Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/369A7502128211EF8DF6EE44017001B1.roa
File: 369A7502128211EF8DF6EE44017001B1.roa (raw, json)
Hash identifier: 5ZhntWf3RyyXhGIARdyBUk/fsXGHE+JDFvacRLbWrqQ=
Subject key identifier: 27:95:30:D2:A7:F1:7A:80:4F:69:18:1A:64:C5:CA:CF:E4:58:E4:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B789
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/369A7502128211EF8DF6EE44017001B1.roa
Signing time: Wed 15 May 2024 06:13:14 +0000
ROA not before: Wed 15 May 2024 06:13:11 +0000
ROA not after: Sun 26 May 2024 06:13:11 +0000
asID: 142062
IP address blocks: 154.212.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46985 (0xb789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 06:13:11 2024 GMT
Not After : May 26 06:13:11 2024 GMT
Subject: CN=6644527a-2c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:ab:bb:cf:a5:89:ba:bd:22:fe:18:40:a7:
68:40:d6:d6:3b:ac:8f:5f:5b:e0:1d:b3:c6:c5:9e:
56:23:2a:66:75:2e:c9:26:87:0e:b3:5f:45:1d:12:
8d:dd:ce:c3:c9:be:b3:77:cb:c0:56:07:a9:2e:e3:
b2:c1:f3:0d:12:35:4b:1f:f5:15:9f:86:26:fc:49:
2f:e7:6f:7b:cd:b3:53:e1:0e:3b:27:cc:18:13:45:
d2:6a:06:a6:32:fc:7e:c0:d9:c3:cc:5a:21:db:97:
be:cf:ec:77:d2:56:1a:8b:6b:98:34:21:fa:35:07:
71:82:7f:3e:65:11:80:0b:bf:b5:c5:05:51:4c:e4:
3d:1a:f7:3a:95:aa:5a:09:6f:2c:f7:fd:39:85:fa:
b3:e1:ba:b5:b3:4d:c1:07:cc:fa:92:a5:62:ad:64:
c7:b6:2c:00:89:bf:ea:60:3e:dd:50:72:3f:71:b2:
8f:02:f5:92:a3:07:96:16:bb:90:31:66:a3:d4:9d:
e5:56:79:3f:f1:80:78:a9:9a:24:9d:a9:80:d1:5e:
dd:d8:03:0a:0b:62:ec:22:78:8c:95:d9:30:b2:0f:
b1:ef:c8:3d:a4:7d:53:b4:38:ee:ec:2d:0f:aa:1f:
3f:dc:2a:56:60:ca:a0:f1:3e:53:e4:5c:32:fb:21:
16:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:95:30:D2:A7:F1:7A:80:4F:69:18:1A:64:C5:CA:CF:E4:58:E4:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/369A7502128211EF8DF6EE44017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.154.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e4:06:6a:ab:41:27:b7:97:dc:f5:2c:36:42:23:fa:65:9f:
25:e9:d9:69:56:7e:45:ee:19:aa:48:62:8f:55:fb:66:a7:80:
9b:b1:21:b3:3e:95:ea:4d:1c:a2:c1:23:07:d0:c8:42:b5:5a:
9a:b2:dd:a3:2b:21:c1:c6:e5:34:93:d0:63:e1:f3:fa:66:f7:
52:63:62:8f:c1:e6:66:66:b7:79:53:aa:a9:b2:9c:16:dc:3a:
49:55:c4:2d:7e:5f:15:80:9e:b6:43:05:6a:4f:63:91:07:fe:
7c:6a:f7:e5:91:74:04:58:47:a9:20:25:dd:1c:87:67:1e:01:
8c:5e:95:10:67:5d:32:40:1e:bc:d1:ee:e8:98:57:82:34:e3:
19:04:26:4e:c2:5a:2c:ce:9a:3b:ab:2e:6f:b5:a3:f8:2d:9a:
4a:4e:28:93:d7:91:3a:d1:7f:df:01:6a:36:ee:e0:6d:2d:ef:
ea:6c:cd:9a:41:5d:8a:93:85:cb:6d:77:cc:f7:55:38:b2:c4:
1e:b2:dd:8f:91:34:d0:19:f0:73:ef:d8:d9:c6:14:2b:20:1f:
2a:d9:24:4c:8c:72:6c:9f:93:77:a0:15:d4:fc:c8:83:6e:03:
c2:99:d7:17:46:a6:4d:f5:6d:cc:89:19:31:b5:c9:76:03:bf:
57:5f:35:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 03:45:16 2024 by rpki-client on console-ams.rpki-client.org