Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C6B28BC038111EF92FF73F9007001B1.roa
File: 6C6B28BC038111EF92FF73F9007001B1.roa (raw, json)
Hash identifier: lTlyVPmdVafsXYRMClSxD3xkHKstg5DCKArF2zZdWJM=
Subject key identifier: 92:10:74:88:4E:27:58:D1:59:70:36:62:34:1C:66:EC:16:7A:AA:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B150
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C6B28BC038111EF92FF73F9007001B1.roa
Signing time: Fri 26 Apr 2024 03:59:48 +0000
ROA not before: Fri 26 Apr 2024 03:59:44 +0000
ROA not after: Tue 03 Sep 2024 03:59:44 +0000
asID: 131685
IP address blocks: 154.210.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45392 (0xb150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 03:59:44 2024 GMT
Not After : Sep 3 03:59:44 2024 GMT
Subject: CN=662b26b4-f0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:78:f6:3d:87:bd:14:00:5b:f1:6e:41:6a:
f3:0f:29:31:94:75:18:f8:db:b9:c8:d0:5c:69:81:
92:65:57:74:cc:47:b5:12:0b:39:26:b9:e9:29:dd:
2d:7b:b6:b5:c7:0d:07:9c:ff:9c:53:e2:4b:5e:cc:
b8:4c:dc:4b:02:23:03:3e:e3:9e:d0:c7:36:00:dc:
1b:3b:57:03:e0:61:aa:37:b5:dc:ad:f5:48:b6:8e:
3c:13:bf:65:22:b5:90:de:1b:29:1e:4a:e7:c9:f8:
9f:a9:78:b5:66:73:df:67:c8:60:67:ad:fe:4b:f6:
4c:15:43:36:81:9a:af:17:39:4e:f8:28:9a:c0:13:
a0:6c:2f:ba:9e:b2:01:52:78:e0:e1:2d:67:7e:77:
85:38:7b:87:ee:e3:2e:36:49:4d:aa:a6:0b:53:4e:
e6:8a:96:c0:e4:56:cf:7f:69:32:ff:03:32:b6:16:
27:60:ec:5a:b6:fa:d9:8b:f0:26:b4:98:3f:5e:f6:
2f:85:e6:fc:ad:0e:aa:96:e9:22:6c:ba:ca:22:9f:
04:5f:82:67:1d:db:78:1e:48:e4:12:e5:13:46:10:
b3:7d:7a:98:26:52:9e:d3:ca:18:6d:4a:3b:d6:c4:
e1:ae:c7:31:8e:60:b2:4b:2a:8a:98:08:40:2b:c0:
24:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:10:74:88:4E:27:58:D1:59:70:36:62:34:1C:66:EC:16:7A:AA:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C6B28BC038111EF92FF73F9007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.234.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ad:79:66:d8:d9:8e:c2:25:50:d4:f0:95:44:ab:7f:a1:18:
1a:8a:68:87:ab:e0:90:1d:d5:ac:0c:9b:17:d7:42:2b:4f:ae:
02:0a:07:ec:89:0c:ef:db:e9:31:7f:59:b3:5b:d7:81:6c:0c:
08:28:d7:c1:59:80:04:6b:ab:a3:b6:f8:13:2e:68:f9:fe:34:
04:4f:9c:80:c5:7e:d2:fb:76:1a:ac:4f:e3:37:3f:15:ad:3d:
fd:32:49:cd:a9:a7:f3:67:aa:cc:f9:e6:4f:82:12:80:b8:d1:
2e:12:94:26:5e:98:04:06:37:37:92:4c:11:07:23:7e:3a:56:
cb:e2:18:d5:35:ea:f8:77:c7:ac:ef:a7:43:c6:35:08:d4:12:
ac:46:19:31:4a:b0:6e:35:6f:55:ab:cf:84:1a:08:66:70:ca:
05:2c:50:cd:25:40:70:2c:46:b4:26:74:47:4b:0c:54:1d:0f:
e5:08:86:dd:be:e2:ad:82:db:05:40:67:17:b8:87:58:14:7b:
5c:56:2a:9b:b4:3f:71:3a:00:e0:4e:ef:7d:1d:f5:ff:42:3e:
c8:7e:77:69:63:89:10:3a:0d:84:f5:0e:02:2f:9b:a1:97:0c:
b6:f5:59:9c:83:76:0f:0c:ac:1e:c0:76:c0:61:fb:5b:fd:39:
b8:69:56:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 11:37:22 2024 by rpki-client on console-fra.rpki-client.org