Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9180D02C4A6511EF92B51FB3762E951A.roa
File: 9180D02C4A6511EF92B51FB3762E951A.roa (raw, json)
Hash identifier: IDGE0dsO5q76CXgusDtheGpTZiwt+IxX0iIyPj29m5U=
Subject key identifier: 7E:E8:76:83:CC:32:BC:C9:7A:1B:98:64:43:E7:D5:27:31:2A:D0:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D712
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9180D02C4A6511EF92B51FB3762E951A.roa
Signing time: Thu 25 Jul 2024 09:09:17 +0000
ROA not before: Thu 25 Jul 2024 09:09:13 +0000
ROA not after: Sat 03 Aug 2024 09:09:13 +0000
asID: 22773
IP address blocks: 154.84.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55058 (0xd712)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 09:09:13 2024 GMT
Not After : Aug 3 09:09:13 2024 GMT
Subject: CN=66a2163c-1e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:26:f0:54:a9:f0:98:56:23:95:59:56:b0:81:
76:67:f6:a2:fc:95:a0:24:d8:8e:12:99:d1:e0:58:
19:44:f4:25:a7:b2:f8:3f:bd:26:db:e1:63:32:65:
7f:82:7b:bf:79:98:9f:04:7d:6e:bb:cb:ac:f0:d2:
37:0b:83:1d:88:ba:8c:1d:b4:67:86:77:ed:17:bf:
ba:c7:b9:17:78:7c:41:6a:24:a4:07:44:25:27:8e:
74:aa:51:ad:e8:69:c9:87:06:62:f7:84:36:06:0a:
93:30:bc:a2:78:b4:0d:fc:f5:f9:9b:e7:d4:2a:93:
4a:d6:c8:71:9f:6a:f9:d4:22:72:09:17:c7:0e:70:
87:dc:f3:bb:60:b0:bb:7f:9a:2c:51:36:75:a5:dc:
e5:43:d2:1b:3f:e0:d7:9d:83:c5:b3:9a:54:58:c0:
3d:d7:d8:84:c4:4c:c0:3c:3b:ad:9e:b6:5e:18:b1:
c6:d2:61:50:1c:ef:6f:39:23:f8:bb:5b:72:b4:d0:
f6:6a:fa:f0:09:cb:4f:97:51:3d:2f:2c:81:4f:64:
cb:7a:97:a4:28:3f:c6:bc:c4:0e:33:bc:b0:b4:e7:
61:57:dc:f2:56:a5:e8:47:bf:ea:02:d2:9b:0c:55:
98:2d:83:f9:42:a4:ae:6a:a0:06:5c:6d:69:0c:ac:
0a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E8:76:83:CC:32:BC:C9:7A:1B:98:64:43:E7:D5:27:31:2A:D0:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9180D02C4A6511EF92B51FB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.176.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:51:f9:66:60:fd:d1:3d:b5:ae:d0:4a:2e:cc:7a:8f:c3:d8:
3b:a0:f3:60:e1:77:9f:5b:5a:51:67:66:38:0d:d4:22:72:d3:
cb:e1:25:d7:a7:44:36:49:10:e9:05:74:73:9b:21:1a:32:a0:
ae:4e:b0:c9:36:78:d0:1a:92:4a:18:2b:4a:2c:fb:94:b6:49:
24:4a:28:9d:9a:00:42:53:fc:df:a4:e4:21:58:68:b5:eb:93:
f3:9b:12:cb:de:bf:77:21:61:8b:7d:ca:09:bf:3b:39:8f:bc:
e4:e8:2e:a0:33:f0:da:ca:d2:3c:c5:d3:9f:8f:7e:53:c8:6c:
f2:9b:e5:6c:7b:a4:b8:80:9c:e0:8f:a4:7d:03:fc:a0:ec:00:
f7:e8:c2:9a:12:46:8a:c7:27:14:f7:ef:9a:93:fb:fc:0c:af:
44:98:24:d9:28:a6:22:ed:85:33:5f:76:0a:b3:30:7f:2c:04:
8c:5f:a3:06:bd:72:b8:ab:3e:2a:27:55:ac:dc:0e:d3:31:b8:
7c:2e:c6:08:87:17:63:d0:c4:3e:da:38:2d:82:0d:32:60:7b:
92:84:3e:5a:f8:48:7a:25:95:4b:84:16:72:29:d9:65:11:28:
1f:45:69:f4:bf:dc:6f:68:f5:51:90:f1:61:3a:fb:2f:0d:ff:
4d:f7:05:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:57:23 2024 by rpki-client on console-fra.rpki-client.org