Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE27C932CCA711EE8BAFC261775412E6.roa
File: BE27C932CCA711EE8BAFC261775412E6.roa (raw, json)
Hash identifier: QnsO7iaKGoV8qGBy6L+p5iN5nck+rVw/ClLuUzSpN+s=
Subject key identifier: F4:08:A1:7C:92:46:53:D7:AB:39:40:8F:B1:6D:DB:B3:26:7E:BC:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8A45
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE27C932CCA711EE8BAFC261775412E6.roa
Signing time: Fri 16 Feb 2024 08:45:32 +0000
ROA not before: Fri 16 Feb 2024 08:45:28 +0000
ROA not after: Fri 26 Apr 2024 08:45:28 +0000
asID: 9009
IP address blocks: 154.218.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35397 (0x8a45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 08:45:28 2024 GMT
Not After : Apr 26 08:45:28 2024 GMT
Subject: CN=65cf20ac-e4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:4e:f5:15:46:a1:5c:d1:f9:8b:5a:65:a6:
87:77:7e:f4:9b:29:50:80:3f:47:be:fb:39:5c:43:
bf:5d:b5:ca:fc:df:ea:ed:f8:fa:3f:dd:ae:68:53:
f7:07:d1:7e:1f:ce:79:d2:9a:28:31:63:84:7e:ab:
e4:83:71:b0:f2:0f:7a:cd:77:df:5f:af:80:fe:33:
d6:ab:6c:c3:62:23:dd:5a:75:e0:43:05:e0:3a:cf:
86:3c:25:b0:1a:60:fd:88:7c:77:09:4f:dd:f1:96:
4f:71:9b:98:cf:1b:5f:00:d2:0f:0c:d9:c9:71:da:
0a:d5:0b:61:06:08:ed:35:78:19:ac:28:09:fc:40:
ef:f0:1f:0b:a5:3a:f7:17:8f:9a:d6:29:c3:cd:d6:
ca:bc:d9:7a:82:e1:fa:a8:f5:36:66:18:c9:cd:9c:
67:47:36:e7:e5:34:62:ad:d1:3d:97:af:c9:f8:67:
69:aa:45:35:69:63:16:64:92:f4:6e:e1:f6:ed:f1:
0c:96:dc:bb:49:57:da:3d:25:06:a2:b3:72:51:b2:
3d:cf:8e:61:a6:59:d9:22:ec:a4:0d:65:13:94:eb:
10:35:44:f7:e6:d5:43:b3:be:86:1b:cf:c2:e6:0b:
53:5e:58:54:49:2f:ca:40:99:e5:87:0b:5e:e8:84:
45:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:08:A1:7C:92:46:53:D7:AB:39:40:8F:B1:6D:DB:B3:26:7E:BC:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE27C932CCA711EE8BAFC261775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.207.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:08:98:0a:de:fe:d2:fb:52:28:31:ad:f5:bc:14:9a:93:e5:
4b:69:1e:7f:e2:7a:46:3f:09:68:00:ad:73:81:5f:e5:dc:cb:
90:03:71:e4:78:f5:fc:c1:66:c5:a4:50:25:7d:f7:f2:e6:86:
9d:0e:10:be:9d:f2:28:ef:0f:69:5c:87:9e:64:be:ad:4a:37:
85:33:3f:78:78:75:bc:b4:10:2f:28:fe:39:04:60:08:cd:1d:
4a:70:8c:a6:18:f3:90:88:70:e0:af:06:b8:96:fa:d9:2a:df:
fb:7b:5e:ff:18:fb:47:5e:11:c7:5e:07:fc:1e:fe:29:b8:e4:
24:b5:00:39:b2:98:64:c0:d6:da:65:d0:f9:d6:12:07:95:f1:
bf:3d:bd:9c:9d:be:08:8b:96:5d:b7:0b:ef:ce:4d:0d:bd:27:
e4:fb:53:9a:9b:f4:8d:f3:70:92:98:12:2e:fd:5e:f4:eb:62:
d5:c7:9c:99:5a:ed:ca:96:d7:2e:c8:88:c3:bc:23:88:1b:41:
e2:b5:89:60:7e:45:b8:a7:77:db:18:6b:95:90:6d:0b:22:8c:
43:f2:91:42:0e:7d:bc:96:6d:22:f3:58:87:8c:59:75:69:54:
37:1c:49:79:00:64:a9:09:75:8a:03:bd:90:28:1a:ba:63:5a:
2e:4c:5d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:47 2024 by rpki-client on console-ams.rpki-client.org