Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE6701E6018911EFB044DF68017001B1.roa
File: EE6701E6018911EFB044DF68017001B1.roa (raw, json)
Hash identifier: Cx0hxYx9/2OmFXKTzWBi+oKt9yKWqr42G4+ZFvdqXVE=
Subject key identifier: 7D:DC:2D:B6:C4:6D:8F:AD:3E:4B:34:74:D9:9C:F5:31:CE:E0:A6:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AFA2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE6701E6018911EFB044DF68017001B1.roa
Signing time: Tue 23 Apr 2024 15:55:39 +0000
ROA not before: Tue 23 Apr 2024 15:55:36 +0000
ROA not after: Thu 02 May 2024 15:55:36 +0000
asID: 132325
IP address blocks: 154.212.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44962 (0xafa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 15:55:36 2024 GMT
Not After : May 2 15:55:36 2024 GMT
Subject: CN=6627d9fb-086d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:06:20:e1:03:0e:7d:e0:e4:24:d9:4c:b1:57:
5d:89:73:05:20:7f:e1:76:f7:df:59:98:5c:3c:ba:
f7:0d:90:7f:56:23:91:a5:0b:09:03:bf:d3:9f:2a:
f9:8e:83:a8:7e:eb:63:da:02:3f:a3:7c:66:98:c4:
b6:1c:19:3a:3a:6b:1c:0a:4b:44:dd:c3:7a:25:c8:
ee:7d:49:f2:56:35:67:0e:7e:c1:cd:1a:dc:26:d1:
57:d9:b1:80:10:8e:67:9e:cf:8c:4f:7e:02:d1:21:
6f:62:11:07:c8:1b:81:55:18:0f:77:9d:4d:29:0f:
d9:82:1f:bc:85:26:fc:7f:68:da:69:6f:e1:b8:ab:
8f:f9:78:79:fd:f9:04:a8:3b:43:08:25:2d:54:db:
c3:b0:d3:af:ec:01:ac:9a:2b:c9:6c:23:eb:9f:0d:
88:58:f8:6a:23:0d:20:bc:76:78:6c:69:d9:e9:87:
0a:ad:ce:4e:7c:bf:fb:93:86:b3:22:98:ba:ca:d9:
0c:97:bb:e9:49:8b:a1:bf:eb:1a:b5:59:de:a2:d9:
9d:2f:7a:8a:be:5e:54:a9:13:8b:64:b3:4c:cf:ee:
a8:61:87:9e:a6:66:52:d0:0f:91:51:a2:d9:e3:50:
2b:92:17:b2:73:11:fc:72:4a:dc:b4:15:69:cc:4f:
d5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DC:2D:B6:C4:6D:8F:AD:3E:4B:34:74:D9:9C:F5:31:CE:E0:A6:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE6701E6018911EFB044DF68017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.147.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:b0:c7:47:46:3e:0e:a2:ea:89:f7:a4:d5:a1:77:2e:41:78:
96:9a:59:63:9c:c3:bb:8e:59:7a:91:00:42:a7:89:a1:ec:b1:
96:cb:86:0f:c3:03:15:a4:ee:7e:97:8b:7a:be:23:ac:41:a2:
2b:21:29:f2:9e:cf:dd:df:5e:e9:ec:27:bf:e1:ff:28:d8:ef:
cb:66:86:f3:c9:d2:65:38:3e:90:a4:54:29:c3:4a:1b:53:34:
5a:a5:b5:23:ba:9e:f9:98:a8:b9:ab:4e:b2:12:14:36:a2:75:
b1:57:1e:c1:79:9e:27:9d:79:3c:d0:f6:4e:31:59:69:0a:2f:
dd:04:13:cc:ce:96:ca:4f:1f:62:99:e3:0c:fd:f0:46:a2:55:
c2:11:93:14:af:82:8e:8c:5f:05:37:1d:f9:a6:f7:ed:7f:c2:
06:c0:9e:d3:e7:61:18:46:49:b9:92:b8:e3:fc:e4:2c:d9:75:
0b:15:10:c9:f6:b3:5d:55:32:1a:50:77:6c:92:62:4f:b7:22:
30:41:6f:ee:f0:e3:bf:87:71:95:d0:1d:80:fc:51:96:70:49:
48:c8:af:dc:05:0a:66:10:60:6a:99:f0:36:b5:bb:3b:73:51:
0d:f1:7c:b7:7c:8c:ab:cc:8f:e5:79:3d:2d:35:df:8a:ca:57:
f4:e8:51:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:45:05 2024 by rpki-client on console-ams.rpki-client.org