Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0A71380441511EF9B42FB47762E951A.roa
File: C0A71380441511EF9B42FB47762E951A.roa (raw, json)
Hash identifier: EFAYz1/t5+109qwkNW4aoRWFm6PYLEnK+UWUVPeZl7E=
Subject key identifier: 3C:7A:8B:AC:CE:5D:F0:1E:28:CB:A6:6B:9B:3B:E8:CD:BB:2A:45:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D323
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0A71380441511EF9B42FB47762E951A.roa
Signing time: Wed 17 Jul 2024 08:22:49 +0000
ROA not before: Wed 17 Jul 2024 08:22:46 +0000
ROA not after: Sat 27 Jul 2024 08:22:46 +0000
asID: 22773
IP address blocks: 154.84.172.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54051 (0xd323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 08:22:46 2024 GMT
Not After : Jul 27 08:22:46 2024 GMT
Subject: CN=66977f59-b8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:3d:3b:37:96:18:fc:c1:6c:90:b8:d5:f0:
62:84:f4:bb:60:7c:07:5e:61:6b:da:0b:70:0f:35:
2c:95:35:89:2a:77:61:e6:c9:ca:9d:e1:54:d0:64:
71:e5:c4:a2:7b:20:a0:9b:0f:b0:1a:f5:26:cf:3c:
b5:47:e4:b2:32:6b:e1:84:a3:22:99:13:16:32:88:
6c:a1:94:d5:5e:6e:72:18:e9:63:d1:8f:d2:2e:69:
41:62:ab:96:71:11:71:51:72:c1:7b:83:18:88:36:
fa:b6:b4:a8:73:ff:77:01:f2:73:eb:dc:f6:3f:01:
94:54:38:4a:a1:5d:03:8b:57:d7:e9:cb:3c:34:8c:
f8:cf:de:9f:4b:01:26:82:f7:c4:50:88:5e:1f:fc:
59:99:ae:ff:33:2a:89:af:c4:dd:b0:5e:ea:a5:48:
0b:37:dc:0d:6a:ef:9f:96:7a:2a:10:26:62:75:9c:
34:8e:2d:48:57:4d:6a:2a:13:12:7c:d6:14:86:53:
91:ff:8f:4b:7d:0e:9d:4b:31:03:76:15:f8:aa:50:
45:d5:03:aa:32:ec:f7:88:23:01:59:b6:60:4a:89:
3b:16:3b:41:28:34:50:4e:37:30:15:65:7a:66:09:
fd:a7:90:41:49:6e:ed:b3:26:e9:d8:19:55:9f:da:
ba:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7A:8B:AC:CE:5D:F0:1E:28:CB:A6:6B:9B:3B:E8:CD:BB:2A:45:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0A71380441511EF9B42FB47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.172.0/23
Signature Algorithm: sha256WithRSAEncryption
c9:2e:6f:74:3c:be:ed:ff:6f:0c:49:24:3f:45:8b:6f:d4:97:
f8:89:20:fa:f3:78:f0:c4:00:ea:82:fe:aa:46:35:b0:24:85:
25:88:fa:27:b3:80:e8:43:c2:29:51:58:29:81:97:8b:13:44:
b2:bc:7c:dd:62:33:97:11:86:b4:82:ad:22:10:ee:90:a9:68:
35:71:bc:4a:05:24:40:08:66:a3:21:fb:c8:42:ba:a3:1f:8e:
a4:7f:b3:fe:cd:bf:d1:81:c8:22:de:bc:c9:8c:e4:77:88:77:
22:c0:28:69:69:53:f4:79:ae:7c:c7:71:49:79:f1:70:0a:13:
b1:81:28:6c:cb:42:ae:e7:87:57:d9:62:14:7f:e5:d6:bf:e3:
20:6c:f4:3e:64:f0:1e:c1:58:3c:9b:dc:ee:1d:9b:0c:42:bf:
3b:b6:90:d7:84:e7:0b:42:7a:0b:26:f2:cc:38:4c:29:93:2d:
4c:f8:d6:9f:81:7f:79:d1:3d:94:8e:ac:aa:84:ec:52:f0:1f:
21:db:4f:14:86:0a:22:ab:01:1a:93:02:fb:cb:df:2b:dd:e7:
d0:12:39:d0:93:57:6e:dd:58:b4:04:66:5a:0d:f5:e4:99:d2:
03:4b:70:04:8b:fa:ba:71:94:23:17:45:20:24:76:bb:2d:6e:
8a:21:30:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:06:40 2024 by rpki-client on console-fra.rpki-client.org