Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1189073CF03011EBA89B9D7DD8A014CE.roa
File: 1189073CF03011EBA89B9D7DD8A014CE.roa (raw, json)
Hash identifier: MmBwmJ/mIn95CpfVEax2nmC4/WglpaLNWv8l5ooNz5Q=
Subject key identifier: EB:50:CA:16:1F:50:26:55:20:08:B8:25:6B:E8:89:07:7D:F0:5F:1E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0601
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1189073CF03011EBA89B9D7DD8A014CE.roa
Signing time: Thu 29 Jul 2021 05:45:02 +0000
ROA not before: Thu 29 Jul 2021 05:44:56 +0000
ROA not after: Fri 29 Jul 2022 05:44:56 +0000
asID: 36351
IP address blocks: 154.16.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1537 (0x601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 29 05:44:56 2021 GMT
Not After : Jul 29 05:44:56 2022 GMT
Subject: CN=6102405e-523f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2e:ed:89:99:98:0e:dc:9b:fd:0e:61:5f:01:
6f:36:e4:b4:80:9e:a3:2f:78:81:ef:d5:6d:2d:ec:
28:c8:e8:e4:bf:92:9f:31:33:65:58:89:c4:2f:8d:
8e:5e:6d:35:78:50:ea:01:a5:2a:a5:85:20:66:75:
fb:c2:d8:30:89:b3:35:81:f9:44:c9:53:45:89:a2:
83:4d:e9:2e:e0:69:f4:2a:73:ca:c1:7b:50:6c:e7:
db:39:6b:c1:0e:11:5a:e6:94:28:40:69:da:b5:6f:
e9:bd:57:a9:6d:e5:93:76:35:75:f1:b0:57:3f:74:
ec:29:2c:70:40:93:c6:50:b3:5f:e5:8f:66:88:90:
44:67:94:eb:66:91:2f:ab:bb:15:3f:4e:bd:a4:24:
1b:e4:81:2a:7a:36:a3:9e:13:b1:47:de:1f:7a:00:
52:4c:c6:3c:cf:48:98:d2:a1:da:ce:8e:5e:42:14:
ae:22:93:70:6d:11:de:2c:7c:80:87:7e:a0:94:56:
59:27:76:f9:d9:5f:54:fb:c7:37:e0:19:85:3e:2e:
82:7e:03:f8:28:94:4f:41:95:db:a4:1d:80:79:8f:
11:ea:6a:ef:00:72:5d:b6:5a:68:ff:28:89:42:b7:
50:ea:dd:36:15:8a:27:ae:8d:9b:be:30:7b:62:57:
57:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:50:CA:16:1F:50:26:55:20:08:B8:25:6B:E8:89:07:7D:F0:5F:1E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1189073CF03011EBA89B9D7DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.96.0/24
Signature Algorithm: sha256WithRSAEncryption
38:7b:b5:13:cb:69:6d:56:6b:f0:5f:b4:aa:05:db:1f:7d:77:
fd:8d:68:de:4c:30:e7:25:90:96:03:57:94:3c:1e:43:65:2c:
0c:29:76:be:6a:15:ce:50:11:5c:5d:63:80:70:61:8d:79:5b:
39:4c:9f:71:a8:60:e9:a2:90:01:49:ab:c5:7d:a0:94:96:f2:
ef:d9:fb:81:12:4f:41:18:3b:07:62:92:46:fb:2f:a8:d1:11:
26:57:ae:96:73:cf:0a:b0:6e:9a:4e:99:aa:af:1d:69:67:2c:
b4:b7:a5:52:01:d4:30:f7:64:dc:a4:94:3b:4e:86:3c:f0:cd:
38:56:8d:9b:55:b8:45:2a:c2:ed:4d:7d:f0:a9:5a:02:19:67:
eb:42:22:c8:40:d9:60:4b:4c:cf:6a:3b:e3:49:43:44:26:91:
ab:7b:9d:6f:22:1f:4a:8d:7a:5e:fd:f9:4c:14:1a:42:d0:17:
bc:6d:40:b7:b3:25:95:26:9d:0a:5d:0e:2a:d8:1b:d2:93:b6:
6e:04:d4:e5:1f:47:8a:02:60:eb:d5:bc:a5:b1:a1:77:96:a5:
f4:08:be:b2:74:4e:ba:25:cc:a9:ee:89:ad:45:c1:63:aa:50:
c2:6a:77:95:8d:8b:39:74:0c:89:8e:e9:42:1d:d3:f9:4b:cf:
25:f5:64:2d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBgEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMTA3MjkwNTQ0NTZaFw0yMjA3MjkwNTQ0NTZaMBgxFjAU
BgNVBAMMDTYxMDI0MDVlLTUyM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqLu2JmZgO3Jv9DmFfAW825LSAnqMveIHv1W0t7CjI6OS/kp8xM2VYicQv
jY5ebTV4UOoBpSqlhSBmdfvC2DCJszWB+UTJU0WJooNN6S7gafQqc8rBe1Bs59s5
a8EOEVrmlChAadq1b+m9V6lt5ZN2NXXxsFc/dOwpLHBAk8ZQs1/lj2aIkERnlOtm
kS+ruxU/Tr2kJBvkgSp6NqOeE7FH3h96AFJMxjzPSJjSodrOjl5CFK4ik3BtEd4s
fICHfqCUVlkndvnZX1T7xzfgGYU+LoJ+A/golE9BldukHYB5jxHqau8Acl22Wmj/
KIlCt1Dq3TYViieujZu+MHtiV1dVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU61DK
Fh9QJlUgCLgla+iJB33wXx4wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzExODkwNzNDRjAzMDExRUJBODlCOUQ3REQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEGAwDQYJKoZIhvcNAQEL
BQADggEBADh7tRPLaW1Wa/BftKoF2x99d/2NaN5MMOclkJYDV5Q8HkNlLAwpdr5q
Fc5QEVxdY4BwYY15WzlMn3GoYOmikAFJq8V9oJSW8u/Z+4EST0EYOwdikkb7L6jR
ESZXrpZzzwqwbppOmaqvHWlnLLS3pVIB1DD3ZNyklDtOhjzwzThWjZtVuEUqwu1N
ffCpWgIZZ+tCIshA2WBLTM9qO+NJQ0Qmkat7nW8iH0qNel79+UwUGkLQF7xtQLez
JZUmnQpdDirYG9KTtm4E1OUfR4oCYOvVvKWxoXeWpfQIvrJ0TrolzKnuia1FwWOq
UMJqd5WNizl0DImO6UId0/lLzyX1ZC0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org