Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0F5B87E037B11EF813D894B017001B1.roa
File: E0F5B87E037B11EF813D894B017001B1.roa (raw, json)
Hash identifier: g1MvsUUL3RPlk8fsRaZcpNfj0rS+bDf08Z7afZ2F3a4=
Subject key identifier: 33:47:86:F3:1D:D2:31:65:13:DC:CB:D0:CF:DE:D2:AC:57:DE:FF:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B124
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0F5B87E037B11EF813D894B017001B1.roa
Signing time: Fri 26 Apr 2024 03:20:06 +0000
ROA not before: Fri 26 Apr 2024 03:20:03 +0000
ROA not after: Sun 26 May 2024 03:20:03 +0000
asID: 62240
IP address blocks: 154.194.70.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45348 (0xb124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 03:20:03 2024 GMT
Not After : May 26 03:20:03 2024 GMT
Subject: CN=662b1d66-41ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:a0:a4:bf:46:55:da:e8:60:4f:21:22:fc:
f9:44:f4:cf:13:4d:45:e1:7a:09:da:a3:1a:80:95:
79:84:cc:2d:ab:0d:0c:2e:a4:59:6e:87:b3:a7:84:
04:5c:00:9d:32:b8:c1:62:7f:e4:df:95:46:c8:09:
11:ff:43:70:ce:23:25:08:ea:6e:90:cb:c4:a5:86:
12:b6:90:01:10:6f:20:f9:42:46:fa:d8:c0:2d:64:
53:de:48:67:7e:29:cc:10:52:81:b5:87:81:51:69:
8b:54:2e:91:99:61:19:8c:01:0f:dd:11:5c:41:d1:
0e:6a:f4:35:55:62:c8:b2:ee:a8:08:f8:e0:3b:a3:
85:24:93:dc:86:c3:78:7c:07:13:91:b0:40:c2:7c:
10:d0:0a:24:6c:64:a5:18:1f:17:71:3a:b9:01:4f:
c4:f6:60:75:da:24:7c:bd:7f:b4:ad:08:78:72:25:
5e:a6:0a:d2:ff:45:33:d7:27:7e:0c:2b:d8:51:46:
60:d4:d1:ab:2a:67:75:9d:c3:6a:db:51:d3:3d:c7:
63:7c:32:1e:ae:4b:70:06:b1:1d:24:4c:4c:8f:73:
43:09:c8:2b:23:8e:71:67:16:66:f4:3b:72:25:ff:
3c:5f:51:d1:5e:cc:43:89:48:b8:e8:59:58:43:d5:
b5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:47:86:F3:1D:D2:31:65:13:DC:CB:D0:CF:DE:D2:AC:57:DE:FF:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0F5B87E037B11EF813D894B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.70.0/23
Signature Algorithm: sha256WithRSAEncryption
59:1d:bf:26:a9:f5:49:8a:f8:b2:a3:3e:93:99:94:5a:aa:ff:
6c:2c:95:a6:d8:11:1c:44:1a:9b:2b:51:77:e7:48:7c:6b:3f:
cc:46:72:c8:5e:3e:12:73:e1:ca:62:48:d6:31:ca:3c:19:ea:
5f:7e:7f:0f:b7:65:99:8d:c4:ea:5c:2d:fe:14:c6:ce:22:03:
bd:9f:e1:2e:16:1b:19:ca:73:c5:5e:e5:2d:f8:ed:55:f1:4a:
e8:86:1e:c1:64:39:dd:82:b5:83:35:2e:a5:45:81:d9:03:ae:
06:a4:ef:4c:8f:39:54:88:25:29:e5:36:b4:d9:3e:9e:cf:d4:
3f:4b:d6:5b:01:9e:13:df:08:16:e8:00:3d:84:e7:b0:b7:6d:
fe:93:f0:82:f0:48:be:56:fa:76:3e:2f:a5:da:0e:2e:c7:05:
4b:02:35:a4:cd:b4:f9:e8:5a:2e:47:94:7b:3e:d1:45:ba:60:
16:be:af:23:f4:a9:3e:67:68:fe:75:bc:88:94:e8:9c:89:cf:
51:e6:30:88:aa:d2:51:6f:b2:75:f3:fd:00:a1:a4:d7:99:3f:
02:ee:f6:30:a1:82:d5:9b:32:1a:81:aa:dc:9c:bc:08:24:b2:
dd:12:f8:1e:d9:71:9f:2f:b7:27:a4:0e:df:eb:8d:43:99:c8:
d8:db:57:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 02:19:01 2024 by rpki-client on console-fra.rpki-client.org