Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD3F45BA056011EF8A72B93D017001B1.roa
File: DD3F45BA056011EF8A72B93D017001B1.roa (raw, json)
Hash identifier: MxiBMHTBZ5nQyZj/z3+uC7hMJE1fUpVjUpTyf58aRfg=
Subject key identifier: 09:5A:F6:E0:DB:50:D7:0B:71:6A:A7:46:A8:B5:2B:F4:6F:A4:E7:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B1C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD3F45BA056011EF8A72B93D017001B1.roa
Signing time: Sun 28 Apr 2024 13:11:46 +0000
ROA not before: Sun 28 Apr 2024 13:11:42 +0000
ROA not after: Sat 11 May 2024 13:11:42 +0000
asID: 138915
IP address blocks: 154.203.154.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45509 (0xb1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 13:11:42 2024 GMT
Not After : May 11 13:11:42 2024 GMT
Subject: CN=662e4b12-7696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9c:8d:d9:92:69:ff:4f:77:60:01:e4:b1:51:
ad:7c:5a:fb:ca:bb:0a:f1:6b:21:7c:15:a8:a1:7a:
46:4e:20:b4:f9:92:ce:1c:20:cd:52:12:fa:53:4f:
05:4a:8f:7b:e7:3b:f2:81:2d:df:49:69:32:e2:6d:
bb:b6:fe:35:dd:f9:0f:f6:04:e1:69:db:1e:2d:a1:
2f:27:48:ab:16:ad:6a:14:0d:95:48:07:be:05:16:
10:18:69:f9:8d:34:34:5c:0a:be:dd:49:7b:07:69:
84:4c:5d:1d:4f:6e:29:fb:a9:e0:1d:98:30:46:3e:
5f:ae:aa:1a:36:a8:01:88:2f:91:55:9f:94:06:7b:
69:46:a3:ad:35:90:45:e6:78:e3:d1:35:a2:40:26:
0f:c0:e5:e6:71:cc:b8:df:17:63:4e:ff:5c:c7:57:
18:bb:c8:69:f3:37:83:86:3c:d6:07:26:d6:46:75:
94:d4:b9:ce:7f:b1:16:54:ab:99:03:5e:5e:db:19:
eb:6b:c1:64:02:bb:45:be:d3:9c:d9:7a:e5:89:3f:
c4:ea:44:89:dd:f5:ad:8d:9e:e4:98:60:f8:95:a2:
c7:a5:4e:cd:4a:ec:12:90:42:3c:02:55:df:e8:b4:
6d:c9:de:e4:7b:19:cf:4e:2b:c1:8b:09:8f:22:61:
99:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5A:F6:E0:DB:50:D7:0B:71:6A:A7:46:A8:B5:2B:F4:6F:A4:E7:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD3F45BA056011EF8A72B93D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.154.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:dd:b5:75:3c:b5:fa:61:f1:f4:f2:01:74:47:67:b8:71:05:
3a:b8:5d:f7:b3:b9:76:af:e3:ed:69:92:7e:1f:8f:bd:21:c9:
42:53:d2:27:30:bc:57:0d:03:45:26:ef:8d:c9:f4:84:ca:88:
e7:79:4f:97:0f:9e:ef:87:aa:08:0c:32:32:30:38:17:ef:bc:
dd:ff:20:cb:ce:2c:dd:29:15:df:5d:fa:55:6d:9c:5b:6c:a8:
4c:27:e8:e8:eb:46:f8:2f:88:f5:a2:22:de:35:a2:39:58:08:
78:d2:68:ab:db:ed:4d:af:0a:e5:19:37:fe:1b:0e:81:3b:65:
68:88:6a:eb:4b:b3:dc:b4:57:42:d7:4e:bb:f7:7c:79:8d:10:
c3:02:8d:be:db:6c:83:c6:a8:dc:cd:28:f4:b3:ad:20:28:6d:
8a:7c:09:81:b7:e4:ff:59:e0:a7:16:39:10:6b:63:34:18:62:
2e:e3:f8:3f:ed:2d:88:03:b0:68:e8:ee:a9:71:28:04:e4:c5:
13:1e:98:d3:73:93:04:79:75:31:dc:e0:ba:fe:f7:4e:4a:cf:
04:b2:44:6d:56:db:89:bc:a6:f1:d1:b7:5a:26:b2:6f:6d:af:
df:43:9f:44:a7:82:6f:f3:a9:be:c5:0c:04:e5:bd:e8:0e:d6:
ba:ee:9b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:22 2024 by rpki-client on console-ams.rpki-client.org