Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D60003869F9111EFA7C8D4BE762E951A.roa
File: D60003869F9111EFA7C8D4BE762E951A.roa (raw, json)
Hash identifier: KztwjqRV2UVlwonan3BGbWZia2qA/xdrPTW/frdeUQU=
Subject key identifier: C1:7A:97:09:A6:B5:34:F2:07:F1:C4:84:3E:7E:6D:D0:4C:53:DB:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010B76
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D60003869F9111EFA7C8D4BE762E951A.roa
Signing time: Sun 10 Nov 2024 18:30:18 +0000
ROA not before: Sun 10 Nov 2024 18:30:14 +0000
ROA not after: Thu 21 Nov 2024 18:30:14 +0000
asID: 63139
IP address blocks: 154.223.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68470 (0x10b76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 10 18:30:14 2024 GMT
Not After : Nov 21 18:30:14 2024 GMT
Subject: CN=6730fbba-c189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:24:a9:d0:12:31:8c:5b:84:0f:f0:36:e7:bc:
1e:29:5d:cd:32:3a:fd:8b:2b:3a:8e:9b:48:ca:80:
1b:03:68:d1:cb:ab:70:59:d3:ae:87:d6:ab:4a:3f:
b0:60:d9:0a:f3:b7:2c:b0:da:8f:88:e7:9c:a9:58:
58:8e:60:f0:50:dd:3d:52:6f:ef:51:41:5b:16:ef:
89:2d:aa:5a:ef:be:6f:ce:4d:e4:08:1a:f2:5b:40:
31:00:d9:56:9a:fe:e5:37:61:b3:bf:99:3c:16:5b:
4e:9f:01:a1:5b:8c:64:4f:e7:ca:98:19:04:4f:10:
12:c8:e0:05:d7:a7:84:5c:d3:c2:15:e0:6d:61:85:
55:29:10:41:ba:a7:6f:1e:1b:3e:b6:36:77:58:c7:
e0:57:37:7d:df:a9:01:ae:f1:6e:24:61:51:28:be:
2d:89:22:93:9c:8c:f5:e3:3f:5f:bf:ea:dd:a7:b2:
91:e8:47:74:8e:1d:85:53:d3:bf:f1:eb:29:b3:fa:
21:43:b6:72:52:43:a7:5e:4b:cd:28:5d:77:34:b3:
63:e7:73:75:a3:72:3b:49:be:14:13:0d:60:62:b2:
b3:4b:c2:55:10:d6:c9:a4:fc:5a:af:02:4d:43:55:
fb:97:a9:db:89:cc:e0:e2:06:50:2e:57:88:c5:85:
1a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7A:97:09:A6:B5:34:F2:07:F1:C4:84:3E:7E:6D:D0:4C:53:DB:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D60003869F9111EFA7C8D4BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.30.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:6a:7a:4d:35:a4:a9:20:6d:15:92:05:c6:6c:e8:a5:4a:f6:
b5:72:4a:7f:3c:41:0e:7d:ce:50:19:73:84:69:03:9d:09:ca:
07:4f:dd:a8:a7:27:fe:b3:f9:91:56:62:1f:8c:d5:b1:c4:54:
01:40:c3:58:db:e5:d4:d6:56:ee:1a:b1:73:78:04:f0:08:cb:
81:da:fb:ab:ca:ab:ba:d9:62:7e:54:52:c5:10:7d:aa:3f:37:
84:33:b1:08:b0:e6:11:ac:44:0a:1a:e8:dc:dc:81:b5:78:24:
62:13:7f:3c:f0:63:0c:5b:b7:15:09:d8:20:d6:e8:a7:b4:62:
e5:bc:eb:e6:f6:b6:c3:67:37:46:ff:3f:bf:59:85:64:9a:0f:
43:58:4b:ec:a3:26:69:5f:6d:b4:ff:7b:44:05:78:f8:6a:19:
c2:a7:a3:88:77:8e:18:b4:97:96:92:cd:c5:80:1f:12:4f:00:
a3:9c:5d:9a:50:0a:d5:b8:6c:fb:9f:91:d4:d2:54:2b:9c:37:
a7:7d:a2:33:41:18:91:b7:db:97:de:a1:af:45:e6:cd:b9:90:
ea:8f:22:57:4c:6c:ad:03:c1:9b:35:c0:27:19:e9:2b:ba:7e:
70:31:1a:21:11:35:18:a0:65:b1:a9:e8:50:71:55:4a:99:96:
52:e2:53:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:02:52 2024 by rpki-client on console-ams.rpki-client.org