Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43EA4710038111EF8014FEF8007001B1.roa
File: 43EA4710038111EF8014FEF8007001B1.roa (raw, json)
Hash identifier: M2H1YwAVHorTap715ZVIET+AXsaH+0IYiPmhfIBlI+k=
Subject key identifier: 0F:FC:DF:05:D7:8F:6E:ED:D3:F9:76:95:49:A3:9B:61:40:99:93:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B14E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43EA4710038111EF8014FEF8007001B1.roa
Signing time: Fri 26 Apr 2024 03:58:40 +0000
ROA not before: Fri 26 Apr 2024 03:58:36 +0000
ROA not after: Tue 03 Sep 2024 03:58:36 +0000
asID: 131685
IP address blocks: 154.210.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45390 (0xb14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 03:58:36 2024 GMT
Not After : Sep 3 03:58:36 2024 GMT
Subject: CN=662b2670-7c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:57:60:27:1c:0d:75:f9:f8:9e:5c:2a:db:b9:
84:0d:e5:a6:94:99:4d:40:38:ca:f5:79:42:a6:e8:
18:c2:31:18:e4:21:ce:70:8e:e2:5e:71:27:83:83:
32:66:7c:d6:1e:47:25:49:7a:74:94:79:bf:c5:25:
1a:ea:f5:82:03:d0:d6:44:10:91:29:1a:04:a9:27:
33:41:f6:e3:c1:7a:5b:d9:cd:ee:99:1c:bc:83:4a:
fd:9c:5b:f4:fa:f9:40:f4:a5:e3:42:72:9b:ee:0a:
62:a4:bb:9b:97:61:2d:d1:5d:8a:83:33:b5:54:62:
57:06:84:d4:e9:8d:6e:fa:40:a8:3b:05:12:ab:d3:
ec:4a:de:2e:55:48:4b:3b:7d:27:16:72:ea:f1:e5:
60:bc:d2:88:e8:b1:f1:d6:bf:ca:e5:0e:8d:66:aa:
be:88:08:3a:bd:95:37:ab:78:c1:cd:73:71:e3:1b:
63:35:54:71:23:2b:51:de:35:6f:c6:ae:23:97:14:
ce:96:10:0e:7a:e7:9d:9a:20:75:19:38:16:e5:bb:
e8:ee:42:05:77:ed:f5:d4:66:e2:18:13:c4:36:30:
39:dd:6d:d1:ca:cc:45:9c:13:89:c0:13:01:34:bd:
c3:17:b1:47:02:7a:6d:d2:c5:63:62:89:58:59:cc:
a5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FC:DF:05:D7:8F:6E:ED:D3:F9:76:95:49:A3:9B:61:40:99:93:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43EA4710038111EF8014FEF8007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.233.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:02:82:6c:f4:8e:31:45:26:48:0f:1d:a9:57:3e:96:ed:d8:
d9:5d:71:7a:42:5d:e3:ac:20:fb:01:17:b6:5b:e0:e1:b2:ce:
e5:13:2b:3d:cc:e1:9e:a2:30:78:21:4c:fb:1d:88:8f:18:23:
96:98:f0:6a:ba:bc:ce:7f:ee:4c:3c:6c:f6:82:b6:77:f2:12:
17:c0:45:99:46:5d:ac:23:7b:36:86:64:51:ee:b3:95:dc:15:
52:37:f1:23:bd:b7:2b:d4:0c:17:bb:52:d0:c5:66:94:db:9d:
57:0b:2a:1f:a7:d7:8e:5a:55:4f:eb:88:c2:72:61:29:c8:f6:
07:80:06:73:9f:03:06:06:b3:41:77:31:34:33:2b:79:6c:3a:
60:c0:92:33:b8:b0:91:68:43:f5:9c:56:00:73:43:d6:be:03:
48:7a:e2:55:d1:7c:03:4c:ed:88:7f:09:f4:9c:c6:82:70:dd:
27:6a:13:aa:01:46:b6:07:a9:6c:35:36:db:bc:70:ed:4e:0a:
80:59:61:7e:35:94:07:d3:13:84:d1:65:10:ea:a9:23:93:6e:
15:43:f6:d2:28:cd:b0:fc:6c:9f:9f:79:1c:10:a1:35:7e:f6:
0c:02:5a:9d:9d:c8:a9:08:7b:6f:db:32:20:f1:21:65:21:0a:
78:75:90:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 11:37:22 2024 by rpki-client on console-fra.rpki-client.org