Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21303722385511EE9B66841F4AD9E6FC.roa
File: 21303722385511EE9B66841F4AD9E6FC.roa (raw, json)
Hash identifier: y/pZV4miubloW55j0uGFG8a9BUScU4u/3PzoP89Pkhs=
Subject key identifier: 70:A7:90:3F:EB:CC:74:CB:A4:26:B6:55:3E:3D:6D:D2:F0:3B:A0:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 360E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21303722385511EE9B66841F4AD9E6FC.roa
Signing time: Fri 11 Aug 2023 14:41:17 +0000
ROA not before: Fri 11 Aug 2023 14:41:14 +0000
ROA not after: Wed 01 May 2024 14:41:14 +0000
asID: 140227
IP address blocks: 154.86.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13838 (0x360e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 11 14:41:14 2023 GMT
Not After : May 1 14:41:14 2024 GMT
Subject: CN=64d6488d-37f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:73:d9:83:8d:a6:b3:1f:4d:b7:1b:d6:c3:79:
c9:78:11:01:b5:bd:71:59:64:37:b8:c9:9f:b9:a8:
8b:8e:49:5e:ac:4c:34:e1:5a:1d:5a:f1:55:36:e9:
62:68:2b:fd:b2:76:2c:57:5f:05:8f:95:2a:e4:c9:
94:d0:4b:45:36:4a:e0:a2:70:88:ff:b0:78:d2:70:
66:4a:4f:d4:db:92:98:9a:6e:f3:9d:7f:ec:56:69:
a4:e3:ee:c7:25:57:e4:72:5e:68:4e:9b:f3:48:d9:
86:e2:c0:11:01:72:5b:d7:72:a4:eb:a0:c0:5c:00:
59:84:e8:e0:af:bb:14:0d:64:5e:5c:f0:ac:6c:cc:
e6:ff:a6:8d:15:53:6e:8e:bb:5c:1b:be:15:c8:1c:
1e:62:a8:17:f0:dd:d3:b9:24:4b:07:2f:38:b9:2a:
66:05:5d:86:3d:a6:94:37:47:b5:c0:b3:2f:78:be:
e4:99:bc:e1:8b:f5:c1:c3:82:c5:77:c9:76:88:ea:
b9:e2:e7:dc:5e:37:07:b1:e3:9f:d1:cd:f7:e8:2c:
9a:96:c5:43:e1:8c:3b:72:7c:42:19:84:37:82:57:
58:e4:8b:df:e7:7f:46:02:b2:60:58:78:e9:08:37:
d1:92:58:c0:ad:8b:d7:bd:8d:dd:21:87:33:1b:c2:
f9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A7:90:3F:EB:CC:74:CB:A4:26:B6:55:3E:3D:6D:D2:F0:3B:A0:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21303722385511EE9B66841F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.19.0/24
Signature Algorithm: sha256WithRSAEncryption
70:b0:54:be:40:ae:65:89:05:64:a8:bc:75:2a:cb:ff:0f:2c:
cd:f0:ea:10:6c:f5:2e:46:91:6d:ae:ca:d5:5e:59:b7:96:4f:
8d:48:6d:cb:20:16:13:ca:30:93:df:1a:75:07:2e:2b:de:0d:
a4:9e:5e:83:40:3b:4f:4d:13:11:85:6b:6f:4d:d0:26:13:35:
10:a0:0d:b4:bf:e3:56:70:bb:ce:89:07:a2:0a:c6:37:e6:09:
c3:fb:c3:e3:02:ac:d8:70:2d:d5:b6:6c:95:a9:6b:bd:f0:1c:
d8:a5:75:94:1f:a9:cc:6b:90:45:af:7c:48:fb:9b:e9:75:18:
36:a7:26:2f:93:30:1f:e3:ca:b7:9d:33:4b:e3:98:5e:df:b8:
70:94:8f:82:64:ae:db:86:41:5e:2d:d9:a6:01:56:bc:cf:af:
0c:6f:04:f5:c3:5b:7a:c0:3f:56:35:90:8b:af:62:27:ae:91:
1e:01:88:99:29:3f:75:ea:99:32:06:07:2b:ee:cf:5d:fa:2e:
c1:a0:c5:74:a1:7e:7b:4a:e3:c5:d4:78:78:3c:d8:7e:4c:18:
b0:1f:b8:25:97:37:ac:6e:e1:2a:79:42:00:5e:ed:00:f6:7c:
fd:54:7f:1a:f7:19:c5:9f:6c:31:7d:8a:aa:4d:23:44:c8:36:
8c:83:2a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:38:48 2024 by rpki-client on console-ams.rpki-client.org