Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3369A000CED11EF80424343017001B1.roa
File: F3369A000CED11EF80424343017001B1.roa (raw, json)
Hash identifier: YqIJ2pFVzDuMVJK8IlG2tk8GqBDJMq1GipLXHMBjW+Q=
Subject key identifier: C8:3F:C9:B6:BB:90:4F:A5:AF:81:59:91:57:97:3F:3D:06:0B:D5:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B58E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3369A000CED11EF80424343017001B1.roa
Signing time: Wed 08 May 2024 03:49:20 +0000
ROA not before: Wed 08 May 2024 03:49:17 +0000
ROA not after: Sat 18 May 2024 03:49:17 +0000
asID: 39600
IP address blocks: 154.205.160.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46478 (0xb58e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 03:49:17 2024 GMT
Not After : May 18 03:49:17 2024 GMT
Subject: CN=663af640-7e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d4:82:74:93:3d:8f:fe:8a:85:41:2a:f1:25:
3e:87:6f:88:2b:1a:92:6c:22:6d:b8:71:93:25:34:
0a:ea:59:6d:03:ae:1e:71:55:e5:ec:62:95:1d:e7:
d4:43:b2:fa:a5:72:4b:6d:58:e3:56:25:09:c2:29:
48:7f:0f:29:11:9b:c2:00:4b:18:91:3d:d5:9a:95:
24:d9:ed:c1:50:2d:f0:da:08:20:89:df:2a:d9:68:
5f:7d:08:5f:05:52:4a:e4:49:d7:9b:64:6b:73:78:
95:6d:01:a6:dd:52:ec:3f:27:ff:a6:25:c7:2b:17:
2c:fd:72:7d:87:7d:6e:aa:a5:4a:5f:d7:7b:cb:7a:
fc:2b:9a:43:ec:bb:f2:53:2f:c4:92:62:d8:d5:74:
75:e7:7c:05:95:08:c8:84:f3:8c:7d:d0:83:f3:e0:
75:02:9d:f6:16:4d:b1:76:08:ef:57:2f:be:1a:3e:
96:53:f3:c5:b3:bc:59:09:80:90:8b:1c:91:92:c5:
d2:49:46:3e:7f:eb:48:ad:51:ab:c3:9c:78:5f:8c:
94:5a:c1:fa:a2:1d:8a:1d:ff:a7:93:f0:de:1e:87:
be:2e:4b:b0:c6:b4:79:9d:ed:33:c5:78:fc:81:86:
df:a5:02:1a:7f:32:7c:97:d5:1d:46:82:13:d5:9a:
2c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3F:C9:B6:BB:90:4F:A5:AF:81:59:91:57:97:3F:3D:06:0B:D5:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3369A000CED11EF80424343017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.160.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:39:f0:9b:bd:18:73:66:c1:9c:91:bb:19:45:00:27:3b:b7:
4e:22:ef:72:3b:3e:dd:c7:c1:17:80:16:73:e8:bf:26:6c:5e:
a4:3f:1b:1a:d5:c6:64:12:ea:ea:3e:e5:76:d0:08:26:de:73:
b5:fb:04:e7:ac:c8:21:9f:03:0b:86:b6:d4:bb:8c:65:a8:bb:
06:59:e2:24:7a:0a:e0:04:49:7f:a9:71:a7:85:12:72:d0:30:
ca:81:a8:ed:9b:2e:8b:1a:f2:91:92:d0:1c:4c:d0:2e:c7:ce:
43:31:64:9b:2e:75:12:79:f4:5e:3d:d7:7b:a3:70:be:d9:e7:
9f:5d:62:b2:9e:39:b6:1b:fa:58:97:19:61:e0:9e:3c:39:5a:
b9:34:8f:2c:ee:8d:5d:9d:37:5b:96:db:e7:32:a4:40:39:02:
a1:95:bb:88:75:e6:87:e2:e6:08:63:4d:fc:21:b8:48:38:25:
04:3f:34:86:ac:ef:45:cd:8d:d7:bc:c2:57:3a:d9:3c:2c:ab:
9b:86:ff:d3:10:f6:f9:c1:ba:34:67:b8:47:38:1b:d3:50:2d:
1c:17:d0:f2:03:04:b6:51:11:a8:e5:69:6b:5f:39:76:3e:b8:
47:13:61:ca:55:a5:b4:59:06:80:ab:9c:2e:4f:3a:26:b2:bc:
59:3d:62:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:03:34 2024 by rpki-client on console-fra.rpki-client.org