Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/480BAC84014311EFA73D312E017001B1.roa
File: 480BAC84014311EFA73D312E017001B1.roa (raw, json)
Hash identifier: 51AdVoFuLbpgJKVz00nPNDLBLdH5BJlN9iknzEdayCo=
Subject key identifier: 8B:78:30:8F:BC:AE:22:9D:95:2D:2F:76:06:1D:60:4C:71:14:48:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AEE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/480BAC84014311EFA73D312E017001B1.roa
Signing time: Tue 23 Apr 2024 07:29:56 +0000
ROA not before: Tue 23 Apr 2024 07:29:52 +0000
ROA not after: Sat 11 May 2024 07:29:52 +0000
asID: 5650
IP address blocks: 154.205.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44771 (0xaee3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 07:29:52 2024 GMT
Not After : May 11 07:29:52 2024 GMT
Subject: CN=66276373-4dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:ef:69:fc:fc:93:b4:f0:fb:e7:14:d5:f1:
dd:07:09:c3:1a:f4:0f:7e:d3:ad:a9:06:d6:63:c5:
94:25:74:93:a6:5c:0a:33:de:c8:81:36:34:d7:d3:
39:62:18:5a:b1:94:b6:9a:7b:9c:90:0d:96:ce:f0:
6a:16:fa:00:41:9a:94:0e:85:70:4c:55:dd:56:a3:
64:77:2e:eb:8c:35:b2:52:14:e8:bc:7d:da:7c:2c:
9f:85:d7:90:82:3c:4a:c4:55:b7:88:38:4d:30:cf:
69:b0:4a:e9:bf:40:51:b1:a3:a8:10:da:64:3d:ac:
32:0b:7f:fc:f3:78:87:d0:70:b2:67:b7:8c:3c:b6:
20:bb:ff:42:53:21:83:89:b3:5e:63:10:0c:41:32:
65:60:13:f7:4f:ac:8e:77:e6:4e:25:f8:45:f0:31:
0a:f0:28:23:31:d9:03:5e:cb:1e:9f:ed:4d:2d:28:
11:dc:2a:51:ee:07:aa:75:fd:18:ce:79:2f:06:67:
b1:ef:3e:e5:a0:8e:09:90:9e:78:b9:22:56:e5:11:
99:af:3b:aa:4c:50:41:36:ad:97:b5:8b:3e:1f:3d:
75:e5:15:66:a4:0e:be:d4:51:41:a0:5e:00:d2:e0:
14:57:cf:e0:1a:88:4d:0f:06:2f:c4:dc:15:15:0f:
28:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:78:30:8F:BC:AE:22:9D:95:2D:2F:76:06:1D:60:4C:71:14:48:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/480BAC84014311EFA73D312E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.180.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:4d:11:b9:8e:52:ac:5e:13:65:8c:03:71:1c:48:d0:37:ee:
de:ef:ff:19:c2:83:56:c4:2c:a1:d1:08:6a:d6:cb:90:ef:17:
db:d2:a5:8c:61:ea:32:09:56:93:18:6f:cb:de:69:67:ed:e1:
f1:d5:b1:f6:91:1d:7e:2c:ea:3a:c8:a6:6f:5b:ff:b3:ad:70:
28:b5:94:23:e5:2a:81:86:6c:a4:c1:ad:b3:9a:0b:34:95:d7:
be:19:bd:e1:a5:4f:e2:7e:d3:ca:38:14:80:4b:72:58:7d:2f:
db:3c:03:d4:73:a0:bc:82:e6:04:64:22:51:c6:9f:72:5c:6f:
3d:d3:27:91:9b:4c:ae:cf:11:16:d0:b0:42:a8:1f:e8:db:fa:
3a:8c:17:0d:a4:b6:65:0b:32:94:71:04:50:27:1b:32:83:7d:
aa:46:49:24:2e:de:7d:5c:ee:df:45:fd:4a:e7:dd:1a:56:bc:
ad:fa:bc:56:ec:d4:05:f6:12:51:3f:7f:4f:b1:f1:75:f4:28:
76:3f:8b:ad:15:e3:74:cf:85:e3:93:ec:09:cb:57:e3:2f:8c:
14:4a:30:95:0c:e3:9f:00:20:eb:42:28:1e:ac:91:c3:73:39:
9e:0e:7c:81:46:3f:0a:65:ff:6b:28:99:e9:72:0f:0e:5a:48:
70:9e:b6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:47 2024 by rpki-client on console-fra.rpki-client.org