Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5801C94070311F087932895762E951A.roa
File: A5801C94070311F087932895762E951A.roa (raw, json)
Hash identifier: HW+IYDbI60ZZA1i1VQg4BxBn234na1W6RfpDAQXoICo=
Subject key identifier: 80:0C:BC:05:A3:CC:22:82:7E:30:9D:A5:8C:46:94:04:41:3A:6E:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01757C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5801C94070311F087932895762E951A.roa
Signing time: Sat 22 Mar 2025 09:54:29 +0000
ROA not before: Sat 22 Mar 2025 09:54:26 +0000
ROA not after: Mon 31 Mar 2025 09:54:26 +0000
asID: 132513
IP address blocks: 154.84.180.0/24 maxlen: 24
154.85.98.0/24 maxlen: 24
154.91.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95612 (0x1757c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 22 09:54:26 2025 GMT
Not After : Mar 31 09:54:26 2025 GMT
Subject: CN=67de88d5-0c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ec:c3:97:14:bc:16:c2:a2:d5:93:d9:f9:c5:
19:c2:16:72:d4:bf:50:f2:4f:8a:92:64:8a:32:47:
b0:83:41:d1:83:4e:29:96:d8:00:c5:f0:d9:f9:98:
41:c8:9c:38:c1:ea:97:4a:65:01:f7:c5:65:9c:35:
99:6c:20:dd:e8:7f:0b:78:58:c2:1a:eb:75:07:59:
ef:6c:73:74:49:46:9b:1b:42:2f:d4:27:94:1b:72:
e6:67:5a:7d:a7:ad:19:0a:1e:24:e7:ea:ce:d4:ec:
a2:6f:f9:85:93:93:6a:bc:0e:5b:40:34:b2:6c:6c:
99:21:c1:09:2a:c3:c9:3c:20:af:a7:04:01:53:35:
dc:c8:0e:c9:04:7d:91:13:da:e2:2d:cb:04:60:ae:
30:ac:54:30:be:ce:9d:69:07:9f:fd:64:e5:32:4f:
89:3e:71:6d:39:6d:b8:aa:ab:83:fd:42:1f:0a:8d:
2c:3a:c1:3c:30:ae:66:e7:a1:e0:9d:32:b4:75:75:
65:3b:80:6f:71:e2:fa:e7:a5:71:70:83:70:77:15:
06:e0:35:bd:b4:28:5b:74:76:00:0b:6a:72:63:1b:
b6:ce:d8:83:b8:bf:20:20:69:eb:80:49:b7:a9:1f:
0a:53:ea:df:4e:7b:66:d8:9a:2d:ab:be:a2:e8:83:
78:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0C:BC:05:A3:CC:22:82:7E:30:9D:A5:8C:46:94:04:41:3A:6E:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5801C94070311F087932895762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.180.0/24
154.85.98.0/24
154.91.139.0/24
Signature Algorithm: sha256WithRSAEncryption
08:b5:9f:24:9c:b0:5c:9b:3a:5e:bd:47:71:80:ca:67:66:e9:
0f:be:67:2b:4d:64:f9:92:ca:58:4e:0e:8d:c8:15:1f:b4:1d:
d3:b7:94:9f:1a:7d:c7:00:4c:24:c9:b7:7e:e8:6b:e9:82:6a:
95:c0:f1:06:3d:b6:fe:64:d0:5a:37:2f:99:a4:a7:f8:d7:13:
bf:04:9d:14:b3:c2:10:33:92:9a:c7:43:69:c1:6c:53:a5:fe:
7a:46:4e:33:9d:13:44:37:f7:6b:8b:49:16:b3:66:8a:c5:43:
16:81:63:40:4e:85:f1:56:eb:66:48:2b:d2:b2:59:87:07:68:
52:8b:58:cc:44:4f:2c:b8:0c:3a:20:ce:91:11:0e:35:d7:87:
ce:07:6a:57:1d:e3:69:9d:be:14:96:98:e2:6d:43:dd:04:38:
ce:4f:db:f6:b5:1f:39:aa:a2:ad:7a:39:af:ca:6b:e2:e8:4f:
07:e9:21:e8:4c:82:8c:95:fb:a2:08:fd:e7:32:81:b6:bf:f4:
98:47:b5:eb:4f:5f:fd:d7:68:38:e3:41:b1:f6:f4:ca:33:35:
ab:8d:f6:7c:1f:bc:9b:f9:20:30:53:30:79:dc:6e:e8:c1:91:
0a:b6:36:e7:7d:50:dd:71:03:02:34:1b:5e:17:b0:ba:9a:52:
c4:0e:73:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:38:30 2025 by rpki-client