Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA01DF6EF70211EE8498CD76775412E6.roa
File: DA01DF6EF70211EE8498CD76775412E6.roa (raw, json)
Hash identifier: rJL8KxWSuy2i3n9AP6Cjq/CD3+iPnH54vnOYbtrk3gY=
Subject key identifier: 68:24:9C:47:45:AF:DF:97:48:0F:A3:A0:D4:35:C2:69:B8:0F:B7:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AAB6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA01DF6EF70211EE8498CD76775412E6.roa
Signing time: Wed 10 Apr 2024 06:23:31 +0000
ROA not before: Wed 10 Apr 2024 06:23:27 +0000
ROA not after: Wed 01 May 2024 06:23:27 +0000
asID: 44559
IP address blocks: 154.203.240.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43702 (0xaab6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 06:23:27 2024 GMT
Not After : May 1 06:23:27 2024 GMT
Subject: CN=66163063-30e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2e:54:fa:50:e8:f8:3a:6f:5f:11:40:ed:eb:
3b:e1:3c:56:4c:7b:4b:de:a2:8e:15:ab:65:9a:fd:
57:99:c7:df:d5:79:40:af:e8:52:65:51:ad:54:4e:
e9:92:78:49:b1:d0:b9:97:ed:8a:3f:d5:2d:59:dd:
f7:5f:08:a8:00:ad:0d:a3:26:9f:79:cb:39:36:fb:
a3:2f:74:43:86:0e:a0:f8:b0:60:71:8f:3c:00:cc:
ce:71:9a:9c:15:87:b5:9e:68:08:53:76:51:48:25:
9a:06:47:81:03:d0:4e:38:da:16:31:f3:b5:45:8c:
8a:7f:9d:b2:f0:95:92:29:64:35:07:09:a7:93:75:
5d:50:ba:1c:4a:24:67:51:c4:77:85:43:9e:30:e1:
e7:a2:ca:70:02:fa:a9:c8:b4:b6:ea:cd:ea:e7:b7:
92:1c:40:4a:6b:2a:7e:8d:71:69:a9:6a:1d:69:fc:
81:55:8e:97:56:2e:03:11:3c:6a:ba:d2:0e:8f:b4:
de:13:d7:71:c9:00:57:b6:56:23:5e:8e:63:19:d5:
36:7c:65:92:0d:bf:f1:46:88:43:ac:a2:cb:3c:ce:
83:5a:ef:4e:b2:b7:8d:e8:ae:77:de:47:51:f7:32:
88:50:ab:d3:17:1e:a3:00:b2:08:86:8c:9c:bf:fb:
e0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:24:9C:47:45:AF:DF:97:48:0F:A3:A0:D4:35:C2:69:B8:0F:B7:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA01DF6EF70211EE8498CD76775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.240.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:e2:17:b3:26:bc:a7:ad:65:6b:ce:59:50:c1:40:60:be:06:
3b:bd:b9:05:b2:45:2c:4c:7c:1d:0a:56:e3:1f:23:86:de:54:
86:de:d2:03:aa:14:2b:8e:22:8c:5f:36:c9:08:0d:0d:db:15:
f6:a6:d9:82:4a:7e:a2:48:64:51:55:67:e1:07:43:5f:48:3f:
cc:ad:99:c7:03:02:d6:59:51:07:d0:15:26:60:b5:84:85:d6:
47:ef:31:ac:89:a4:6b:53:5d:33:c5:75:40:00:1b:1e:51:58:
6f:b1:f8:8e:84:f8:b4:ef:b8:db:1f:0c:31:06:42:c6:0f:e4:
7f:59:5d:2c:98:31:8d:e5:b6:ce:b5:11:31:07:75:74:08:d6:
6f:05:c1:b5:e8:43:f7:09:5f:ea:0a:3d:52:ad:9b:cb:33:f4:
25:e5:b2:db:9a:cc:0a:61:48:cc:18:77:91:a9:44:bb:de:af:
71:14:ef:5c:92:78:e0:36:b1:10:91:2a:89:42:fd:56:17:fd:
fc:ad:78:4b:fe:6a:9f:c3:d5:34:b7:77:da:e6:56:c9:61:b1:
08:91:ba:bc:c1:97:27:ea:63:34:42:1a:51:e9:1a:8c:56:92:
7f:85:c7:6d:21:55:cb:b3:61:3b:44:5c:d0:8c:b5:47:c9:c0:
d7:1e:a4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 12:38:37 2024 by rpki-client on console-ams.rpki-client.org