Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFCBFDFCE47011EEA2461A64775412E6.roa
File: DFCBFDFCE47011EEA2461A64775412E6.roa (raw, json)
Hash identifier: TPt5tvsM7hAUYtsY8x3vtSNDFocsdd/nbcU3B9zpKW4=
Subject key identifier: BB:53:07:9E:95:33:66:B8:40:76:BE:F6:8C:7F:49:FA:D7:0D:BA:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A21F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFCBFDFCE47011EEA2461A64775412E6.roa
Signing time: Sun 17 Mar 2024 15:13:14 +0000
ROA not before: Sun 17 Mar 2024 15:13:10 +0000
ROA not after: Tue 30 Apr 2024 15:13:10 +0000
asID: 63139
IP address blocks: 154.94.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41503 (0xa21f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 15:13:10 2024 GMT
Not After : Apr 30 15:13:10 2024 GMT
Subject: CN=65f7088a-69bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:03:67:47:cd:b9:42:68:a3:b3:4b:75:1a:
a1:71:d1:ff:29:e1:83:8e:88:63:ba:3b:0b:93:ae:
17:86:ae:ba:fc:96:7d:de:3e:ea:a5:10:b3:95:d3:
34:80:a9:eb:dc:1e:df:05:2c:ff:50:97:d1:0e:06:
27:4c:c1:92:14:3c:54:7b:6d:63:81:6a:c2:a4:a5:
be:75:9c:7f:61:80:22:75:bc:b0:0c:68:0b:4f:65:
40:81:ce:3e:63:89:b0:79:66:28:1b:d7:99:ad:b1:
5c:ff:26:c8:61:8c:5c:16:f9:16:74:77:92:34:0a:
ac:f4:bb:a7:a6:d4:fe:ac:b8:d7:e5:86:2a:93:93:
5f:b3:62:21:79:bd:ee:d2:1d:88:84:e9:2f:fe:fe:
4e:9c:15:dd:05:a3:8e:aa:d1:6b:83:26:9a:54:41:
60:fc:d5:31:be:5b:50:ff:a7:3e:49:9e:21:94:5f:
d9:ea:0a:79:2c:5c:46:b1:25:2a:2f:9a:55:de:59:
d1:22:1c:28:85:2d:56:ee:a7:e9:c8:59:23:e3:e5:
41:4a:6b:b4:3a:a9:b5:1c:cc:49:ee:03:68:16:3b:
19:2b:ce:2d:c5:97:ca:07:ca:c7:29:6f:84:56:c0:
51:4d:e9:4b:49:d1:c1:12:c6:6a:f7:de:78:29:cd:
6e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:53:07:9E:95:33:66:B8:40:76:BE:F6:8C:7F:49:FA:D7:0D:BA:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFCBFDFCE47011EEA2461A64775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.84.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:b2:69:15:c5:79:02:f0:00:a6:56:9e:2e:72:10:1a:c9:18:
dc:df:5a:50:37:41:44:52:7f:63:59:2d:78:8a:d2:07:e6:c9:
9c:74:70:c3:58:87:55:e9:2f:f3:2f:6d:27:b9:2c:7c:dc:c4:
e4:d1:6a:0c:c0:a1:0f:2b:df:04:5c:d1:a5:46:12:a0:09:be:
a3:b1:f6:0e:1a:df:1a:78:cb:7b:90:13:59:24:27:7a:e2:1b:
59:d7:e6:66:98:90:9d:77:0b:29:cf:6d:ac:6e:28:88:b4:30:
c3:46:7f:09:9c:6c:df:6e:49:ae:f1:63:dd:a3:8e:59:bd:72:
3e:e2:3b:1d:fd:2e:64:a4:c2:e1:22:e8:dc:e0:ad:03:29:a8:
ae:5e:d5:4e:a2:f8:82:94:5b:b3:ef:b5:df:21:e5:86:12:d1:
ad:5e:ce:3c:87:c7:0e:af:54:fb:e4:a6:47:68:34:4b:3b:53:
e2:62:4a:8b:1b:48:73:d0:9a:ab:91:d3:be:48:aa:a9:fc:cd:
6a:99:ee:c4:d6:7e:ee:c0:71:70:5d:ca:23:03:b4:b6:a3:47:
46:58:b1:d1:8b:ac:fe:82:7f:ff:83:3e:14:b5:ac:af:7b:37:
08:54:89:c7:d5:6d:e7:8a:c8:fb:c2:a9:4b:31:2d:19:3b:fb:
04:d4:73:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:40:37 2024 by rpki-client on console-fra.rpki-client.org