Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6A4EE10E78E11EE9CBB4A78775412E6.roa
File: E6A4EE10E78E11EE9CBB4A78775412E6.roa (raw, json)
Hash identifier: mW+ncXDpTwAnNGSd3mn8VE5uOPvWmG0CCmB+qyd79xo=
Subject key identifier: BF:9D:6F:3A:A0:6F:BF:4E:08:98:84:FE:80:6F:E6:80:F5:E3:FD:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A5DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6A4EE10E78E11EE9CBB4A78775412E6.roa
Signing time: Thu 21 Mar 2024 14:25:44 +0000
ROA not before: Thu 21 Mar 2024 14:25:40 +0000
ROA not after: Thu 25 Apr 2024 14:25:40 +0000
asID: 5065
IP address blocks: 154.206.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42461 (0xa5dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 14:25:40 2024 GMT
Not After : Apr 25 14:25:40 2024 GMT
Subject: CN=65fc4368-ce86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:64:8f:4b:79:37:10:4a:77:33:8a:0e:68:ab:
c3:dc:47:c1:06:bc:95:71:e2:f5:f0:7b:04:16:86:
bf:2e:a9:b2:2b:3a:f6:7a:f5:1b:a8:67:bb:7a:09:
a8:90:d4:4a:16:6d:dc:59:82:81:71:3c:d6:66:e0:
dd:01:af:7d:03:af:f1:c3:49:1d:c1:7b:5b:c7:01:
84:05:87:cd:6e:2f:27:12:57:39:f8:bd:18:d1:3c:
41:b3:7a:80:14:e4:c5:a4:50:79:29:67:9b:78:2c:
b8:68:6e:47:8d:a1:a6:a2:0b:b7:a2:5a:7c:c4:ca:
c3:22:53:68:8d:85:35:c4:11:0c:85:1d:15:7a:1a:
fd:a1:45:6f:12:53:fc:f6:32:be:46:1d:1d:db:e3:
bc:39:be:c4:b9:4e:4c:93:42:d2:7c:7a:6a:f8:f9:
b6:7f:d0:80:d6:dd:b6:ac:3e:d4:a1:f1:5e:60:5d:
e1:72:75:e4:55:5b:00:bf:c0:8b:f9:28:3e:cc:f5:
9c:a9:1d:97:dd:98:4f:08:4b:48:77:5e:94:67:19:
f1:fb:d5:d7:63:bb:cb:47:47:e4:19:3a:0d:97:a1:
80:43:6c:af:2e:ba:09:97:95:76:5a:f4:b8:85:90:
fb:18:48:10:46:17:8e:23:f0:bc:77:d4:76:b0:22:
7d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9D:6F:3A:A0:6F:BF:4E:08:98:84:FE:80:6F:E6:80:F5:E3:FD:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6A4EE10E78E11EE9CBB4A78775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.33.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:ef:b5:f5:c0:d2:56:76:d7:35:5a:40:ea:81:7e:b5:4e:03:
68:bb:a4:0c:39:69:3d:e3:2c:30:53:8d:91:47:f4:51:42:ad:
77:eb:1a:ac:5a:f1:dc:3d:56:07:52:45:15:2a:45:6b:a6:9f:
22:dc:8f:a9:8c:13:00:0f:f7:9d:05:e7:17:a9:00:84:4b:7a:
e8:5c:28:7f:bf:f5:66:69:34:1b:61:63:be:58:aa:e5:6d:a9:
52:5d:c4:19:9a:e9:10:4d:07:69:0f:13:b3:7f:65:cd:51:9d:
cc:34:97:3e:26:2b:a7:33:76:a6:3e:61:f9:21:f8:d7:4a:e4:
bc:c6:38:29:19:ff:e9:a2:ed:c4:cd:2b:78:a1:d7:99:69:da:
3d:a7:d4:d8:e5:0a:14:95:3a:74:a5:b3:ee:85:ce:44:7b:ae:
bd:8e:d9:6b:ce:5f:6d:74:f9:c6:33:c9:97:7e:2d:47:cf:70:
ba:b5:d5:31:cf:49:60:ba:41:4a:9b:f6:ce:59:75:ec:68:15:
7b:cd:f8:c3:ca:9e:93:aa:7c:fe:6e:ce:21:bc:06:85:d0:fc:
07:f5:50:3d:22:48:5c:32:cf:90:00:fc:5d:52:f2:b8:4f:8d:
83:9b:5a:e3:56:86:bb:82:95:b2:6e:fc:3d:58:45:d9:2b:ad:
cd:76:25:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:40 2024 by rpki-client on console-fra.rpki-client.org