Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF6AF89A155911EEA9D70E414AD9E6FC.roa
File: DF6AF89A155911EEA9D70E414AD9E6FC.roa (raw, json)
Hash identifier: N4WSnbL09pjCgVJMO7cEQ+YsisVqWCxGLRzMdeUXWRU=
Subject key identifier: D2:6A:21:3D:AD:0E:6C:49:71:11:6C:D1:CF:0E:42:B5:5C:83:EB:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2E43
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF6AF89A155911EEA9D70E414AD9E6FC.roa
Signing time: Wed 28 Jun 2023 02:17:04 +0000
ROA not before: Wed 28 Jun 2023 02:17:00 +0000
ROA not after: Wed 24 Apr 2024 02:17:00 +0000
asID: 63888
IP address blocks: 154.205.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11843 (0x2e43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 02:17:00 2023 GMT
Not After : Apr 24 02:17:00 2024 GMT
Subject: CN=649b9820-c453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:58:27:c1:2f:f4:ac:18:6c:28:71:6a:56:89:
a0:73:2b:7a:86:cb:fd:37:50:6e:a0:07:06:37:52:
1f:a9:d9:f1:36:e3:42:d2:28:98:c8:66:08:4b:0d:
a0:22:c9:75:fa:77:1f:84:76:db:36:d4:31:d6:f4:
4d:0f:11:bd:be:b2:1b:cd:38:7d:98:cb:e9:07:db:
22:67:92:fe:42:47:38:20:d6:c9:55:2b:11:20:b3:
0e:37:7d:b1:07:db:a5:67:a3:28:58:45:73:25:7b:
4c:cb:45:58:bc:66:83:e3:9b:f4:b1:dd:ce:08:e1:
fa:a3:56:99:2f:d6:12:00:c8:fd:a1:0d:41:b5:4b:
1b:60:e6:ee:2e:aa:03:5e:3e:25:b7:b5:8a:ca:41:
0c:29:9c:03:4b:6c:bd:82:9e:1d:4f:7f:c5:d5:d3:
45:79:05:01:a0:71:27:f5:63:61:93:60:44:92:a4:
23:67:eb:96:f8:2d:85:92:21:b2:4c:03:dd:57:24:
49:b9:dd:18:80:68:6b:d4:68:0e:d5:db:e3:c1:f4:
0b:70:99:80:ec:e7:34:4f:62:1f:ea:1b:63:5a:2f:
99:63:b7:b7:ff:76:1f:ae:10:6e:94:8e:fb:54:6a:
20:86:06:af:89:5e:70:84:33:fc:f4:b9:25:cb:d1:
c7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6A:21:3D:AD:0E:6C:49:71:11:6C:D1:CF:0E:42:B5:5C:83:EB:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF6AF89A155911EEA9D70E414AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.33.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:f7:38:1e:7a:c9:bb:6f:c1:f2:33:1e:3e:06:9f:e9:18:97:
18:99:bf:e9:df:5a:07:f2:d6:8a:3a:a9:95:c8:cb:08:47:60:
03:9e:9f:1e:8d:da:6c:08:a6:25:a4:cf:ee:09:07:3f:19:a4:
04:67:27:66:48:57:be:69:3c:d4:6a:95:35:6d:fc:18:fd:ec:
f8:82:9e:4c:f7:99:6f:9a:a5:21:2b:37:89:22:ff:16:ca:f1:
d2:dc:89:1a:38:ec:fe:71:31:35:7b:a6:04:0b:0d:18:37:fb:
f1:81:6f:10:52:65:2c:6a:c9:1f:5c:2d:b4:b7:c0:32:9b:a4:
50:ae:78:2e:22:1c:55:30:11:3f:dc:14:c9:c0:f2:67:c1:4c:
c9:23:0b:de:4b:1f:c7:74:eb:56:e6:2c:35:4e:98:9e:05:b2:
ed:8b:b8:3a:9c:20:9f:be:71:63:95:9f:2a:7a:d5:0b:9d:37:
16:69:a8:a5:c2:51:d0:48:c8:2f:80:df:a0:dd:95:5e:d5:79:
20:3d:06:9a:3e:f8:18:76:38:23:71:f2:a1:2b:01:1a:8b:2e:
ff:5d:74:d1:3e:e4:a9:2b:bb:01:8b:56:13:ea:b2:66:ba:5a:
29:a9:92:f0:71:38:bd:5d:bd:d5:fe:62:3e:01:5b:7f:fc:d8:
dd:95:f0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:44 2024 by rpki-client on console-ams.rpki-client.org