Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7309EB52E47511EEA2AFAA80775412E6.roa
File: 7309EB52E47511EEA2AFAA80775412E6.roa (raw, json)
Hash identifier: Lg4ID1MPfVrIv2mPbRQ5pDJ9Qb6JFJ08gSwwc+yiCWg=
Subject key identifier: 07:F2:EF:75:B2:D1:0F:E1:26:F6:B1:50:5F:A4:8B:C1:EA:0C:56:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A24F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7309EB52E47511EEA2AFAA80775412E6.roa
Signing time: Sun 17 Mar 2024 15:45:59 +0000
ROA not before: Sun 17 Mar 2024 15:45:55 +0000
ROA not after: Tue 30 Apr 2024 15:45:55 +0000
asID: 63139
IP address blocks: 154.94.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41551 (0xa24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 15:45:55 2024 GMT
Not After : Apr 30 15:45:55 2024 GMT
Subject: CN=65f71037-92d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:62:c9:2b:8b:df:d4:5e:8c:c4:d9:c7:e4:b3:
e9:b6:2d:c8:dd:1b:ad:16:7d:69:97:6c:54:85:5f:
0e:37:5a:19:28:34:33:92:7c:d5:6d:0f:d3:eb:8a:
03:b3:7d:ad:9c:b4:c4:77:22:98:2f:8d:3f:71:09:
73:bf:2b:12:24:9c:c8:78:fd:22:f4:f9:b7:1f:c8:
86:88:fc:c9:75:26:05:d4:1d:15:e9:c9:32:bd:a1:
fd:82:9b:9c:ea:49:6d:56:d5:76:42:ad:20:bb:8a:
9f:56:7e:05:0b:e7:54:77:ea:23:07:d4:a3:65:c0:
3e:3e:1a:21:76:1d:ac:e0:f0:50:3c:59:2d:9f:d0:
37:35:5f:2c:53:2e:a1:b7:57:10:7d:6e:a6:55:e0:
5e:f8:24:48:6a:4b:e4:39:8a:4b:f2:67:52:7e:b2:
f9:bd:66:b1:d2:0e:cd:38:a3:98:00:ef:01:82:c8:
0a:66:03:6b:b7:af:fe:4a:c4:cb:e0:ad:dc:b0:93:
d2:5d:92:7c:21:27:b0:eb:80:c1:8b:ee:38:a1:3a:
87:32:a8:a8:df:30:80:95:cc:f9:48:8e:11:11:35:
1c:b4:c9:37:3c:b7:8d:34:3d:c3:ef:59:2c:de:90:
25:30:b0:87:75:1b:a7:0f:5a:e2:67:c2:db:40:d9:
0d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F2:EF:75:B2:D1:0F:E1:26:F6:B1:50:5F:A4:8B:C1:EA:0C:56:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7309EB52E47511EEA2AFAA80775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.107.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:fa:93:8e:31:62:5b:9e:33:67:8e:c0:7f:e5:a6:28:45:9b:
78:31:83:f0:fb:6b:45:3d:bf:fe:2d:a1:bf:a0:4b:50:5a:6d:
ca:10:f3:f5:13:ac:e7:f2:78:1d:ae:78:20:89:f7:bd:0c:72:
b1:22:45:68:c7:62:f6:48:64:8a:e1:bf:24:80:c8:2b:16:7f:
70:69:d4:fc:99:f0:50:8e:26:21:1c:cb:d9:55:96:9a:64:ec:
1a:41:ab:f2:a5:af:90:0c:d4:45:74:59:e6:9e:6a:8b:b3:9c:
12:f5:05:0a:e5:0c:35:1a:3e:ea:23:bc:fd:ec:a9:1b:ca:7e:
fb:dd:41:27:43:b9:7c:fd:0d:2b:49:ed:d0:52:83:f0:39:c4:
aa:41:2c:03:48:fe:ff:57:5a:5c:92:f4:3a:fa:a1:f4:fb:18:
b8:88:17:d0:fb:60:a3:ad:78:c1:a5:84:1c:c3:e6:a3:35:31:
f4:8d:6a:12:c0:8a:85:52:b9:1b:bf:e9:1f:cd:3b:38:4f:12:
5e:f9:b6:5c:7a:50:45:c9:69:4e:d7:58:97:05:be:fc:ab:46:
a1:d9:5c:55:e7:5d:32:fe:31:63:b9:55:5f:d2:97:bf:f4:c7:
e5:60:b9:3b:0f:89:5e:aa:23:bc:99:da:7e:82:61:36:24:bc:
95:e7:22:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:03:19 2024 by rpki-client on console-ams.rpki-client.org