Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C544EE9E07AC11EFBD526BF4007001B1.roa
File: C544EE9E07AC11EFBD526BF4007001B1.roa (raw, json)
Hash identifier: qfzEJh47D9UvfPGj2HowOwFo+Lurtiqm3SozvYTxeQw=
Subject key identifier: 8D:9B:7C:C6:1B:72:37:EB:42:B3:AC:6F:5F:AB:D1:B7:7B:25:E4:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B387
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C544EE9E07AC11EFBD526BF4007001B1.roa
Signing time: Wed 01 May 2024 11:20:10 +0000
ROA not before: Wed 01 May 2024 11:20:06 +0000
ROA not after: Thu 16 May 2024 11:20:06 +0000
asID: 136778
IP address blocks: 154.212.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45959 (0xb387)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 11:20:06 2024 GMT
Not After : May 16 11:20:06 2024 GMT
Subject: CN=6632256a-94d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f6:8c:ee:bb:cc:3e:79:25:f5:62:9a:90:32:
8e:b9:06:a2:cd:51:2e:55:f4:ec:a1:de:b6:93:94:
f3:06:13:06:24:7b:55:d1:c2:c8:5f:ba:26:09:b7:
41:00:52:6d:7e:6e:ea:ef:82:f9:0a:c7:3f:88:3d:
1d:5b:b4:0c:2a:f7:72:a7:32:93:f4:34:13:be:68:
7f:f4:df:2a:72:83:d9:dd:d3:2a:d7:3a:db:e7:99:
d9:5f:dc:fb:1e:7a:79:27:a7:1c:66:65:c1:5e:83:
ea:47:d0:e3:2b:82:8c:62:74:89:32:27:7c:94:0e:
61:09:5b:d2:1a:fa:c9:ca:76:a0:6b:37:e4:7f:e4:
fd:35:1f:6c:14:56:36:94:65:cf:5b:27:d6:21:56:
a6:0a:c2:e1:a8:5c:07:d4:d8:fd:53:14:9b:23:7a:
7e:aa:70:89:89:88:25:eb:09:51:97:c7:f4:c9:96:
b6:ea:94:65:0d:20:90:8c:5a:4e:12:55:49:ef:e8:
e8:e3:47:4f:a8:cd:96:e0:78:35:0c:fa:b7:d2:38:
dc:19:f3:1c:67:06:1f:f5:ad:72:65:a8:ff:45:9c:
18:35:57:4f:9f:09:29:6f:27:0a:7a:87:20:9d:f8:
3f:7d:d2:cb:7c:cf:5a:a6:2c:22:4d:0b:f2:98:ae:
cf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9B:7C:C6:1B:72:37:EB:42:B3:AC:6F:5F:AB:D1:B7:7B:25:E4:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C544EE9E07AC11EFBD526BF4007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.146.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:e6:ce:b1:5f:ab:03:ba:9c:cf:a9:de:c7:20:cb:5f:9e:99:
0f:bf:2e:97:7c:2d:f2:74:5f:9a:56:5a:b4:6c:bb:92:1f:e8:
c0:c8:fe:84:9a:4c:10:a5:83:53:ed:ce:a4:2d:23:c4:df:4c:
5d:22:64:b0:3f:fe:ae:65:27:a8:ed:2f:f7:ab:d9:21:54:42:
13:ba:1e:79:17:26:2d:43:0d:fd:1f:3c:22:9b:ca:3c:b3:c8:
a9:37:48:7e:1e:2f:a4:a4:db:db:b0:d5:66:67:86:e3:61:e4:
e9:5c:5e:a1:f5:17:68:bf:29:e4:c2:1e:6a:46:c3:da:be:fe:
3d:8c:e4:40:5d:8d:84:7c:0f:c5:c8:90:26:8c:fe:4a:d0:8b:
c4:ed:9b:63:64:c8:a5:d2:1f:05:e0:76:ae:b6:0c:5e:11:12:
d0:73:4d:7b:12:f5:f5:d3:fe:98:bf:b3:8a:ab:2c:d7:cf:18:
39:28:0e:9f:26:0b:b7:ca:46:b9:a9:00:5b:cf:73:31:00:fe:
70:d1:1f:60:08:ae:1d:96:c6:d3:fb:07:29:36:2b:7c:13:57:
16:35:84:7b:92:fe:4c:f4:d9:f8:3f:de:82:cc:1f:7d:ce:6b:
4e:89:01:6c:d8:19:a4:8d:52:6c:04:d2:1b:6a:aa:92:6c:6a:
9a:28:90:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:22:08 2024 by rpki-client on console-ams.rpki-client.org