Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0229750E47711EE94D52F91775412E6.roa
File: E0229750E47711EE94D52F91775412E6.roa (raw, json)
Hash identifier: S1C8DShQ5LhcmIojnnN0l9+dtRLnwAcaQHM7Tyg7CSg=
Subject key identifier: 78:A0:68:42:05:A9:A3:B2:17:43:C3:4A:FA:F9:96:BE:D7:10:94:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A269
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0229750E47711EE94D52F91775412E6.roa
Signing time: Sun 17 Mar 2024 16:03:21 +0000
ROA not before: Sun 17 Mar 2024 16:03:17 +0000
ROA not after: Tue 30 Apr 2024 16:03:17 +0000
asID: 63139
IP address blocks: 154.94.66.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41577 (0xa269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 16:03:17 2024 GMT
Not After : Apr 30 16:03:17 2024 GMT
Subject: CN=65f71449-b1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f6:34:16:7f:38:6b:d1:92:ff:93:8d:0a:f7:
c8:1e:1b:61:03:1e:b3:b8:1b:78:ee:b4:9c:0a:6c:
2a:c4:4c:02:cd:ab:37:ae:de:a1:d3:0f:86:31:2f:
8f:e8:67:db:d9:46:80:93:19:47:a6:ab:a9:24:03:
fc:05:9a:77:24:cf:ec:be:52:36:bc:4a:44:d4:87:
91:48:78:e6:0b:52:61:d5:0b:64:27:75:fd:46:09:
bd:56:92:ab:39:91:53:a8:e5:e1:8e:18:74:43:77:
4b:aa:17:18:0e:34:c7:7e:de:8c:c6:9e:22:f7:89:
11:64:af:4c:dd:3c:d6:ed:9c:70:a0:c6:8a:67:66:
da:2f:d8:53:d8:d9:0e:fd:dc:90:e6:0e:5f:0d:96:
91:99:d3:36:35:fa:94:8c:99:1b:8c:a7:e8:b4:cd:
35:fc:bb:a4:54:98:63:e1:3a:7d:0b:a9:96:a0:91:
8a:d7:ae:16:44:fb:f8:60:ab:21:73:01:db:cc:c5:
5c:84:c7:56:a6:a4:c7:e1:cb:1f:ee:da:b8:cd:17:
18:39:39:6e:fb:c5:4d:2a:8e:73:9f:f0:eb:88:df:
9b:00:57:40:90:68:d8:0b:62:71:60:f8:52:d7:c5:
b5:55:d6:2d:3c:fb:df:d9:de:37:2a:71:1d:d1:ae:
89:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A0:68:42:05:A9:A3:B2:17:43:C3:4A:FA:F9:96:BE:D7:10:94:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0229750E47711EE94D52F91775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.66.0/23
Signature Algorithm: sha256WithRSAEncryption
26:00:01:a8:1c:a3:8b:b6:96:9a:60:3f:68:fe:b2:cc:46:0f:
66:24:b2:6c:1c:4a:94:7d:52:d0:3e:b1:30:16:67:ab:85:a9:
9d:16:14:b0:f4:03:0a:e1:2b:d7:64:8a:b8:34:40:6a:1a:fe:
2b:1f:2f:d0:3b:bf:9b:88:dc:bf:d1:c9:07:30:a3:2d:21:39:
ae:ec:b5:b6:dc:fd:b9:f5:dd:6f:93:73:f9:6f:75:64:6b:fd:
7b:02:a5:63:69:1b:3b:f9:55:89:cf:20:2b:b6:60:8c:ca:ef:
eb:90:dd:e5:aa:5e:32:b4:2f:d4:cd:c6:87:ea:cb:23:76:e0:
ce:a2:67:cb:13:ea:a2:c9:e1:e1:7e:83:fa:48:36:f1:db:3c:
ec:11:f0:a1:af:8b:57:be:dc:6f:db:28:8d:ce:e0:de:c2:68:
f7:a7:f5:76:2e:d1:21:4d:7b:8b:c9:84:4a:74:8f:57:78:63:
ce:c5:f4:d7:83:88:89:48:ba:2a:ce:80:6c:af:39:f8:82:c7:
2e:bd:6b:44:7b:56:48:c4:92:28:f8:2d:d7:f4:24:0e:18:d1:
09:25:ea:e0:9f:e7:cc:60:51:fc:40:2e:5b:c2:dd:b9:50:00:
02:d8:76:ec:80:22:0d:80:66:58:b6:a2:48:ab:8e:07:ba:51:
6e:b3:15:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:40:37 2024 by rpki-client on console-fra.rpki-client.org