Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42BEDA84E47011EEB1B7D75F775412E6.roa
File: 42BEDA84E47011EEB1B7D75F775412E6.roa (raw, json)
Hash identifier: 4ZSRXKU1cBMQkZ/Kgvtf221jOBsil1yr2LU8RpqLdqE=
Subject key identifier: 96:39:1B:70:A3:B8:84:38:3A:62:9A:9A:E7:D2:17:8B:46:B7:D4:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A219
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42BEDA84E47011EEB1B7D75F775412E6.roa
Signing time: Sun 17 Mar 2024 15:08:50 +0000
ROA not before: Sun 17 Mar 2024 15:08:47 +0000
ROA not after: Tue 30 Apr 2024 15:08:47 +0000
asID: 63139
IP address blocks: 154.94.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41497 (0xa219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 15:08:47 2024 GMT
Not After : Apr 30 15:08:47 2024 GMT
Subject: CN=65f70782-1f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1a:b0:98:0e:7e:9e:d4:71:39:1d:88:1a:38:
85:16:af:18:05:b4:b9:8b:0f:66:75:e6:07:bc:5e:
4d:3d:9f:94:d6:11:28:61:97:d6:b5:64:79:6f:ae:
90:7d:39:15:81:48:e6:1f:28:b7:8b:95:0f:e2:4c:
94:a2:fe:48:f6:4e:ce:79:19:99:17:b6:ec:e1:51:
8c:10:45:8e:76:8a:69:f5:6f:00:2f:44:31:de:ab:
d0:29:bc:e7:60:b4:1b:9b:07:ba:32:42:d8:9b:f8:
a1:82:7f:b8:26:9d:79:c6:f0:1f:4f:b0:9c:40:fd:
12:1f:41:77:2c:52:c8:b6:37:66:13:2a:6b:6a:4a:
af:2d:79:ad:58:0f:98:94:51:dc:ca:6f:f6:35:62:
d4:52:1e:9c:ec:02:ef:62:1c:65:51:b7:aa:a3:5c:
3b:0a:57:b5:11:7c:47:43:7e:46:a8:c6:c9:b4:ef:
7d:1f:fb:31:b0:89:e3:18:b9:be:25:18:c8:97:51:
fb:40:e9:7b:5f:b2:b4:d8:04:6d:6a:ca:c1:38:e0:
7f:ec:1d:ec:cf:70:0d:a5:ca:79:d1:70:0c:33:00:
f8:61:4b:4b:4e:3d:44:e2:62:b8:28:1f:e8:9c:16:
80:0c:50:6d:86:a8:24:93:ba:a8:14:69:a2:13:02:
e0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:39:1B:70:A3:B8:84:38:3A:62:9A:9A:E7:D2:17:8B:46:B7:D4:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42BEDA84E47011EEB1B7D75F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.87.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:0a:e2:70:3c:6d:ba:44:b6:c4:56:22:f1:7a:78:a5:ec:5e:
a4:10:29:5a:66:d4:17:ce:2f:2f:d1:c7:5f:55:a6:40:92:9c:
c8:78:f7:e2:f4:53:c1:e1:be:a1:70:17:d9:98:36:61:de:4d:
27:80:4d:8d:64:a7:a3:63:87:7e:fb:59:c9:ec:fd:50:3c:54:
2d:65:2d:22:81:d7:9f:a0:e2:3f:88:e5:49:32:a8:2a:0c:e3:
7d:27:5a:49:2d:ea:6f:f5:dd:9d:59:06:c9:48:43:20:08:76:
79:f7:73:08:30:81:04:d7:5c:5d:1f:b8:da:39:89:5b:e6:ed:
f8:c9:e1:9a:7c:23:4a:bc:68:15:a8:4d:87:02:a8:90:b4:f0:
b1:43:8d:23:8d:18:e9:32:6b:3d:ea:48:2b:dd:b1:81:e8:3c:
95:bf:fb:5d:72:97:a2:c3:ce:af:0a:00:66:54:c1:5b:bc:a9:
4e:e7:bf:d1:d2:dc:66:9d:93:6d:3d:06:d5:b6:e8:5e:ae:50:
13:8c:fc:7e:5a:65:49:89:f9:2b:42:f4:f0:cc:36:e0:25:ec:
98:a8:42:12:8b:ce:27:78:bc:de:6d:76:2e:2b:5d:bf:56:40:
5c:cc:8f:0a:d4:68:d6:f6:cc:7b:18:eb:34:09:75:7f:28:27:
a6:2e:32:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:03:19 2024 by rpki-client on console-ams.rpki-client.org