Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74D4FA20E47111EEBD025268775412E6.roa
File: 74D4FA20E47111EEBD025268775412E6.roa (raw, json)
Hash identifier: 0mgc+KyNZHJmQ7jSS5oU4bTfS2IHHep1Dg6WO3eQKDo=
Subject key identifier: 89:8E:1E:CC:D4:EB:80:87:85:40:92:0E:97:D2:BA:94:3B:8B:40:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A225
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74D4FA20E47111EEBD025268775412E6.roa
Signing time: Sun 17 Mar 2024 15:17:24 +0000
ROA not before: Sun 17 Mar 2024 15:17:21 +0000
ROA not after: Tue 30 Apr 2024 15:17:21 +0000
asID: 63139
IP address blocks: 154.94.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41509 (0xa225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 15:17:21 2024 GMT
Not After : Apr 30 15:17:21 2024 GMT
Subject: CN=65f70984-4c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fa:16:81:2e:f0:ab:f6:7a:74:c9:50:7f:8c:
a4:49:c4:58:b5:0d:54:ae:ef:57:63:05:54:aa:b3:
d0:e0:c6:1c:9a:6f:8e:9c:41:5f:c9:5d:48:19:67:
59:0e:1c:c1:51:0d:cd:34:39:d7:17:29:db:8f:23:
2c:a6:e0:76:11:4e:90:e0:7a:31:08:fe:ce:3a:78:
08:a9:01:cf:5f:68:f0:fc:ea:f0:6d:9c:bb:8c:0b:
3e:a6:51:3c:8c:be:1d:0a:aa:57:35:5d:71:94:b8:
b5:d9:9e:2e:e2:f4:87:2f:b7:6c:c9:92:27:d4:07:
a8:7b:f0:45:f9:e0:24:d6:eb:5c:e2:3a:e4:f5:16:
d9:5a:2c:28:fb:73:92:43:35:7e:0f:15:0f:9c:81:
ef:de:9a:39:cf:f3:39:f9:04:32:3c:cf:53:f7:12:
be:0b:8c:c1:24:02:1a:d0:31:ad:41:b3:f0:92:47:
55:02:99:d3:f2:c4:8a:0d:33:9e:7a:6b:9d:4d:01:
f2:3a:ce:e4:77:83:ed:97:df:08:4e:fb:15:f9:eb:
9a:8e:47:fc:11:18:d6:80:02:f1:57:e9:9c:3d:be:
87:94:d2:5f:02:3b:35:58:0b:31:37:11:7b:1a:f9:
e5:c6:14:c0:3b:8c:8a:28:0a:0c:38:e9:74:c6:6d:
8b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8E:1E:CC:D4:EB:80:87:85:40:92:0E:97:D2:BA:94:3B:8B:40:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74D4FA20E47111EEBD025268775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.78.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:0c:c8:33:4a:8d:d9:06:5c:93:86:b6:06:09:88:10:76:45:
db:5e:99:a5:62:de:4e:06:64:f3:1d:7a:b5:63:e1:f7:78:12:
70:ab:94:3f:e8:99:d3:08:f2:40:d3:85:6c:5e:5e:4b:5d:b8:
dc:98:57:af:54:29:72:4c:a3:97:35:81:b1:67:82:ff:a2:da:
fb:8e:0f:0a:ac:ff:fc:8d:49:77:cc:3e:7c:f3:a6:ab:b4:02:
2c:82:37:82:16:1c:ce:76:44:06:f2:29:87:ae:76:e6:67:19:
81:60:62:cc:1b:15:f8:0f:1c:e8:bb:50:9f:1f:42:8d:2a:66:
c3:06:fd:04:c6:e1:de:ae:29:8a:d9:96:79:61:c3:30:5e:82:
f6:cf:da:4d:d2:08:77:4a:7a:88:ec:e7:89:d8:67:00:5e:42:
92:2c:98:91:0f:41:79:ab:04:6b:3d:b3:c8:01:f2:9d:4c:39:
20:9b:5c:53:9c:07:cc:56:1a:13:8e:3e:cc:de:a4:82:0e:e3:
28:89:cb:a0:e6:73:25:c4:77:ac:8e:8f:0b:95:5a:f2:8e:4b:
2b:82:15:5b:14:6c:6d:bc:30:47:b1:40:cb:3e:e2:c8:1a:af:
20:d0:5c:3c:2e:96:7f:7d:46:5d:fe:c9:14:ea:09:a5:cd:07:
5a:78:8e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:40:37 2024 by rpki-client on console-fra.rpki-client.org