:17:5a:75:ad:04:8e:42:28:4d:4f:60:b1:1f:a8:27:19:8a:
27:2f:bd:cd:c4:c2:98:2c:3f:71:ff:be:e3:ee:5f:38:83:c2:
f7:27:11:e4:8e:3c:46:bb:d7:06:28:fd:25:e9:60:4a:17:5f:
27:6e:48:e2:ea:83:87:de:b9:c5:33:15:67:b6:04:de:91:5c:
34:df:b6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 03:45:17 2024 by rpki-client on console-ams.rpki-client.org