Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF35D882037C11EF967E3252017001B1.roa
File: EF35D882037C11EF967E3252017001B1.roa (raw, json)
Hash identifier: XhZzlHl76OukiozwPrk9iHthhtnAyH53HsxoivuhuJc=
Subject key identifier: 8C:D5:39:EE:6E:45:83:9C:A8:10:B3:CA:12:51:44:9E:BA:3D:7E:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B130
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF35D882037C11EF967E3252017001B1.roa
Signing time: Fri 26 Apr 2024 03:27:40 +0000
ROA not before: Fri 26 Apr 2024 03:27:36 +0000
ROA not after: Sun 26 May 2024 03:27:36 +0000
asID: 62240
IP address blocks: 154.195.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45360 (0xb130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 03:27:36 2024 GMT
Not After : May 26 03:27:36 2024 GMT
Subject: CN=662b1f2b-d784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e3:3d:cb:9f:1c:47:3d:f4:6a:8f:4a:0b:86:
2b:65:93:2f:90:5d:fc:f9:78:f6:73:d2:67:e3:38:
44:c4:82:01:89:ef:a7:90:b0:ad:11:69:3e:ad:23:
91:ef:9e:d9:c9:c5:a5:56:7a:7f:ce:b3:b8:66:3a:
bb:f5:6e:47:9d:0c:c9:ed:81:89:5f:44:39:8e:23:
3a:9a:92:f6:c3:cc:c5:4e:fc:1c:92:85:8d:58:42:
78:1b:0d:dd:17:e3:fa:a6:78:8d:f0:d0:08:93:33:
ae:f3:cf:cf:9f:76:c2:96:dd:33:53:8b:32:98:b1:
2e:ec:49:97:29:21:0c:3a:75:19:a5:50:e3:b3:d6:
ed:cc:34:5d:8f:aa:d2:9e:aa:6c:cc:88:e0:52:e1:
e5:c6:29:bf:4f:1e:a3:95:0e:b6:27:6b:2f:45:ef:
b1:65:f4:5a:cc:bd:29:9f:4d:d8:9c:32:7c:45:5e:
03:f0:e1:f2:86:bf:49:ed:3a:77:13:67:0c:ff:80:
31:40:0f:65:bd:b4:77:f6:40:42:c4:ad:99:51:2e:
d5:3f:4a:1e:c5:f0:00:4c:61:63:f1:ae:fa:2c:58:
2c:13:1f:48:7f:c4:09:c9:74:eb:96:c9:49:91:f6:
0a:4e:7b:de:dd:8f:50:62:86:d8:a4:83:2a:ad:5e:
bd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D5:39:EE:6E:45:83:9C:A8:10:B3:CA:12:51:44:9E:BA:3D:7E:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF35D882037C11EF967E3252017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.16.0/20
Signature Algorithm: sha256WithRSAEncryption
20:61:3b:39:39:b2:e9:3c:59:06:59:7a:81:4c:c7:b5:1b:85:
e7:6e:f1:c5:e0:9a:09:13:27:e1:e9:a8:db:2b:bf:68:1d:dd:
ed:72:16:36:76:5e:c5:96:67:05:8f:1f:bc:a0:30:62:9b:5f:
de:3e:a0:ba:5b:2a:86:13:68:bf:8e:91:39:36:fe:ee:0d:0b:
b3:e1:df:30:ae:98:e7:be:79:6d:eb:c5:19:82:c3:e9:49:11:
00:dc:8e:e6:4c:43:1a:74:0e:16:ed:e2:b8:09:5a:c5:05:5d:
4f:f6:03:57:e5:3d:22:d0:eb:1e:f6:7b:58:aa:a9:d5:9c:ce:
08:93:ae:88:5d:ff:80:fd:78:18:2b:db:d5:3b:c7:4b:03:c4:
84:4d:75:8d:0b:e5:c7:ac:96:51:2c:bc:5f:af:e3:b1:b8:d7:
98:8e:57:2e:cd:8f:af:1b:4c:1d:2e:61:39:3d:55:da:05:bc:
c4:a5:df:cf:3f:c8:7c:20:90:30:af:1a:87:7e:40:ec:7f:ba:
81:75:fb:4d:3d:7d:d1:24:43:d0:2a:44:f9:1f:80:56:3c:69:
84:3c:4e:a2:4f:0d:f8:e5:83:a0:50:1b:10:af:47:12:9e:71:
b4:e0:39:4d:08:41:37:02:36:f8:38:7c:36:fb:48:5c:7c:2a:
b2:63:0c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 02:19:01 2024 by rpki-client on console-fra.rpki-client.org