Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54A01412441411EF8B90D5BC762E951A.roa
File: 54A01412441411EF8B90D5BC762E951A.roa (raw, json)
Hash identifier: 6odr3gUDqvOW8UwrglT23QrI1GvSchpl3ZllaGBqmPc=
Subject key identifier: E3:A8:73:B0:83:B1:6D:88:FD:FC:2C:EF:38:24:42:49:43:C3:12:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D313
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54A01412441411EF8B90D5BC762E951A.roa
Signing time: Wed 17 Jul 2024 08:12:38 +0000
ROA not before: Wed 17 Jul 2024 08:12:35 +0000
ROA not after: Sat 27 Jul 2024 08:12:35 +0000
asID: 22773
IP address blocks: 154.93.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54035 (0xd313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 08:12:35 2024 GMT
Not After : Jul 27 08:12:35 2024 GMT
Subject: CN=66977cf6-9d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:7d:eb:80:91:d6:66:95:65:10:5d:6d:2c:
9e:b4:02:93:e7:1e:2e:11:36:a1:c1:ef:74:6e:5f:
af:66:49:d0:e4:b5:85:90:0e:68:0e:89:99:fd:41:
4f:aa:d9:48:7b:dc:58:91:16:d5:37:83:44:57:59:
f3:ad:05:80:f8:8b:98:c2:c9:cc:19:be:14:f7:d8:
a4:61:63:0d:aa:9b:37:6d:be:7a:bc:4b:a5:51:dd:
60:9a:f8:16:77:e3:4e:a4:de:e0:f5:ac:7e:a1:d2:
ad:c3:ba:76:ba:3b:f2:b3:7f:11:89:59:2c:1a:f3:
60:a3:67:25:cb:eb:29:67:a9:38:65:2f:e5:ed:11:
31:01:e2:a0:04:d7:99:4c:8c:d4:9a:4a:9e:c8:5a:
57:3a:fa:6c:4c:be:61:5f:67:0a:fc:88:66:49:57:
50:90:f0:a8:34:d4:0e:75:c7:d5:e1:34:82:a9:2f:
bf:eb:cc:55:d7:97:18:66:67:93:38:54:f5:0d:20:
e5:1a:48:c2:09:fd:ec:1e:86:ed:84:10:0f:5f:03:
74:8c:c4:12:c0:41:8e:f9:f2:64:05:d1:7f:93:cb:
81:76:fa:7a:bb:c0:f0:d4:09:7c:a4:70:78:c0:46:
c1:55:7a:e9:fd:c2:76:b0:15:16:c1:a2:5a:61:d9:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A8:73:B0:83:B1:6D:88:FD:FC:2C:EF:38:24:42:49:43:C3:12:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54A01412441411EF8B90D5BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.8.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:38:b6:97:4d:89:9c:69:d6:42:a6:94:1b:22:1b:9d:eb:8a:
8a:af:ef:cf:84:c0:02:1a:e8:3b:75:73:33:5c:7f:22:7e:bd:
50:db:5f:66:84:5f:84:42:cb:7e:61:e6:2a:a1:91:e5:06:ef:
69:16:e3:3c:58:11:49:a0:96:60:38:0e:91:f2:b3:38:15:12:
01:13:b5:ad:fe:59:2e:2e:86:31:59:08:cf:6b:19:81:95:71:
03:a0:fe:db:ed:94:f5:9c:44:0b:10:c5:b6:87:be:b9:b3:08:
57:8e:97:06:32:a3:0d:76:6d:92:b1:11:47:d9:73:1d:a5:ec:
7e:6e:c5:06:b6:ff:a9:6e:cf:35:be:1b:a8:41:04:90:82:7f:
c5:1f:e6:5e:ef:19:ea:55:20:bc:10:bb:ae:ac:1c:c8:18:f3:
87:64:7b:88:41:17:ec:65:e9:77:1c:44:29:7c:85:3c:8b:84:
58:b3:87:c2:b9:7b:e8:1f:49:63:9a:ca:84:18:46:67:a0:2e:
0a:f5:b7:c4:ab:7f:1e:85:51:d0:cb:ae:e0:d7:1c:f1:eb:2c:
91:25:90:0b:47:16:3f:fd:92:41:f6:c1:77:de:45:9a:d6:95:
76:96:ee:ae:de:c0:0d:af:8e:c1:66:9f:d3:a9:bd:7d:f1:c7:
56:de:4b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:03:26 2024 by rpki-client on console-ams.rpki-client.org