Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45956D12E47111EE99615F66775412E6.roa
File: 45956D12E47111EE99615F66775412E6.roa (raw, json)
Hash identifier: 8dvv3nVpLPq0UL37KLboG/eLM9SZk3nqFWIkAZH4lIE=
Subject key identifier: 43:00:27:6C:65:24:2D:77:AA:7F:5D:52:8A:7D:DE:4A:42:2B:48:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A223
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45956D12E47111EE99615F66775412E6.roa
Signing time: Sun 17 Mar 2024 15:16:05 +0000
ROA not before: Sun 17 Mar 2024 15:16:01 +0000
ROA not after: Tue 30 Apr 2024 15:16:01 +0000
asID: 63139
IP address blocks: 154.94.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41507 (0xa223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 15:16:01 2024 GMT
Not After : Apr 30 15:16:01 2024 GMT
Subject: CN=65f70934-06c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:43:bb:66:71:09:e1:12:14:1a:f1:8a:e1:27:
8f:80:15:7c:54:26:72:46:d4:37:20:44:c7:5e:53:
4e:6d:0b:a1:51:79:c8:21:71:6d:09:f4:b5:a9:e5:
e4:53:0a:01:f9:88:b5:95:f3:fe:81:1e:4a:6c:1f:
ba:09:43:07:7d:97:65:31:90:45:db:97:7d:db:ba:
5e:19:15:84:c2:4e:17:49:be:3f:a7:d3:3c:76:4d:
8c:6e:1a:1d:8f:ac:e6:6a:93:13:73:ff:ef:c9:ca:
d0:22:a4:68:8f:2f:d4:67:96:7d:47:33:ee:a9:0f:
9e:80:4a:10:d7:48:97:38:4a:11:38:89:1b:6f:b2:
47:54:28:e9:23:27:db:0d:f1:b5:2d:f0:df:a0:06:
0c:30:f2:6a:a2:72:49:b6:89:c6:90:f8:04:bc:8e:
5b:8d:14:a4:ca:a3:72:68:b1:2a:d0:b7:81:ce:c2:
f2:85:db:5a:9c:f1:c3:ec:ee:6b:c8:b4:16:71:73:
ec:81:73:42:90:ce:7d:6c:f2:4b:f8:61:7b:2f:95:
bf:27:c9:8a:62:d4:e5:41:e8:b4:af:86:ac:09:39:
97:19:0a:cd:7b:a8:c9:9d:4b:57:a7:e5:cd:5b:1d:
6a:b7:e7:fc:98:05:f8:09:0e:18:c3:42:21:9d:60:
34:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:00:27:6C:65:24:2D:77:AA:7F:5D:52:8A:7D:DE:4A:42:2B:48:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45956D12E47111EE99615F66775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.79.0/24
Signature Algorithm: sha256WithRSAEncryption
98:43:7c:f3:ed:30:38:4b:9e:5e:e8:f4:dc:1d:4e:2e:af:3a:
59:91:ea:1d:e7:63:bd:3a:ae:7c:27:09:8d:2b:e6:d9:50:f9:
a8:4f:10:3f:56:31:47:e5:63:a0:dd:e2:96:28:73:88:fb:ab:
48:f5:1a:01:f6:fa:5a:b3:94:17:de:4a:af:28:1f:89:1c:20:
9a:ea:94:d8:7b:62:eb:ce:16:2f:86:bd:68:ef:fa:86:fa:62:
b6:3c:e4:11:f2:1c:ef:8b:36:17:5d:3a:82:59:37:c5:e3:c3:
b4:68:04:fa:58:1d:9c:e9:65:f7:ac:3c:fc:44:25:6e:20:a2:
b2:28:11:9b:80:bb:e3:7b:56:f0:af:14:f7:81:c0:40:96:f2:
d3:8e:8a:29:8e:09:e1:7f:1b:43:f1:bf:fc:56:8d:07:ad:d1:
84:e0:87:e0:b0:16:eb:2e:77:aa:c2:9a:51:bd:98:6d:d6:72:
c7:37:bf:41:03:4a:a4:78:11:28:45:b6:d0:a0:35:45:a9:81:
86:b6:1b:f2:38:22:13:48:40:ed:ba:26:ba:df:e8:97:a2:26:
b7:e4:5d:24:ef:d9:dc:49:71:bf:6f:29:c3:f8:1d:b4:21:b5:
57:ef:4d:ea:50:55:4c:4d:3e:ed:e2:4f:4e:6d:01:59:5a:e9:
43:2d:3d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:40:37 2024 by rpki-client on console-fra.rpki-client.org