Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B35209CC0EB111EFA0953328017001B1.roa
File: B35209CC0EB111EFA0953328017001B1.roa (raw, json)
Hash identifier: /M5qkH8X6OzH0ZI/Sfoq7IOCif2/1h2sJNjctZniF5E=
Subject key identifier: F4:28:B1:D1:07:4E:48:DF:D5:CA:8C:45:C1:E7:44:72:42:17:1D:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B6C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B35209CC0EB111EFA0953328017001B1.roa
Signing time: Fri 10 May 2024 09:43:05 +0000
ROA not before: Fri 10 May 2024 09:43:02 +0000
ROA not after: Mon 20 May 2024 09:43:02 +0000
asID: 142062
IP address blocks: 154.206.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46788 (0xb6c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 10 09:43:02 2024 GMT
Not After : May 20 09:43:02 2024 GMT
Subject: CN=663dec29-6bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fb:f9:c8:3c:e6:3b:65:d9:61:25:99:95:41:
e4:81:27:0b:f1:fc:d6:11:13:f3:74:b2:e6:10:84:
0b:18:f8:9e:12:11:b0:d8:76:34:04:75:fb:79:3d:
d8:4c:d4:7b:e8:5e:c7:81:c4:47:6b:ac:37:ff:43:
2e:05:7b:8e:58:34:77:36:9d:af:70:fe:b2:f5:0d:
16:54:de:b9:b0:a5:d0:1c:24:b7:15:e5:57:39:72:
aa:8c:32:02:ef:f2:05:52:af:53:cd:34:0c:fd:65:
13:68:53:d2:b7:c8:06:1d:ae:80:de:c3:64:14:2b:
5c:b6:a3:69:e2:aa:01:92:49:60:c2:f5:83:4c:9f:
a0:58:e5:db:ad:cd:80:64:08:38:5d:97:df:53:98:
17:78:7b:08:ee:6e:59:b0:51:a8:4c:b2:70:2c:2e:
4b:94:4a:cb:a7:4c:cd:6f:41:b1:b5:05:09:40:a6:
13:2a:f6:69:d6:fc:13:e5:03:68:4c:50:97:c5:99:
d1:3e:8b:98:34:f9:3b:13:a2:08:9b:a4:22:3f:7b:
9f:1e:36:15:8a:3c:16:6c:74:48:81:8a:67:74:e5:
01:0a:60:4c:d3:0f:e3:b7:e5:13:45:28:41:95:5b:
b6:f0:a3:a1:da:06:89:f5:34:f6:b7:aa:a3:ec:11:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:28:B1:D1:07:4E:48:DF:D5:CA:8C:45:C1:E7:44:72:42:17:1D:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B35209CC0EB111EFA0953328017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.197.0/24
Signature Algorithm: sha256WithRSAEncryption
45:51:ee:70:95:fd:a2:89:00:e7:a2:05:0c:76:9d:19:98:4e:
50:76:75:0b:9c:61:66:82:83:65:38:93:dd:7d:1f:0b:d4:68:
e9:ab:ff:82:7d:5e:5a:7f:b3:a4:b3:81:ef:5b:3e:58:9d:6f:
a8:3c:81:90:85:1b:6a:d3:c4:36:94:d1:ed:77:c1:e0:a6:d9:
31:8a:6f:40:68:fb:3c:42:2c:4b:72:2a:85:22:c5:98:1d:69:
41:98:38:e7:9d:ed:f5:63:a1:04:ea:09:32:b0:f6:80:41:4e:
41:39:46:ee:19:d8:c7:2f:e5:69:ce:71:64:fb:b3:1c:a3:bd:
b5:09:f3:9b:94:a1:73:19:b1:c6:39:4b:8c:a1:14:0e:a9:38:
68:5f:83:a7:b4:db:62:72:48:70:0d:0f:c5:83:e7:4a:01:ef:
6c:77:3b:ed:62:c8:50:9a:60:a8:ff:54:88:3b:f4:61:37:35:
12:dc:c5:f6:9c:59:dc:8c:c2:56:d5:b5:1a:15:20:33:30:4c:
08:f3:9f:49:f1:65:03:b9:d3:9d:82:98:b0:ba:29:b9:70:b9:
e8:fc:93:24:70:77:5a:11:4a:42:a1:63:27:65:6d:b8:f9:28:
c5:2d:e5:09:1f:b8:b0:7a:b2:e2:6b:e2:b2:9a:9d:ad:86:fb:
e5:62:bc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:21 2024 by rpki-client on console-ams.rpki-client.org