Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3357E58AE47611EE920B3D86775412E6.roa
File: 3357E58AE47611EE920B3D86775412E6.roa (raw, json)
Hash identifier: +5522d/Vbu35wp0J3r1XjCLclpJ1T8ucXemA8wtX098=
Subject key identifier: 73:F7:18:D5:B0:BF:38:87:27:2E:B3:10:37:E7:62:FB:F4:12:00:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A257
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3357E58AE47611EE920B3D86775412E6.roa
Signing time: Sun 17 Mar 2024 15:51:21 +0000
ROA not before: Sun 17 Mar 2024 15:51:18 +0000
ROA not after: Tue 30 Apr 2024 15:51:18 +0000
asID: 63139
IP address blocks: 154.94.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41559 (0xa257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 15:51:18 2024 GMT
Not After : Apr 30 15:51:18 2024 GMT
Subject: CN=65f71179-7de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:52:fb:83:f1:31:36:42:72:89:0f:cf:95:
4b:77:b8:74:27:b2:ff:ca:4e:bb:ab:4f:ed:98:b4:
d7:2c:b8:45:9c:47:0b:f4:97:fc:05:46:1c:98:e2:
26:2f:f4:46:17:e0:ee:71:36:35:52:b1:0f:48:af:
0c:ff:18:78:49:34:c1:c8:8c:e6:26:c4:2f:51:63:
aa:bf:f8:ed:2b:54:12:03:8f:f2:32:af:a6:b5:1a:
e4:8d:61:88:b9:53:bb:e2:3d:da:80:b3:ae:a2:bd:
4e:5b:66:39:c0:2c:cb:0e:d0:5a:8f:c8:3a:6e:84:
59:51:a3:db:c7:15:8c:ba:80:41:04:08:dc:f1:cc:
70:db:ab:9c:66:c6:5a:8f:d1:9f:48:b1:90:1f:ff:
5e:48:dd:9a:49:68:82:fb:63:ea:34:02:c9:3e:79:
4c:71:9a:78:2f:15:76:89:db:49:2f:8a:be:43:33:
04:e8:72:12:d4:6d:db:7b:24:0a:41:64:cd:64:9a:
70:de:b8:3b:61:93:d6:6e:42:00:25:76:3a:df:3c:
8d:67:13:a5:da:79:83:2d:ae:ea:07:1a:be:db:10:
d5:64:73:fa:40:02:91:5a:ea:6c:39:1b:ce:1c:5b:
1b:fe:6b:66:1f:ca:70:99:5a:8a:33:7b:14:33:cf:
ee:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F7:18:D5:B0:BF:38:87:27:2E:B3:10:37:E7:62:FB:F4:12:00:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3357E58AE47611EE920B3D86775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.103.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:07:23:48:6c:1c:4c:a9:b9:5a:af:43:23:8f:f6:e8:19:1f:
09:c2:05:47:19:84:a6:7e:dd:83:cb:4e:83:b9:b5:ff:ce:99:
18:6b:05:89:58:e2:4a:bc:95:ca:3e:6a:37:39:ba:73:42:10:
bb:74:cd:ba:8d:a4:77:15:9f:5d:2d:54:8b:2c:a5:86:80:87:
37:08:2e:06:96:22:f3:08:b4:c5:7c:38:5d:5e:64:b8:06:56:
f2:85:37:37:02:93:a1:48:f8:c0:63:c5:ae:cc:e2:4e:22:7a:
8c:6e:84:9c:8d:c2:f7:15:71:fa:fe:ab:80:d3:6b:54:e5:16:
ee:cf:9e:3d:15:b0:c3:4d:1f:62:9e:9d:aa:0c:5d:c2:03:00:
2c:be:47:05:61:d3:fe:22:40:2a:07:ff:02:79:79:bf:50:7f:
71:1e:d0:cb:84:dd:24:9d:a1:5d:03:18:66:ff:a1:05:67:e3:
49:fb:53:92:e7:8b:67:29:3e:8b:12:86:7a:35:a5:4c:8e:01:
4f:4b:54:c6:09:95:b4:92:1c:64:b4:47:da:40:eb:ec:0d:96:
09:05:18:04:4f:b4:11:0b:10:07:c7:f8:e1:9c:93:a6:8a:7a:
79:e7:02:fa:63:f8:98:1f:32:9c:da:dc:58:16:2a:01:d5:5d:
51:b8:8e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:40:37 2024 by rpki-client on console-fra.rpki-client.org