Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/534D9AE0F42911EC8D1A0E8CF1222468.roa
File: 534D9AE0F42911EC8D1A0E8CF1222468.roa (raw, json)
Hash identifier: Gxyz2JKLhaqYc5TOwqqfm/wxhGaBmnr8g0cBb1qZ5jM=
Subject key identifier: C4:DB:10:00:08:81:B4:B1:FD:DC:ED:BF:D3:B5:F4:4D:18:19:0E:23
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 08B6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/534D9AE0F42911EC8D1A0E8CF1222468.roa
Signing time: Sat 25 Jun 2022 01:51:27 +0000
ROA not before: Sat 25 Jun 2022 01:51:24 +0000
ROA not after: Sun 25 Jun 2023 01:51:24 +0000
asID: 40676
IP address blocks: 154.16.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2230 (0x8b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 25 01:51:24 2022 GMT
Not After : Jun 25 01:51:24 2023 GMT
Subject: CN=62b66a1f-6fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f2:13:b7:e6:ea:ee:41:75:38:44:49:40:05:
fd:11:73:9a:a3:80:83:32:30:4d:cc:96:61:60:c1:
de:03:72:01:82:26:23:72:e2:2f:b0:c9:cf:7c:4f:
53:b2:da:50:30:e4:38:5c:a8:67:e5:e4:e8:9f:76:
3d:6b:d4:c0:17:37:4c:de:1a:c8:0b:82:a4:0e:b8:
0c:65:18:93:99:3f:ab:30:0d:ad:ec:11:a0:b3:40:
8e:bc:f1:f7:a3:ea:eb:d6:41:e7:b1:0d:aa:aa:ab:
9c:76:55:60:11:44:47:ff:60:cc:dc:3b:97:7a:28:
b8:50:3f:e4:29:d9:7c:f4:c9:2b:5b:3e:93:56:05:
fb:76:4a:36:0d:e8:8e:ae:ee:98:70:82:2f:8f:74:
00:3c:d9:2e:eb:21:19:4e:ce:e5:c8:14:b2:2a:1f:
7f:f2:54:ba:0d:72:8e:ab:30:1a:b6:1f:bc:ff:f0:
be:ce:4f:6f:fa:7e:4e:40:b0:e2:ec:58:a2:1d:57:
8b:c1:c1:d5:cb:67:91:75:90:e2:02:c6:ec:b9:5c:
a9:5d:08:01:11:bf:af:87:79:bd:85:48:b1:f9:9b:
2e:f1:ba:5d:46:8f:3b:f8:94:fa:1a:28:4f:eb:29:
d5:fd:87:a6:c6:e3:ea:f5:69:e1:ee:3f:72:42:83:
ae:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DB:10:00:08:81:B4:B1:FD:DC:ED:BF:D3:B5:F4:4D:18:19:0E:23
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/534D9AE0F42911EC8D1A0E8CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.107.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:7d:7e:03:8a:d4:6f:03:6b:16:41:b8:25:5c:aa:01:8c:83:
06:14:a1:05:0c:df:89:d3:55:66:6f:d1:37:dc:75:87:15:9c:
11:70:77:83:9c:7f:c5:20:16:43:9d:19:e7:af:c2:05:0c:96:
5f:34:fc:93:0b:14:87:41:b3:e6:9c:4b:54:21:23:91:74:84:
8f:5a:bb:3f:dc:0c:f4:c0:d8:7d:91:22:97:2b:a2:d6:be:e7:
11:7c:64:64:a6:0e:da:ef:d5:6e:99:42:23:e4:ab:ee:d2:97:
41:9d:d6:12:f4:c9:0b:10:7f:4f:a7:8d:ff:71:6d:d0:1e:e5:
7e:db:11:62:23:f8:e5:fe:89:89:4c:4c:6e:b7:56:75:d2:50:
1f:20:42:39:20:d0:cd:d4:f9:49:33:d9:00:6e:24:a6:a5:13:
6f:22:86:9c:d1:5f:06:7b:e7:e5:6e:de:8a:37:f8:c5:e0:d3:
de:4f:82:11:18:f3:a1:09:85:6e:57:2b:68:16:99:f3:96:9b:
d0:67:31:c2:65:c5:9d:ac:7b:a4:76:1b:bc:cb:36:92:6b:c7:
eb:a7:b2:f9:f7:9d:07:08:70:59:b5:3d:96:cc:5a:db:1b:8c:
54:e8:5a:f7:ec:e5:7c:13:e5:9d:a1:dc:c3:73:d3:b5:3a:0a:
eb:d7:1a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org