Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA99AC64155911EEA76172404AD9E6FC.roa
File: BA99AC64155911EEA76172404AD9E6FC.roa (raw, json)
Hash identifier: VBQmKaxmyzfh+QWf/1Hrf1RlYMNOqaykkWXKlv8M58Q=
Subject key identifier: 8F:A7:1F:30:AB:E7:C1:AF:A4:CC:F9:BD:15:87:51:F0:6C:20:FF:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2E41
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA99AC64155911EEA76172404AD9E6FC.roa
Signing time: Wed 28 Jun 2023 02:16:02 +0000
ROA not before: Wed 28 Jun 2023 02:15:59 +0000
ROA not after: Wed 24 Apr 2024 02:15:59 +0000
asID: 63888
IP address blocks: 154.205.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11841 (0x2e41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 02:15:59 2023 GMT
Not After : Apr 24 02:15:59 2024 GMT
Subject: CN=649b97e2-07bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:d6:20:81:12:68:0a:69:63:a6:15:82:26:
18:95:f3:7c:4d:cd:31:c5:a7:f0:ce:0b:74:ad:e5:
76:68:c8:5e:98:bb:3a:ca:74:65:5c:2a:b1:7e:9b:
55:1f:c0:47:69:af:93:36:73:56:2d:bb:37:3f:59:
d3:9b:f7:9d:b1:95:f1:6b:05:0f:4c:ea:8c:9d:6b:
6b:c6:f2:0e:41:1d:c3:fe:12:3c:60:f4:05:4e:9e:
e1:26:42:b5:af:37:36:f6:19:65:2e:2c:5c:8d:e2:
77:d2:03:9e:b4:e4:0d:37:07:ba:9c:ff:9f:6f:cc:
4d:a2:70:9d:ab:ea:e0:3e:02:c1:fd:03:49:d2:8e:
43:e6:cc:76:d7:dd:56:75:d1:aa:ac:20:26:55:3d:
9c:13:df:f2:52:db:c4:15:1d:b7:2b:dd:ae:ef:1b:
0e:a2:a0:bb:7c:a5:ae:62:90:50:c8:6b:2f:1f:10:
f0:97:36:b1:0f:e0:b0:21:1c:6f:03:76:00:b2:05:
91:58:21:e0:4d:da:4b:42:37:db:79:43:30:ff:df:
77:f9:61:31:80:3d:ec:7f:24:a3:03:7e:a0:40:9f:
8a:96:fc:bc:39:0b:05:d5:35:4b:25:ba:de:af:88:
e5:24:47:ea:36:8a:93:da:d9:23:fe:ec:09:d3:fc:
d9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A7:1F:30:AB:E7:C1:AF:A4:CC:F9:BD:15:87:51:F0:6C:20:FF:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA99AC64155911EEA76172404AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.32.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:1d:12:c0:28:fa:0d:8e:bd:5a:52:19:4f:9a:46:f0:75:43:
74:5d:b3:cd:60:4f:11:5b:08:4a:04:7e:61:eb:c5:ac:74:b1:
4f:a8:ab:cc:bb:48:e5:40:3c:3f:66:cc:1b:eb:a6:2e:e7:57:
28:ac:1a:3b:a5:a5:dd:a9:97:72:a5:3c:ed:c1:a0:2f:fb:9c:
7a:e7:60:77:2a:26:db:ce:43:05:e9:74:34:4a:e6:2e:7a:f9:
5c:50:e2:24:66:eb:61:6e:d1:2c:f3:23:26:9a:aa:0b:b5:01:
38:a3:b9:c5:b3:50:9d:97:1c:76:c9:b7:04:ff:c8:ed:77:9f:
9e:0f:88:b4:68:af:f2:a5:5c:7b:03:e0:93:3e:bd:5b:5e:68:
a6:73:97:4d:d4:a6:85:0b:a8:fa:f4:f3:5a:ad:e4:16:c5:bf:
4a:cc:a2:41:9e:5a:41:37:c2:67:97:d3:1f:75:79:d3:2c:5b:
cf:3e:3c:52:3e:6c:bd:23:8b:7f:44:0e:61:d5:af:fd:25:3a:
5f:80:e9:75:6f:46:b9:ed:90:f8:02:91:52:a9:35:f0:2b:60:
da:ca:2a:f0:c7:e3:ba:75:0a:f3:0e:23:a1:e1:7d:9a:d8:c3:
96:96:e4:8c:67:34:9a:27:9c:2c:3a:09:05:a1:80:87:4f:7b:
d2:b6:f7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:44 2024 by rpki-client on console-ams.rpki-client.org