Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75DA2044088411EF9633304F017001B1.roa
File: 75DA2044088411EF9633304F017001B1.roa (raw, json)
Hash identifier: +S46l0D4BLzbSvfdqXUqRuCKSc/NJ4MH/lNjW1USbWM=
Subject key identifier: 49:D1:31:EE:55:A8:0F:36:41:68:FD:4B:5D:60:3C:20:BD:AF:0F:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B3BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75DA2044088411EF9633304F017001B1.roa
Signing time: Thu 02 May 2024 13:04:08 +0000
ROA not before: Thu 02 May 2024 13:04:04 +0000
ROA not after: Wed 05 Jun 2024 13:04:04 +0000
asID: 150698
IP address blocks: 154.197.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46010 (0xb3ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 13:04:04 2024 GMT
Not After : Jun 5 13:04:04 2024 GMT
Subject: CN=66338f48-319f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:60:a4:10:72:20:1a:96:44:5c:a9:67:c8:cb:
12:be:e8:46:38:58:89:72:bc:f8:cc:c9:0b:52:86:
a8:b8:68:0e:e2:e7:c3:1a:45:4c:6f:3d:95:bd:7e:
97:b6:97:e2:2e:33:85:6a:06:91:e9:24:11:19:96:
2c:5c:a7:8b:5b:ad:f8:aa:d8:0c:90:f4:4a:b7:f6:
06:ab:36:71:75:4b:e5:fc:8a:9f:77:d4:1b:2d:80:
b6:de:c9:d3:b5:08:04:d3:d9:89:ad:73:78:7e:79:
33:45:b2:cf:34:2e:1a:a6:03:4f:cb:14:94:d8:e9:
f7:14:fd:87:41:5d:2e:ed:71:2e:fe:de:1f:52:c7:
0b:dd:72:71:b2:c4:65:9a:51:0a:b9:43:25:25:6a:
1c:30:f5:2b:60:a4:e2:f5:ac:e2:01:64:3f:13:41:
9f:c9:95:24:ef:00:3d:cd:ff:63:81:b2:0a:f4:aa:
8e:e7:b9:ae:37:c2:7e:8e:ff:46:8b:79:c2:5b:7e:
97:dd:56:74:bd:81:fb:54:e9:78:e1:bc:f5:ff:2a:
47:3b:dc:d6:00:9e:d2:de:eb:14:52:28:cb:0f:6d:
96:36:aa:c3:0c:30:0b:20:d0:02:f9:4b:89:11:50:
a0:1b:93:5c:7d:d3:03:2a:e0:a8:3d:92:36:e4:4d:
c3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D1:31:EE:55:A8:0F:36:41:68:FD:4B:5D:60:3C:20:BD:AF:0F:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75DA2044088411EF9633304F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.72.0/24
Signature Algorithm: sha256WithRSAEncryption
47:be:fc:4b:6e:b2:9e:2f:fe:b0:32:ec:4b:fd:e1:7b:bb:cb:
31:4a:e0:a4:dc:a0:da:0d:b5:11:f0:53:0d:6d:23:48:9d:28:
88:74:f7:a3:86:94:25:d6:46:58:0b:40:af:8f:7f:13:0d:db:
65:90:37:d4:6b:d5:c5:d5:86:0b:7e:1b:6e:a8:92:bf:96:83:
03:bc:22:61:f3:0e:f7:8f:4f:f1:b7:e1:d9:c6:5b:c4:03:65:
c3:c7:2e:3b:d9:cf:01:8e:f6:c9:2c:48:bc:5b:c2:22:77:66:
a8:69:4e:9c:b2:0a:cb:01:64:6a:c0:70:f2:bc:62:50:54:1c:
8e:b4:56:98:a5:e4:62:d8:07:10:e7:62:46:c6:bd:e2:a4:ec:
58:98:a3:c4:5e:b4:47:45:13:e2:1a:f9:27:0e:48:16:26:a5:
26:b2:4d:49:06:d0:45:07:65:a3:89:54:f1:4d:6a:81:f2:e3:
68:ac:0d:d3:55:fc:d7:50:2d:f9:59:12:8e:12:d3:55:b2:c4:
94:ee:c5:db:ab:04:c0:cc:62:7a:e9:00:b3:62:2f:11:4a:be:
17:c8:e7:de:55:dd:d2:d2:68:46:10:54:a9:9b:29:ed:10:06:
52:ad:80:6f:97:af:c9:da:38:64:b1:d9:1f:93:88:12:a1:a4:
aa:55:70:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:37 2024 by rpki-client on console-ams.rpki-client.org