Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB118344E46B11EE901243C3775412E6.roa
File: EB118344E46B11EE901243C3775412E6.roa (raw, json)
Hash identifier: VgI/I4Mf5fs0hzNRqXd84dCvWG2PjXTiFU/OWvK4jJI=
Subject key identifier: C5:53:CB:A7:E4:51:D5:99:F4:A7:07:FA:CE:64:ED:44:C4:4B:84:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A1EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB118344E46B11EE901243C3775412E6.roa
Signing time: Sun 17 Mar 2024 14:37:45 +0000
ROA not before: Sun 17 Mar 2024 14:37:42 +0000
ROA not after: Tue 30 Apr 2024 14:37:42 +0000
asID: 63139
IP address blocks: 154.93.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41451 (0xa1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 14:37:42 2024 GMT
Not After : Apr 30 14:37:42 2024 GMT
Subject: CN=65f70039-0a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:e5:e6:32:0a:ef:ff:0e:fc:cf:5f:d1:32:
59:de:da:8d:ba:6d:ad:80:8e:c8:1f:28:27:79:80:
0b:18:65:b2:ff:ba:49:34:05:e3:dd:94:4a:f6:f0:
aa:61:b7:2b:d6:f6:72:b7:a2:51:7a:26:c5:cc:ad:
ac:79:3f:33:c6:e4:19:48:ca:cc:5f:88:c3:ad:bf:
18:29:ae:b4:34:04:02:22:77:3e:16:0e:c0:a9:a5:
c4:bf:59:dd:96:ac:88:60:dc:f7:f2:11:1a:47:af:
27:3b:08:af:e6:0a:89:40:7a:f1:17:a6:39:9f:b4:
00:7c:d5:1a:e9:47:a6:21:af:8d:bb:70:e2:44:9e:
8d:bd:f1:3f:16:9c:f9:3e:61:c5:08:0d:d3:02:02:
a0:c9:56:dc:1c:7e:7f:16:ce:80:2d:a5:1e:b8:45:
fa:33:e4:f0:e1:a4:ad:95:6d:d1:94:a4:c7:fd:7b:
76:19:58:f6:c1:cb:0a:46:91:f5:74:80:15:9d:2f:
56:d4:9a:46:88:a7:4e:83:79:b6:be:03:5c:28:b2:
6b:c9:6c:15:2c:18:81:75:b9:29:5f:00:6f:31:6d:
a4:bd:05:1e:1a:07:5e:5c:ea:a3:b5:5a:34:08:3c:
61:f5:bc:19:d8:a9:fe:64:f9:24:68:9d:bf:b3:64:
21:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:53:CB:A7:E4:51:D5:99:F4:A7:07:FA:CE:64:ED:44:C4:4B:84:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB118344E46B11EE901243C3775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.76.0/24
Signature Algorithm: sha256WithRSAEncryption
05:f3:e1:52:33:eb:e2:2f:e6:91:11:ca:6e:26:93:de:92:91:
fb:69:d8:cd:ce:d9:6f:20:1b:f9:b8:d5:8f:45:97:20:98:e7:
74:e3:14:35:7d:6a:22:13:aa:78:a8:f0:14:eb:81:a6:37:8e:
9f:ef:e1:e2:41:ed:03:7b:cc:23:d6:99:97:fc:50:e0:48:89:
6c:f3:c5:4e:75:88:2c:01:73:a2:a0:ab:8e:b0:a3:67:79:11:
25:8f:df:c6:32:65:5a:7c:20:fc:68:a2:cd:77:ef:34:91:90:
9a:16:4a:10:08:39:9e:55:18:7a:b0:6a:c1:6f:26:d8:99:c5:
13:f7:6a:6b:27:c2:16:e7:d2:69:2e:81:1a:da:4e:50:44:c7:
94:ae:d9:d3:36:c3:f3:48:6b:9f:6b:7e:16:dc:93:f6:74:b7:
69:6c:55:af:92:95:89:0d:77:dd:56:ac:ec:52:41:74:ef:16:
19:8c:1d:15:00:c8:c2:ea:21:77:29:39:79:b4:54:a6:05:a9:
8e:bb:7b:a9:7a:4e:db:03:01:cf:6e:41:cc:07:fd:33:2d:25:
d4:dd:ed:d3:2b:c6:b3:3b:ad:22:4d:1a:f2:79:bc:96:2a:1d:
1b:3f:ee:ff:94:a2:b2:b6:8a:17:21:ce:8c:26:41:87:5c:2a:
e2:74:ef:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:03:19 2024 by rpki-client on console-ams.rpki-client.org