Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94931ACAE47311EE834B8775775412E6.roa
File: 94931ACAE47311EE834B8775775412E6.roa (raw, json)
Hash identifier: bfotOie52k+esBDtOnl6Qd/Kaxl5Gq8VddwY9xNQleg=
Subject key identifier: F9:47:1E:7A:D2:3B:2C:38:9C:41:1D:DF:2D:DB:BF:6A:30:29:91:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A23B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94931ACAE47311EE834B8775775412E6.roa
Signing time: Sun 17 Mar 2024 15:32:36 +0000
ROA not before: Sun 17 Mar 2024 15:32:33 +0000
ROA not after: Tue 30 Apr 2024 15:32:33 +0000
asID: 63139
IP address blocks: 154.94.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41531 (0xa23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 15:32:33 2024 GMT
Not After : Apr 30 15:32:33 2024 GMT
Subject: CN=65f70d14-c289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:22:8f:94:8a:2a:5d:62:1f:26:76:d2:7f:8e:
7d:bd:68:c9:a1:69:e2:b1:c1:10:e2:1f:c2:6c:83:
33:50:ab:99:6e:53:a2:cd:51:b6:18:99:05:b4:28:
c6:e7:30:7b:c7:6a:ea:95:76:4e:d8:d7:df:f4:bd:
ed:49:45:6d:71:ff:a4:ca:b5:01:04:ed:48:04:e0:
61:5c:f1:a3:6d:61:8f:f3:a2:82:90:58:de:66:c3:
38:bf:14:48:88:af:bf:80:08:68:02:7b:07:03:69:
db:82:6e:58:f4:79:82:d9:81:33:22:06:66:4f:4e:
df:8c:9e:0e:44:15:d5:bc:10:16:eb:0a:6f:da:55:
03:61:05:7b:24:1e:06:cd:e7:8a:da:43:2a:30:28:
99:a8:52:db:2d:c1:84:63:2b:8a:ea:b5:be:a1:c3:
78:03:9d:b8:9c:fc:6c:af:9b:fc:33:ba:b1:b7:1e:
88:82:56:e0:5e:b0:fa:7d:b8:49:3b:cc:1d:2a:d4:
c4:46:50:86:e0:64:94:76:0e:f6:37:ed:89:6c:40:
c3:29:e5:1b:d1:51:88:86:0d:f9:8e:3d:7d:58:15:
a0:45:c1:da:8c:a8:dc:58:bb:4e:9f:3e:29:81:6c:
6d:c0:f6:dd:a3:31:4b:e2:93:08:ca:8b:f1:09:51:
4c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:47:1E:7A:D2:3B:2C:38:9C:41:1D:DF:2D:DB:BF:6A:30:29:91:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94931ACAE47311EE834B8775775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.82.0/24
Signature Algorithm: sha256WithRSAEncryption
28:e9:c4:05:0c:cf:d7:30:77:2c:9c:6e:f4:f2:e7:1b:03:ac:
f9:41:c8:53:cf:c9:0d:8c:d0:0c:34:22:de:ef:fe:c4:d2:a5:
82:21:1f:dc:0c:f7:0b:77:bb:f9:3c:50:84:f5:c1:83:1f:ce:
70:f3:57:75:3d:fd:e3:04:c2:8d:fb:7f:65:d5:be:98:62:80:
28:4b:a7:e2:88:c1:d5:4a:9c:f1:31:80:9d:e5:8d:5f:fa:80:
0c:a8:0b:d0:f9:ed:f8:8e:79:1b:50:5a:50:14:cf:f3:58:1e:
39:b7:31:94:90:47:d6:4b:d3:eb:d5:33:51:8f:1f:8d:09:b1:
12:58:01:96:49:e9:90:f0:ac:3c:90:50:71:5f:a9:f2:36:5e:
ad:66:a0:c8:c7:d0:9b:29:a7:3c:85:50:9f:60:20:6a:ac:1a:
a0:79:9b:6b:1b:f9:75:89:67:de:af:31:c5:c7:66:9b:b1:c7:
27:29:6f:0f:7e:08:bb:4c:e6:40:4d:dc:70:b4:bf:36:c8:8a:
15:18:bd:0e:fb:1f:20:57:8a:4b:87:bb:15:8d:11:e7:86:fc:
14:a9:4a:af:e6:d2:2e:13:3a:33:42:20:7f:11:5a:5f:ce:2f:
0d:a0:85:32:63:db:1c:e7:d1:5f:75:e0:d5:9b:f1:9f:4e:6d:
ab:f7:1d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:03:19 2024 by rpki-client on console-ams.rpki-client.org