Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0848C04E441611EF9800234C762E951A.roa
File: 0848C04E441611EF9800234C762E951A.roa (raw, json)
Hash identifier: N0m8S7oAGcELy2Vz3xR6S0RX6+ADvUI+PC4NBL3WHiU=
Subject key identifier: D8:C2:E6:49:D9:1C:81:02:DB:7D:B1:81:A2:98:D2:F8:EA:BF:DB:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D327
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0848C04E441611EF9800234C762E951A.roa
Signing time: Wed 17 Jul 2024 08:24:49 +0000
ROA not before: Wed 17 Jul 2024 08:24:46 +0000
ROA not after: Sat 27 Jul 2024 08:24:46 +0000
asID: 22773
IP address blocks: 154.85.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54055 (0xd327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 08:24:46 2024 GMT
Not After : Jul 27 08:24:46 2024 GMT
Subject: CN=66977fd1-6ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3b:97:fe:a1:f5:ae:28:fc:84:9d:ca:9c:cf:
09:56:04:90:43:ec:89:b6:ca:14:e2:7f:51:03:d2:
70:29:56:e2:71:f6:a8:c4:58:b6:c2:5c:67:32:e3:
4f:ac:2c:61:9c:e9:30:1c:44:8a:b9:4f:70:31:1a:
f8:06:d3:57:4d:6a:b1:31:1a:39:c6:6a:58:df:a3:
89:e4:13:06:c8:18:b0:d2:3a:71:74:ba:89:cd:cf:
a5:d4:20:43:c8:52:79:70:c4:52:9f:d1:77:4d:f7:
ee:08:ef:02:e7:e7:e1:1c:8a:a6:e7:5c:e4:23:2f:
06:5a:5c:ac:c6:76:be:f5:0f:e5:50:f2:cb:e4:0b:
6c:10:d7:3c:77:43:39:93:28:2b:36:22:a7:71:2e:
06:0a:c5:d8:6d:4d:d3:5d:3f:8b:4e:41:27:50:1d:
35:d2:1c:5f:11:a6:7e:b7:02:fb:d4:55:bb:e5:07:
ac:78:71:f0:e7:2f:61:03:d4:d7:24:4a:c8:e5:6c:
c3:cc:54:e1:bc:29:e6:40:a0:5f:8c:38:4c:02:41:
5d:6f:03:a8:c6:9f:dc:40:35:f6:65:b9:9e:4c:0f:
bc:59:3e:5a:15:e4:08:57:05:41:6b:d1:c7:00:bf:
02:11:13:41:50:99:8c:ea:fe:d2:70:64:9e:52:44:
f9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C2:E6:49:D9:1C:81:02:DB:7D:B1:81:A2:98:D2:F8:EA:BF:DB:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0848C04E441611EF9800234C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.108.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:5b:af:e4:d7:0c:82:76:1c:9a:55:4d:4b:d2:3a:75:a7:bb:
1f:4e:72:49:f2:e7:c4:cf:b4:29:c6:cd:87:de:ed:79:5e:35:
2e:81:25:e1:19:2d:7b:53:09:0a:98:57:e4:29:22:89:6d:51:
bf:55:01:5c:ce:4d:11:8f:a9:92:16:e2:2c:fa:4c:57:5f:cf:
ad:9a:2a:5c:fc:40:68:d7:dd:40:cb:f6:e2:e2:b7:99:dc:40:
4a:14:4c:bc:b8:bc:9b:f1:83:77:9f:96:e7:c1:7b:3d:13:90:
36:ed:5b:24:e7:30:af:f8:2d:e1:ab:4d:b2:26:48:b3:90:fc:
05:50:c9:bf:08:d6:b7:c2:7f:ad:b0:e6:c4:6b:c2:3b:df:ac:
07:ef:0a:67:c7:18:73:fa:39:b7:33:b8:03:cd:3c:ee:a4:04:
f0:a8:f7:4c:9d:c8:25:dc:96:a7:8a:c8:6f:80:00:c3:13:e2:
83:e5:46:3f:72:a6:c2:dc:8a:ee:28:62:32:e9:35:f5:74:94:
f0:ec:79:17:ef:ca:b4:af:27:c7:9a:bb:5a:5b:a0:55:d7:2c:
5c:a3:bd:5f:5a:4e:f5:ea:ad:89:9b:b7:be:e2:8c:eb:43:97:
f9:1f:71:0b:4c:41:dd:1a:f7:db:47:7e:b6:7a:33:36:fa:18:
0c:dc:31:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:03:25 2024 by rpki-client on console-ams.rpki-client.org