Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA68FD5AE82011EEA5AD3E73775412E6.roa
File: FA68FD5AE82011EEA5AD3E73775412E6.roa (raw, json)
Hash identifier: +HmjOOqmW1TRYmJIJ5Gj0rlzcCUY9Pr9A91PSnW0XxM=
Subject key identifier: 71:4C:46:F7:35:B3:32:9A:29:73:40:39:97:B6:57:C3:AC:49:27:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A622
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA68FD5AE82011EEA5AD3E73775412E6.roa
Signing time: Fri 22 Mar 2024 07:51:23 +0000
ROA not before: Fri 22 Mar 2024 07:51:20 +0000
ROA not after: Fri 26 Apr 2024 07:51:20 +0000
asID: 133180
IP address blocks: 154.206.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42530 (0xa622)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 22 07:51:20 2024 GMT
Not After : Apr 26 07:51:20 2024 GMT
Subject: CN=65fd387b-340a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:9f:76:43:a3:00:b1:a6:4d:0b:51:89:bb:
b4:77:9a:15:6d:78:11:bc:56:55:0b:e5:d7:27:60:
4d:85:64:33:54:da:cf:7f:67:cc:86:3e:d3:30:5f:
59:ab:30:09:ba:93:69:56:84:f5:0a:b4:fd:41:0a:
3a:a7:21:1c:3d:f7:6d:78:5d:e2:ce:48:f7:97:9c:
3d:62:d4:af:45:4f:41:59:5d:6f:3d:c5:bf:18:df:
6c:9c:d5:c8:d1:2a:46:fd:2c:a5:0f:38:74:f3:97:
f2:2c:f5:0d:d8:ae:fc:b8:bf:54:fe:78:36:88:5d:
12:a0:e7:e1:9c:75:ad:0d:76:93:72:d8:01:d6:df:
0c:07:b9:57:ff:57:75:b0:c9:67:35:f2:d7:31:62:
5a:f6:1b:85:51:0f:b8:b1:94:c7:9d:3c:ae:3b:cf:
2d:82:21:e8:84:e2:f2:12:dd:d9:b6:36:11:11:55:
29:1b:8f:68:7a:bf:dc:b9:69:30:51:cc:be:03:56:
22:21:dc:bd:e5:ae:dd:29:ac:5a:6c:59:35:4a:d8:
39:48:c2:a6:f0:60:86:f4:6f:e9:5d:9c:5b:cf:9a:
31:a7:61:fa:7e:8e:4a:40:65:a7:c5:0c:8d:04:31:
6d:2b:6e:6e:86:16:01:2c:17:70:7d:a0:d8:d1:39:
42:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4C:46:F7:35:B3:32:9A:29:73:40:39:97:B6:57:C3:AC:49:27:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA68FD5AE82011EEA5AD3E73775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.128.0/18
Signature Algorithm: sha256WithRSAEncryption
47:2b:83:09:ed:3a:0d:6b:ad:5c:07:95:b5:dd:14:3e:44:f6:
d2:b1:4c:cf:84:83:74:cd:ec:28:00:57:53:6b:48:dc:66:70:
11:d4:27:85:37:13:36:10:2a:15:c0:26:60:a8:7c:07:4c:6d:
b4:93:9b:34:be:50:ec:fd:e1:47:6b:62:6b:72:e4:03:d8:93:
ba:d7:92:c1:f3:3d:50:34:54:3a:21:ef:58:47:84:4d:5a:f6:
c2:32:d1:54:c5:96:af:6e:7d:55:bb:dc:d8:fd:5b:45:60:89:
a0:59:98:2f:e4:07:7a:2a:e2:fb:8d:8e:a2:be:fe:fe:dd:fa:
85:b5:ab:23:d0:53:3f:9c:13:a4:94:e1:a0:d2:93:67:a7:ef:
7c:40:f1:f0:d9:b7:e0:ba:d6:c5:36:e3:a5:fa:61:73:db:6e:
2f:9d:b4:b9:91:bf:4d:a9:9a:a1:34:e5:44:15:f0:f1:2d:86:
67:06:fe:a8:d5:5d:a9:88:7c:16:60:79:a5:75:92:6c:f4:86:
fe:97:82:8a:fb:97:74:94:39:28:e8:52:e3:6c:0c:ac:46:a6:
3a:8b:d5:8b:2b:f3:64:f4:06:78:14:81:be:5c:88:00:25:96:
0b:6d:fa:49:72:92:ca:4a:f3:50:50:8f:2c:8b:68:ff:7b:ac:
c4:6b:04:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 08:27:20 2024 by rpki-client on console-ams.rpki-client.org