Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3456D860335311EB8E97A128F8AEA228.roa
File: 3456D860335311EB8E97A128F8AEA228.roa (raw, json)
Hash identifier: aBC21T0EzLeNYu0Y4hCGJ41u1zWG0w4T+ncmeZs7J4k=
Subject key identifier: 43:40:D7:D6:78:D8:20:86:C6:E7:B2:D6:F1:E5:AB:53:ED:D4:E8:6E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0437
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3456D860335311EB8E97A128F8AEA228.roa
Signing time: Mon 30 Nov 2020 21:30:02 +0000
ROA not before: Mon 30 Nov 2020 21:29:56 +0000
ROA not after: Wed 30 Nov 2022 21:29:56 +0000
asID: 60781
IP address blocks: 154.16.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1079 (0x437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 30 21:29:56 2020 GMT
Not After : Nov 30 21:29:56 2022 GMT
Subject: CN=5fc5645a-8089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:de:7e:9e:74:50:b6:5a:34:10:74:78:a7:ea:
1f:05:65:53:ed:2f:de:e7:13:f4:8e:55:24:e4:cc:
55:88:d8:83:de:db:88:46:a2:e3:22:1a:70:38:51:
d7:6f:cb:0d:29:b6:5d:61:75:2a:d3:dd:9c:71:5f:
1f:9d:7f:4f:dc:e2:61:55:d8:73:66:32:3c:31:b0:
6e:d6:eb:3d:2f:dc:37:ad:49:02:44:b0:5c:a1:b5:
2a:b9:e7:b7:d5:fd:ce:6c:e5:d6:eb:59:65:f6:d3:
7a:ce:5e:7d:1a:97:c5:40:7a:a0:96:51:ad:0a:43:
2f:b5:5c:c7:e8:74:3b:72:36:91:0f:3e:c4:f1:53:
5d:ea:d2:93:2b:ca:55:b3:a9:6a:82:89:b3:8a:c9:
86:2d:e5:6e:73:2e:23:6e:be:d6:76:f2:80:ed:0b:
7c:5a:fc:f9:62:4d:e8:07:72:b6:6c:54:00:52:ae:
39:72:1c:ef:d4:0c:6f:41:a4:80:c6:1a:b2:da:73:
87:9d:18:c6:28:22:66:5b:ab:a3:e1:cb:ed:92:32:
f1:3d:9a:61:51:74:54:c7:d3:e4:4f:76:7c:66:b4:
00:fb:ac:5d:83:73:16:3b:b5:21:80:7a:3a:78:1d:
cb:2e:02:37:89:fd:a5:0f:e4:91:51:ee:fc:63:d3:
8c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:40:D7:D6:78:D8:20:86:C6:E7:B2:D6:F1:E5:AB:53:ED:D4:E8:6E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3456D860335311EB8E97A128F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.111.0/24
Signature Algorithm: sha256WithRSAEncryption
45:04:3b:0d:04:13:74:7a:16:38:a5:44:5b:83:cf:36:d3:7e:
25:29:03:aa:b1:e5:c2:e3:6b:cf:03:f2:92:d5:dd:22:6d:4f:
a9:42:23:32:0a:95:e3:c9:e8:7d:a7:7d:02:5e:3a:ca:50:9d:
10:2b:8b:c1:43:30:ab:b6:a1:2a:6e:80:7a:1a:07:f1:2f:95:
46:bb:90:ed:15:bf:8d:22:c8:77:7c:6e:9a:0c:b5:b7:c6:df:
55:3f:ba:f8:4b:3e:c7:a6:92:37:37:a1:72:41:02:c7:40:a3:
76:3e:03:3c:29:6a:1b:47:cd:34:d5:ac:68:b7:da:f5:58:3f:
4a:ad:e0:61:67:ad:65:d9:db:86:24:a4:6c:21:06:f5:16:79:
d6:09:d7:43:d1:d2:ab:5e:98:49:cf:f1:dd:05:29:a4:21:7e:
50:c5:25:5a:3d:99:4a:ec:59:a0:10:8d:5b:c1:94:e1:a9:38:
a3:2f:4f:c6:08:f6:76:70:f9:02:84:cd:bc:9a:2f:e1:06:b3:
8e:a5:00:93:1a:21:94:ba:f2:b3:f0:53:3a:61:75:92:53:30:
e7:90:0f:69:88:9f:b5:44:9f:29:57:c9:7c:21:13:9f:2a:11:
aa:8f:15:93:d6:44:0e:db:d9:c4:fe:ee:56:70:0a:51:77:48:
7c:6e:c6:0f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMDExMzAyMTI5NTZaFw0yMjExMzAyMTI5NTZaMBgxFjAU
BgNVBAMTDTVmYzU2NDVhLTgwODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDn3n6edFC2WjQQdHin6h8FZVPtL97nE/SOVSTkzFWI2IPe24hGouMiGnA4
Uddvyw0ptl1hdSrT3ZxxXx+df0/c4mFV2HNmMjwxsG7W6z0v3DetSQJEsFyhtSq5
57fV/c5s5dbrWWX203rOXn0al8VAeqCWUa0KQy+1XMfodDtyNpEPPsTxU13q0pMr
ylWzqWqCibOKyYYt5W5zLiNuvtZ28oDtC3xa/PliTegHcrZsVABSrjlyHO/UDG9B
pIDGGrLac4edGMYoImZbq6Phy+2SMvE9mmFRdFTH0+RPdnxmtAD7rF2DcxY7tSGA
ejp4HcsuAjeJ/aUP5JFR7vxj04wZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUQ0DX
1njYIIbG57LW8eWrU+3U6G4wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzM0NTZEODYwMzM1MzExRUI4RTk3QTEyOEY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEG8wDQYJKoZIhvcNAQEL
BQADggEBAEUEOw0EE3R6FjilRFuDzzbTfiUpA6qx5cLja88D8pLV3SJtT6lCIzIK
lePJ6H2nfQJeOspQnRAri8FDMKu2oSpugHoaB/EvlUa7kO0Vv40iyHd8bpoMtbfG
31U/uvhLPsemkjc3oXJBAsdAo3Y+AzwpahtHzTTVrGi32vVYP0qt4GFnrWXZ24Yk
pGwhBvUWedYJ10PR0qtemEnP8d0FKaQhflDFJVo9mUrsWaAQjVvBlOGpOKMvT8YI
9nZw+QKEzbyaL+EGs46lAJMaIZS68rPwUzphdZJTMOeQD2mIn7VEnylXyXwhE58q
EaqPFZPWRA7b2cT+7lZwClF3SHxuxg8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org