Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCD73B6814B011EEA78228344AD9E6FC.roa
File: FCD73B6814B011EEA78228344AD9E6FC.roa (raw, json)
Hash identifier: PQ4jfdEPdahMSaUmECdlSS2KmL6PPgE8FNklSItnuxI=
Subject key identifier: 74:AD:EE:D2:22:5F:A6:22:5C:89:82:94:DC:63:01:52:CD:12:01:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2DB8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCD73B6814B011EEA78228344AD9E6FC.roa
Signing time: Tue 27 Jun 2023 06:08:08 +0000
ROA not before: Tue 27 Jun 2023 06:08:05 +0000
ROA not after: Wed 01 May 2024 06:08:05 +0000
asID: 140227
IP address blocks: 154.86.18.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11704 (0x2db8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 27 06:08:05 2023 GMT
Not After : May 1 06:08:05 2024 GMT
Subject: CN=649a7cc8-8714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:05:b8:35:7b:a3:da:5d:ee:f8:17:78:31:01:
f0:59:76:e7:97:ef:11:6e:47:b1:77:2f:0c:99:9a:
82:65:e8:6a:04:08:e7:b7:8f:95:e2:29:cc:5d:07:
78:75:d4:6d:69:89:f9:bb:5a:69:75:29:76:08:1f:
d1:ff:f7:f4:fb:51:12:af:0c:7c:34:f8:0d:89:8f:
81:e6:cf:47:ef:b9:93:36:b6:ca:08:8a:26:00:eb:
9f:50:a5:62:eb:b4:b5:a8:76:b0:ef:fd:76:1e:9d:
0d:df:4b:cc:a8:97:8f:d6:b2:2c:46:3a:11:25:25:
ec:af:7e:2c:3b:78:0b:26:68:08:72:33:ac:e5:14:
91:75:1c:e2:76:4f:cf:8c:20:cc:d3:04:67:17:ca:
76:9b:4c:69:01:30:73:c1:8c:9b:52:f1:f0:c9:17:
58:d3:10:43:77:e1:7d:92:0b:38:6c:ee:b3:4a:3a:
99:83:1b:e2:f7:72:3e:97:94:66:f3:c6:6e:de:d1:
05:d2:0f:3c:f8:7e:f8:fd:73:d7:25:e7:e4:51:08:
5c:60:fa:f7:53:4a:51:86:be:76:e2:1d:fa:5e:b6:
75:53:82:7b:85:a0:bf:3d:50:94:95:38:45:c2:53:
55:8b:4c:b6:ea:95:f9:a5:6d:30:35:ee:a1:0a:aa:
a2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AD:EE:D2:22:5F:A6:22:5C:89:82:94:DC:63:01:52:CD:12:01:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCD73B6814B011EEA78228344AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.18.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:eb:a3:e7:2b:80:46:6e:00:cc:08:de:61:22:70:e1:18:7f:
38:c7:f9:a8:d5:f5:38:61:46:70:4a:be:56:37:36:fc:05:c9:
ae:aa:b4:42:d2:8d:c6:1b:a8:dd:24:e7:c3:7e:e4:5e:2c:1b:
18:3f:50:d1:61:98:c4:87:65:06:34:0d:c2:cf:af:c3:fb:4c:
0b:62:21:49:d4:b1:b0:fc:4d:33:4a:4f:39:02:09:fb:88:19:
76:d6:6e:af:e7:e0:48:fd:46:fd:c7:3e:58:52:47:aa:d0:5d:
f3:a2:af:e3:6e:77:9d:7b:b9:9e:64:a0:65:9e:44:59:ef:8f:
bd:3a:2d:93:9a:46:63:b8:e5:08:ac:f4:0d:6d:3e:16:1f:ac:
3b:4e:ac:f4:c4:78:3f:99:3e:64:d6:81:a4:1c:ed:ae:0c:2a:
6a:70:46:3f:d9:37:ce:48:d2:4b:33:b6:2e:8d:54:e8:6d:b4:
11:a8:5d:6b:bf:2a:46:cd:2b:40:6a:0e:2a:a3:1c:60:7a:af:
fe:71:3d:ca:e2:c7:1a:b1:36:f5:91:35:74:8e:10:22:c1:93:
51:06:54:d6:e1:11:3f:dc:bb:c6:df:9a:8d:f0:e8:bd:cf:2d:
01:5a:bc:4b:1f:99:ef:30:ed:1a:68:49:84:c7:25:e0:8c:30:
e3:ec:fa:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 12:38:37 2024 by rpki-client on console-ams.rpki-client.org