Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4ECAF5DE672911EEB324B3224AD9E6FC.roa
File: 4ECAF5DE672911EEB324B3224AD9E6FC.roa (raw, json)
Hash identifier: Ar/SKWJaas9M4cSfk+PALsLueUaqcTBlsHHU1kg4SW4=
Subject key identifier: 95:0F:F6:6A:98:C0:B9:7C:3B:DF:E0:D2:46:DE:32:E7:49:B1:93:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4583
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4ECAF5DE672911EEB324B3224AD9E6FC.roa
Signing time: Tue 10 Oct 2023 04:56:01 +0000
ROA not before: Tue 10 Oct 2023 04:55:58 +0000
ROA not after: Wed 24 Apr 2024 04:55:58 +0000
asID: 140403
IP address blocks: 154.89.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17795 (0x4583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 10 04:55:58 2023 GMT
Not After : Apr 24 04:55:58 2024 GMT
Subject: CN=6524d961-9d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:a1:c2:93:71:e9:2b:6d:5b:c9:46:0f:15:
79:69:21:ae:e0:5f:f6:c3:9c:82:e2:71:52:96:bf:
bc:68:29:85:7f:84:1e:40:12:41:0c:c7:fb:3f:40:
8e:a8:49:3f:2f:fb:ac:72:65:c2:0f:d1:75:5e:fe:
db:a6:7d:2d:3c:a5:68:53:3c:ff:6e:5c:79:eb:28:
be:7e:a2:f5:aa:bd:a9:25:9b:8a:3f:c8:bd:fc:f9:
fc:fd:2b:8a:e1:69:fa:10:dd:dc:64:e4:f2:e9:19:
8a:f2:bf:ef:96:b4:4c:f4:92:cc:e5:3e:b9:d1:88:
59:a7:53:fd:52:00:c6:e9:cb:26:c6:f8:02:41:bc:
8b:75:9a:55:c0:f1:67:55:e1:b9:c3:e7:15:cd:92:
3f:d8:0d:e3:e4:41:ab:36:3a:d1:f0:0c:91:50:40:
15:8d:36:b6:2c:a3:35:7f:ab:b4:d3:8c:77:fe:0b:
6c:0c:06:45:ef:77:11:47:9e:ad:66:1c:9b:14:60:
15:dd:cb:e0:65:7d:80:e8:a4:d6:86:92:b0:c4:ba:
53:fc:45:f9:c0:25:98:c2:93:28:c5:fd:0b:9b:d2:
3b:f2:a5:bd:21:10:57:8a:d2:ed:c4:7e:68:af:cb:
31:b8:81:9b:05:1e:3a:9b:0a:ac:8b:70:d3:fb:a4:
9b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0F:F6:6A:98:C0:B9:7C:3B:DF:E0:D2:46:DE:32:E7:49:B1:93:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4ECAF5DE672911EEB324B3224AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.3.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:5c:16:fc:69:b7:23:8d:95:df:8b:ff:1f:90:41:cc:16:0e:
00:64:7d:31:fe:96:bf:17:6f:be:94:1c:a2:47:bc:2c:36:09:
b7:8e:40:6f:48:80:53:88:e7:ec:c7:89:18:dc:76:1b:98:97:
e0:61:be:aa:5d:d2:73:28:70:e4:a4:fc:ae:74:44:51:55:3b:
4b:c1:c1:b1:96:23:b0:9a:ec:c5:98:84:3e:7d:58:a1:48:88:
e8:fe:8a:d5:5b:aa:fb:8f:bf:d7:c4:2d:e5:ed:42:fa:8f:47:
b8:71:f5:7e:c8:5c:7f:18:10:bf:e8:45:70:56:d4:5f:c2:e8:
e2:44:71:7a:a1:0e:c0:3b:f5:d4:e1:36:98:f7:07:2e:17:46:
76:f0:2e:37:0b:85:48:de:df:dd:e4:9a:d0:52:06:d0:c2:fa:
c2:da:b3:c9:83:d2:93:c9:db:72:54:0b:9a:62:3f:f2:7c:4c:
5c:2e:70:8d:48:9f:34:65:c9:cb:24:56:0a:f7:2c:53:0e:e0:
a9:19:f0:b7:42:74:fc:04:27:39:37:e8:1b:d5:f5:2d:cc:ed:
db:cc:29:42:36:ba:72:cb:74:44:49:c4:b7:29:b2:25:90:ac:
14:7f:0e:3c:83:1b:84:01:84:21:ff:6c:42:9a:fa:04:2f:17:
d8:70:27:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:38 2024 by rpki-client on console-fra.rpki-client.org