Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3A027DE9F9711EFA7471A63762E951A.roa
File: B3A027DE9F9711EFA7471A63762E951A.roa (raw, json)
Hash identifier: ZDiuJSTJuD7+id0CVkLHXP66OJcZ6f0lmjnP+izGpfI=
Subject key identifier: 56:4D:55:25:C9:1F:95:BE:FD:2A:B9:01:6C:8F:84:F6:EE:C8:67:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010BBE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3A027DE9F9711EFA7471A63762E951A.roa
Signing time: Sun 10 Nov 2024 19:12:17 +0000
ROA not before: Sun 10 Nov 2024 19:12:14 +0000
ROA not after: Thu 21 Nov 2024 19:12:14 +0000
asID: 63139
IP address blocks: 154.223.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68542 (0x10bbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 10 19:12:14 2024 GMT
Not After : Nov 21 19:12:14 2024 GMT
Subject: CN=67310591-19aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:64:5d:c0:c1:e9:14:44:b5:26:ff:00:65:
12:9c:e3:61:d5:fc:d2:87:c8:c2:34:c8:6e:ba:8e:
76:22:be:5d:38:b6:9c:e8:e0:48:e7:aa:b6:86:90:
bf:9b:94:8c:1d:a1:0d:a4:98:5e:16:64:d9:e5:fe:
e3:50:f8:ef:82:c1:be:36:fa:be:53:4b:f6:b8:c1:
fc:1d:30:a6:a1:2e:17:72:65:9c:f2:b4:ce:e2:e0:
bb:fe:6b:91:96:26:d9:8d:b3:7a:c4:48:bd:21:67:
41:ff:f3:db:17:54:66:39:72:da:bd:96:e3:01:39:
2c:52:0d:41:4b:7a:45:ee:ca:b0:d2:20:78:5e:3a:
15:24:ba:88:59:b4:3e:7f:d0:44:5c:21:3c:4a:b5:
cc:99:b1:b4:49:d7:67:73:28:54:e2:6f:71:30:fc:
74:25:02:b4:8d:2e:3f:1d:fd:92:bd:e6:c6:ea:5b:
9b:41:8f:08:a5:f8:87:76:2f:b0:67:ab:28:e2:ee:
a6:42:48:6c:c3:35:39:b4:e8:6b:eb:a1:60:96:ea:
cd:aa:26:a4:04:04:cb:cb:c5:84:e6:f1:ff:65:6b:
54:9b:c0:38:8b:8e:4c:a4:9a:fd:f7:7a:eb:db:93:
36:55:2c:8e:35:48:24:c2:64:d6:cf:6a:be:e6:7e:
0b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4D:55:25:C9:1F:95:BE:FD:2A:B9:01:6C:8F:84:F6:EE:C8:67:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3A027DE9F9711EFA7471A63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.22.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:80:43:12:75:23:57:b7:4d:f2:86:17:58:a9:d6:63:39:eb:
e1:11:be:53:b9:cd:03:8c:5a:c3:89:db:27:33:24:78:c8:31:
36:63:36:eb:f7:c9:8f:0a:50:1d:6c:a0:41:fe:b2:0c:b8:08:
dd:2c:ac:4f:2c:f6:26:9d:c6:e4:27:53:09:be:8e:d7:8b:3c:
3d:12:c3:c0:fe:67:5c:20:8c:35:7c:c0:b3:12:06:99:dc:d0:
94:ff:0f:3f:eb:7e:d2:ad:14:59:ef:38:1f:b6:af:69:f1:10:
e2:e6:41:9a:3f:a0:02:0f:35:99:0f:e4:d5:1f:71:26:ef:ee:
18:af:b2:32:d3:7c:26:22:4d:a4:5a:a8:b0:37:22:9a:6c:72:
c6:6b:57:14:5f:52:a2:c8:b0:3b:9a:e8:39:a8:36:be:3e:34:
a5:da:43:c1:2d:88:33:bb:9e:e5:8e:9a:ee:cf:78:1f:6a:9c:
22:17:68:62:5f:5d:8f:8a:fb:aa:28:b6:1c:12:e0:77:02:e0:
3d:9b:b0:b8:2d:35:93:d2:fd:f8:ee:8f:21:66:8e:91:70:7e:
a3:f4:04:9d:72:fe:f8:9c:af:a5:ff:0b:2c:5b:bd:95:ed:03:
09:03:45:e1:05:79:a5:11:a7:db:79:f4:41:33:ad:0b:1b:20:
b7:49:42:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:02:52 2024 by rpki-client on console-ams.rpki-client.org