Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E983DBC4E9A411EEB8127556775412E6.roa
File: E983DBC4E9A411EEB8127556775412E6.roa (raw, json)
Hash identifier: OXuKsDWm13zMRU1/VvMjqvan6FM/dMSEbFQ+eMK8nfk=
Subject key identifier: A5:56:E6:77:C0:A1:7B:17:A8:E5:34:6A:25:C9:6F:0A:AE:F2:A7:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A642
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E983DBC4E9A411EEB8127556775412E6.roa
Signing time: Sun 24 Mar 2024 06:08:20 +0000
ROA not before: Sun 24 Mar 2024 06:08:16 +0000
ROA not after: Fri 26 Apr 2024 06:08:16 +0000
asID: 395886
IP address blocks: 154.201.92.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42562 (0xa642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 06:08:16 2024 GMT
Not After : Apr 26 06:08:16 2024 GMT
Subject: CN=65ffc354-dcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:f1:8f:bb:29:8f:6e:d9:f3:9b:80:d5:b0:
2f:5f:fa:be:00:ad:b9:58:dd:c4:f7:f3:9c:e0:76:
8f:7c:e0:18:44:68:7a:52:06:1e:3c:e3:58:a7:08:
5e:24:9a:02:7e:1e:0a:9b:76:14:46:00:ef:96:f1:
a9:ac:80:96:a9:8d:33:87:7e:50:8f:09:a4:58:0a:
40:a2:42:0d:d7:fa:1e:3f:fb:e9:f4:27:c8:05:75:
83:14:9b:56:fe:b6:3e:88:0e:47:09:54:89:65:e6:
12:9c:27:1d:09:75:44:af:24:79:ea:dc:44:ec:24:
19:ba:f7:ce:5c:83:27:b6:27:2e:bb:fd:15:f4:48:
f3:b1:ec:c3:80:32:35:50:d3:dd:d3:18:24:67:6f:
53:e7:bf:3e:ba:d0:6e:3c:fe:eb:d7:0d:a1:19:1c:
bf:12:30:95:98:f6:ab:d4:f3:93:08:94:b3:42:57:
b1:71:68:0c:5e:da:fd:2d:a4:f8:e6:ab:9f:47:84:
aa:19:c4:9b:6f:4a:9e:23:57:60:86:4a:e2:6e:d1:
6f:1a:9f:b9:76:e1:91:11:2a:b3:96:14:d4:22:1b:
40:87:ec:7e:cc:fa:3e:1b:8c:b3:ec:7b:cd:aa:49:
d8:26:46:e7:61:24:ed:00:ca:4b:22:b3:9a:db:54:
ea:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:56:E6:77:C0:A1:7B:17:A8:E5:34:6A:25:C9:6F:0A:AE:F2:A7:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E983DBC4E9A411EEB8127556775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.92.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:6a:7f:ec:a3:0e:7e:8c:ce:7b:cd:f4:df:f1:ef:cf:cd:82:
29:3f:6f:9d:53:b8:41:08:c6:cc:02:46:1c:cd:3e:a7:4b:f8:
e6:9a:a4:7b:ef:0f:d7:b8:fc:bc:2d:ed:24:03:81:1c:ee:c1:
6b:a2:97:a8:8a:89:01:ab:03:72:de:6c:2f:ad:de:bc:d4:ca:
86:d5:dc:9e:47:90:a7:85:85:a4:ab:b5:fc:b2:f9:63:47:26:
8b:99:82:2a:be:f7:f2:11:20:89:f7:a9:05:4b:9d:05:c2:9e:
6e:d5:8e:2e:37:1b:f5:2b:8a:6b:b7:79:0e:8e:c4:c3:a4:f8:
74:78:17:60:8e:1d:49:ed:e0:74:59:33:ad:3c:15:86:f1:80:
13:32:21:c2:e7:e2:5c:52:7e:69:28:70:f1:30:66:f9:bf:ec:
9a:8a:21:93:ff:5f:bb:b5:38:2d:c2:25:11:d8:fa:cd:13:29:
fe:48:c7:2a:43:4a:37:95:17:cf:df:9d:d1:86:fe:08:a8:ec:
39:f6:4a:e8:9f:3c:0f:91:17:2b:85:e9:54:e0:b3:0d:8b:37:
d6:0b:aa:69:f7:1a:58:00:3d:14:c8:51:d5:56:03:0c:e4:ee:
bd:33:86:e9:cc:2d:0e:96:9f:d2:5d:e7:c5:28:fa:67:25:39:
e3:4d:69:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 06:08:54 2024 by rpki-client on console-ams.rpki-client.org