Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC1BE58407B011EFA4147D15017001B1.roa
File: CC1BE58407B011EFA4147D15017001B1.roa (raw, json)
Hash identifier: xjor28QuIAGQ8hprPPUsKZquouC7v8UkosKqZjFt8XA=
Subject key identifier: 71:77:3D:E8:2F:98:25:59:16:FE:15:AF:31:5A:AF:10:2C:A2:AA:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B3A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC1BE58407B011EFA4147D15017001B1.roa
Signing time: Wed 01 May 2024 11:48:59 +0000
ROA not before: Wed 01 May 2024 11:48:56 +0000
ROA not after: Sat 11 May 2024 11:48:56 +0000
asID: 44559
IP address blocks: 154.203.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45989 (0xb3a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 11:48:56 2024 GMT
Not After : May 11 11:48:56 2024 GMT
Subject: CN=66322c2b-984f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:93:5c:4e:c6:69:3b:3f:9a:49:e8:a6:d5:47:
4a:d6:3e:e9:f4:0e:91:9c:38:0f:e2:6b:13:a3:d0:
a7:ec:f8:20:16:61:dc:e3:41:2c:fe:7b:75:e9:1d:
e1:08:3c:d8:ba:76:ce:bf:b3:0f:fc:62:ab:50:c3:
70:7b:ac:26:4b:a7:c1:23:fb:bc:26:b9:8e:ba:e6:
3b:1c:1a:57:2e:e2:17:f2:b2:54:88:5f:1c:a2:e3:
a6:4e:97:76:bd:c3:69:bf:38:c2:8f:63:54:24:51:
5d:45:27:3f:55:af:f6:46:0a:4d:7f:df:55:1e:b9:
da:bc:9c:f5:4e:f5:86:56:e3:34:6c:38:a3:e1:16:
84:57:cb:a9:a7:99:0c:da:5d:f5:5a:b6:48:b4:b0:
52:74:aa:a3:06:0d:26:84:db:39:37:80:90:de:f3:
2e:e8:0e:5f:a0:bd:25:0e:12:fd:7e:63:b5:de:6e:
a8:d6:bd:02:b2:53:bb:94:f1:ca:5c:ea:63:10:e7:
9f:30:cb:0e:18:eb:40:e9:fe:df:9a:1d:df:36:7a:
06:e8:3e:8b:52:55:24:7c:3b:e1:01:a4:d2:8f:0c:
c8:d9:36:7f:9b:28:b6:a8:a6:95:48:0d:23:f8:15:
b4:bc:62:ac:28:83:a6:3c:4e:e5:fb:d8:5a:f8:88:
65:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:77:3D:E8:2F:98:25:59:16:FE:15:AF:31:5A:AF:10:2C:A2:AA:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC1BE58407B011EFA4147D15017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.224.0/20
Signature Algorithm: sha256WithRSAEncryption
92:c4:c8:3e:b6:94:1f:a2:a3:44:90:99:11:ba:37:33:c4:68:
07:66:95:3a:8c:d7:0f:a4:f2:79:47:ff:d4:2e:61:23:c1:af:
c3:5e:0d:06:6e:79:39:1d:53:8e:b7:c7:a4:70:a7:ab:28:8d:
40:37:80:63:a1:95:ae:17:a9:c0:1c:e8:cd:45:1c:26:39:60:
e2:87:12:a5:22:5b:6f:13:66:f2:4d:08:81:bf:8d:d7:06:c2:
6d:d4:2a:be:55:ee:68:76:83:24:ee:81:68:35:04:64:4c:06:
bb:2d:c9:03:2c:0c:7a:ca:1b:a0:fc:2c:45:1f:ef:39:a1:3e:
a3:46:1c:27:eb:1a:e8:2d:91:9a:70:35:6f:32:0d:81:af:a3:
c0:91:3a:29:8f:df:ce:94:dc:ae:c4:8f:5a:78:50:4b:3c:36:
60:1f:d2:26:20:0b:d6:07:4c:51:05:9a:b8:99:6b:45:16:b6:
84:c5:fd:33:a6:8f:9e:0b:39:24:09:98:e0:f6:30:59:a2:7f:
0c:54:94:75:48:fc:97:ef:7b:b2:a5:09:04:e3:5b:fd:f1:f8:
b2:ca:39:7d:b8:a9:f1:13:41:ea:ab:3f:85:97:d2:f7:63:4f:
c3:ca:ac:60:d6:00:3b:e9:dd:cf:a9:e0:1a:b9:3f:6f:b9:8c:
66:82:48:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:21 2024 by rpki-client on console-ams.rpki-client.org