Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/10C26B46232D11EDBEE319ECF1222468.roa
File: 10C26B46232D11EDBEE319ECF1222468.roa (raw, json)
Hash identifier: QFJW4y20NU+Mx5AcY2HmfKrwg32hk6zuccNyjpTlvKM=
Subject key identifier: 75:83:C2:47:BC:CB:8D:45:BC:CA:1C:B0:28:94:C1:4C:2D:69:71:F6
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 094D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/10C26B46232D11EDBEE319ECF1222468.roa
Signing time: Tue 23 Aug 2022 21:46:38 +0000
ROA not before: Wed 24 Aug 2022 21:46:33 +0000
ROA not after: Thu 24 Aug 2023 21:46:33 +0000
asID: 42831
IP address blocks: 154.16.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2381 (0x94d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 24 21:46:33 2022 GMT
Not After : Aug 24 21:46:33 2023 GMT
Subject: CN=63054abe-9da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:7d:c3:a9:a5:95:af:b3:df:e9:61:2f:7b:
b4:37:06:cd:22:5c:68:69:f6:44:3f:8e:32:ff:96:
1b:a1:f5:b4:bf:a1:68:56:7a:e6:58:ee:3e:cf:c2:
bb:c6:8b:e9:12:42:54:09:60:10:f3:e3:30:7d:23:
fd:66:8f:84:31:19:bf:6a:07:0b:a8:ba:c2:22:3c:
f8:9c:fd:59:94:b8:f4:eb:09:f7:da:a3:bc:1c:8a:
55:a4:e8:1f:9b:8d:27:36:36:08:8d:8e:5b:85:3c:
ea:e4:30:7f:7a:08:09:8e:14:67:5e:4a:88:99:20:
d5:d3:db:7a:7e:a2:2a:5d:8d:01:47:ec:38:32:05:
ff:bb:7f:4d:d1:f4:a8:e2:33:34:bf:f9:67:f7:e7:
58:67:d1:df:cf:10:94:c6:b9:7a:c3:fa:a8:2a:e2:
1f:57:85:c4:2a:f2:b7:8d:ef:8f:a4:53:07:29:39:
39:b5:e1:d2:81:20:a6:a0:85:69:7e:f2:17:f4:50:
8d:99:fe:b8:ca:a8:4f:bb:8b:1d:59:46:fa:3c:0a:
ae:01:71:37:0c:6f:94:a5:94:d0:42:da:61:99:67:
32:3d:d3:e9:80:fe:37:0c:66:1e:06:71:8d:65:d2:
24:f6:0c:8f:8a:c9:f1:17:01:b9:61:e5:a4:e5:cb:
6e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:83:C2:47:BC:CB:8D:45:BC:CA:1C:B0:28:94:C1:4C:2D:69:71:F6
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/10C26B46232D11EDBEE319ECF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.7.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:57:62:db:3d:34:50:4b:ac:a8:2c:7e:65:47:21:f8:28:d6:
fc:fa:21:7c:7a:55:67:49:e4:b9:f7:6b:06:ca:28:80:9c:ff:
67:3a:46:67:34:8f:5f:e4:cf:71:b2:56:32:55:b5:92:de:c2:
df:c3:59:2d:8f:80:9e:c5:ee:eb:59:c9:2d:80:d9:ef:65:05:
41:f0:9b:3d:30:39:5f:eb:26:6a:49:27:6f:97:a0:04:6d:7a:
65:ef:e9:c9:56:32:99:cd:49:fc:85:68:4d:0c:2e:ac:be:4a:
7b:c5:17:08:7c:fd:c2:a7:40:03:aa:f6:91:fa:8e:b8:e5:fd:
4b:d6:ed:86:85:f6:0e:46:cd:a2:7a:ef:7a:38:a6:36:e4:c6:
a6:30:27:db:8a:f8:b8:2b:a3:7c:c5:c9:26:b0:b5:dd:a2:16:
2c:9c:6a:70:29:8d:83:0e:34:2d:e2:a7:5c:a2:ed:fe:f8:43:
0f:d6:54:01:0d:a9:88:42:e8:d2:c4:ff:2d:f7:4c:7e:ea:27:
ce:04:00:0e:09:d5:9f:e5:fe:57:bf:7b:67:4e:5c:67:de:ec:
70:2c:0f:24:e4:4b:db:e9:b2:b8:e1:1a:78:7a:3f:ea:44:62:
8d:ac:eb:13:17:27:8d:4c:f5:15:40:ec:98:ec:bb:a8:63:87:
64:50:ac:f7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCU0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjA4MjQyMTQ2MzNaFw0yMzA4MjQyMTQ2MzNaMBgxFjAU
BgNVBAMMDTYzMDU0YWJlLTlkYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrcX3DqaWVr7Pf6WEve7Q3Bs0iXGhp9kQ/jjL/lhuh9bS/oWhWeuZY7j7P
wrvGi+kSQlQJYBDz4zB9I/1mj4QxGb9qBwuousIiPPic/VmUuPTrCffao7wcilWk
6B+bjSc2NgiNjluFPOrkMH96CAmOFGdeSoiZINXT23p+oipdjQFH7DgyBf+7f03R
9KjiMzS/+Wf351hn0d/PEJTGuXrD+qgq4h9XhcQq8reN74+kUwcpOTm14dKBIKag
hWl+8hf0UI2Z/rjKqE+7ix1ZRvo8Cq4BcTcMb5SllNBC2mGZZzI90+mA/jcMZh4G
cY1l0iT2DI+KyfEXAblh5aTly25LAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUdYPC
R7zLjUW8yhywKJTBTC1pcfYwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzEwQzI2QjQ2MjMyRDExRURCRUUzMTlFQ0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEAcwDQYJKoZIhvcNAQEL
BQADggEBAMdXYts9NFBLrKgsfmVHIfgo1vz6IXx6VWdJ5Ln3awbKKICc/2c6Rmc0
j1/kz3GyVjJVtZLewt/DWS2PgJ7F7utZyS2A2e9lBUHwmz0wOV/rJmpJJ2+XoARt
emXv6clWMpnNSfyFaE0MLqy+SnvFFwh8/cKnQAOq9pH6jrjl/UvW7YaF9g5GzaJ6
73o4pjbkxqYwJ9uK+Lgro3zFySawtd2iFiycanApjYMONC3ip1yi7f74Qw/WVAEN
qYhC6NLE/y33TH7qJ84EAA4J1Z/l/le/e2dOXGfe7HAsDyTkS9vpsrjhGnh6P+pE
Yo2s6xMXJ41M9RVA7Jjsu6hjh2RQrPc=
-----END CERTIFICATE-----
Generated at Fri Aug 25 01:24:42 2023 by rpki-client on console-fra.rpki-client.org