Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/440AA60844D711EFB9AADF6E762E951A.roa
File: 440AA60844D711EFB9AADF6E762E951A.roa (raw, json)
Hash identifier: Yd8LZCMRN9Lr2/UYmh9xXfsCLxOm11nYvLgL4jivkrY=
Subject key identifier: 1E:BC:B9:40:DB:99:1A:98:B7:46:EE:CE:67:9E:19:10:1D:23:43:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D376
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/440AA60844D711EFB9AADF6E762E951A.roa
Signing time: Thu 18 Jul 2024 07:28:02 +0000
ROA not before: Thu 18 Jul 2024 07:27:57 +0000
ROA not after: Tue 20 Aug 2024 07:27:57 +0000
asID: 22724
IP address blocks: 154.89.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54134 (0xd376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 18 07:27:57 2024 GMT
Not After : Aug 20 07:27:57 2024 GMT
Subject: CN=6698c402-486c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:de:7f:4d:74:8b:22:54:64:5a:e1:b6:65:
38:3e:68:0e:a9:a2:74:d1:f9:d1:67:2d:0f:b5:36:
cd:20:92:b8:d8:b3:fd:3c:8c:9f:73:48:d4:aa:c7:
1a:45:f4:6f:50:c0:f6:4e:22:9a:a2:d1:ea:42:a2:
1d:b8:79:8b:83:5e:12:47:f1:fd:0b:0c:cf:01:a5:
4f:f5:2b:c0:76:68:88:be:c2:22:23:db:f7:ec:2d:
97:14:15:54:d1:42:20:ad:62:2f:e5:46:b8:63:01:
58:b0:98:73:10:c9:9c:e8:cd:bf:cc:0d:05:0f:dd:
31:e4:b2:15:2b:34:9a:a7:42:65:ed:be:26:b8:4f:
48:59:71:37:4f:da:fe:5d:f8:c7:53:48:6e:2e:6e:
b4:09:54:7e:02:d3:37:3c:56:bd:69:97:55:1a:87:
43:d3:be:ef:a6:d7:30:2e:19:7f:4a:f4:ce:66:9a:
da:4c:4a:8b:38:6a:b9:fe:a8:9f:58:11:3c:f2:4e:
b2:07:9c:75:05:c6:62:20:92:b1:7a:65:24:98:15:
bd:a7:ca:e7:13:e8:fc:2a:a0:eb:83:41:d1:fe:7b:
e8:d1:a3:81:96:ab:27:a2:18:34:12:60:30:27:3f:
3e:38:db:60:0a:90:f8:cd:7e:11:7d:c6:a1:b0:0f:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BC:B9:40:DB:99:1A:98:B7:46:EE:CE:67:9E:19:10:1D:23:43:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/440AA60844D711EFB9AADF6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.16.0/20
Signature Algorithm: sha256WithRSAEncryption
9b:c3:2f:b2:ca:7f:6b:f6:03:2f:ff:25:98:8d:05:d8:32:d5:
1a:11:92:cb:0d:c2:f3:dd:3a:76:fb:62:c6:ad:a5:ac:a5:98:
ce:c0:4d:0b:9a:66:7a:b2:e8:8e:d3:e1:46:52:50:b3:0a:5e:
02:c3:02:b1:94:7d:35:cf:99:70:e3:db:e5:9f:12:43:db:da:
0f:3d:a0:d6:ee:01:46:99:d7:8f:02:44:73:e6:6d:5b:a8:87:
ee:f4:20:f6:16:c7:b4:b7:44:84:24:6c:06:f2:c1:78:a4:69:
aa:26:74:ea:67:27:49:72:55:41:1e:be:12:4f:d8:d7:3a:2a:
89:f8:cb:39:e4:fa:3b:d5:48:7d:0e:2b:ee:13:81:fa:fe:ef:
72:3a:13:36:52:cd:b7:ec:f8:a4:a0:3c:fa:f7:51:6e:80:9e:
c1:a4:2c:f0:db:4b:31:4f:ea:de:ca:5f:5c:ad:5b:91:48:2e:
1a:58:52:81:07:a3:0c:ca:8e:fb:76:a4:d9:e0:7b:e8:ef:fc:
e2:5f:be:16:84:11:81:b8:f0:14:c1:c8:22:51:f4:d1:7f:4a:
a7:5d:8b:ff:d9:33:92:ac:9d:53:04:47:e9:9b:f0:ae:b6:60:
0f:68:69:42:f0:13:99:cb:88:63:09:4a:3b:f2:b1:79:f5:0c:
37:55:27:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 12:44:31 2024 by rpki-client on console-fra.rpki-client.org