Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A953CF4AE78E11EE846E8077775412E6.roa
File: A953CF4AE78E11EE846E8077775412E6.roa (raw, json)
Hash identifier: zBcEUOYgmIFzylvDcNw72dF5vmf/DVYv4tysqAMAsFU=
Subject key identifier: 28:2A:FB:D5:EB:9D:3D:12:38:52:1C:84:5B:41:14:B1:7F:6F:32:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A5DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A953CF4AE78E11EE846E8077775412E6.roa
Signing time: Thu 21 Mar 2024 14:24:01 +0000
ROA not before: Thu 21 Mar 2024 14:23:57 +0000
ROA not after: Thu 25 Apr 2024 14:23:57 +0000
asID: 5065
IP address blocks: 154.206.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42459 (0xa5db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 14:23:57 2024 GMT
Not After : Apr 25 14:23:57 2024 GMT
Subject: CN=65fc4301-ea2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:88:25:60:24:43:7f:f7:a9:51:c5:86:5b:
8e:1e:b5:82:b9:e1:71:6d:4f:f6:fb:07:77:21:c3:
cd:ee:0b:35:74:e0:c3:05:27:8f:c9:b1:0c:e1:35:
c3:b9:00:a1:13:04:6a:76:9b:e4:e0:78:c6:9c:20:
f3:d8:e5:06:5a:39:15:e8:e9:75:91:13:53:33:15:
a4:33:02:53:c8:d9:86:71:3c:b1:1c:05:e9:01:64:
24:a5:58:d8:a6:fa:df:30:aa:89:31:b0:41:d0:b7:
9f:af:c4:ee:4a:c9:ae:4c:d3:78:12:01:cb:ab:0a:
f6:bc:73:0a:e0:5c:de:22:90:ff:7a:0e:c0:dd:20:
74:6e:2b:4a:0f:1e:47:b0:b2:44:be:f4:b3:74:e7:
7a:a2:3c:2c:09:23:e1:5f:f9:4b:80:a8:5f:f3:ab:
b8:a4:be:3d:05:5b:ee:69:02:68:8a:5e:70:7b:55:
da:e7:ef:b3:66:48:0e:a5:3c:c7:db:88:8a:bc:d4:
81:86:bb:d1:ea:81:1b:96:2a:78:05:3a:f3:0e:9d:
c4:c4:2a:44:81:5e:99:b8:7b:df:9f:b8:83:4b:5d:
29:fb:bf:0c:00:60:1d:70:26:d9:12:32:32:e0:72:
21:1c:e8:77:63:70:27:a6:d0:ce:3a:bb:f3:53:30:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2A:FB:D5:EB:9D:3D:12:38:52:1C:84:5B:41:14:B1:7F:6F:32:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A953CF4AE78E11EE846E8077775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.36.0/24
Signature Algorithm: sha256WithRSAEncryption
96:48:b7:75:8a:5a:8d:6c:3c:c3:d8:46:54:90:b9:57:26:69:
c4:9a:e4:00:9d:3a:67:0a:4d:d3:16:24:99:26:75:d0:94:50:
30:02:88:83:f7:c2:2c:2d:9d:45:a2:42:a6:c2:2f:af:a9:b0:
5c:c6:80:71:3f:5a:ef:3c:a6:bc:8b:29:a1:00:36:5c:c2:aa:
2d:20:cf:c4:8e:d3:a8:5d:0a:8b:e0:f1:8d:81:c0:4c:68:2d:
e7:1d:41:7c:c2:0a:d2:37:16:b5:fb:9c:cc:00:00:7f:12:9d:
10:d9:51:bc:ba:7c:e8:df:a4:44:62:b3:4d:01:8a:10:f8:4b:
8f:16:75:f3:34:ba:c0:65:d5:a2:13:55:d2:4a:81:41:57:f4:
ba:ae:f2:c1:1a:b0:1c:e0:a1:9a:c8:ef:10:e4:09:be:21:9b:
93:ef:4c:f9:31:9c:3b:98:5f:66:8b:70:72:5e:6c:f3:46:ed:
3e:3b:5c:1e:37:67:7e:48:0f:ec:db:36:b2:45:ef:e6:91:bd:
8e:ef:4d:ed:0f:ea:47:91:6d:56:7f:c7:9f:4e:3e:71:64:af:
72:a1:64:01:4f:c2:68:f9:5e:be:93:96:cf:0f:f6:9f:34:51:
01:79:3f:b7:a5:3a:1c:44:1c:b3:76:ae:f0:4c:64:91:16:95:
cf:f8:fe:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 01:59:41 2024 by rpki-client on console-ams.rpki-client.org