Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/206635C66B3711ED82754CBEF1222468.roa
File: 206635C66B3711ED82754CBEF1222468.roa (raw, json)
Hash identifier: LaPo5gTNP47pUfMybUtYnLKUw2rPyJUClOrF0ZbX3E8=
Subject key identifier: D3:C0:0B:E9:A5:3E:D8:58:BC:AC:2D:46:39:B4:A5:A0:18:70:BE:E2
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0AC6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/206635C66B3711ED82754CBEF1222468.roa
Signing time: Wed 23 Nov 2022 14:00:03 +0000
ROA not before: Wed 23 Nov 2022 13:59:59 +0000
ROA not after: Sun 24 Nov 2024 13:59:59 +0000
asID: 55154
IP address blocks: 154.16.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2758 (0xac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Nov 23 13:59:59 2022 GMT
Not After : Nov 24 13:59:59 2024 GMT
Subject: CN=637e2763-505f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:04:f9:31:40:49:f9:9b:1a:9f:50:10:e9:d2:
49:ca:90:a0:c5:ed:8f:6f:af:62:d8:41:40:6f:70:
80:b5:38:b1:2b:21:45:81:04:f4:fb:4c:fd:1b:5d:
26:3d:3b:ec:f2:2b:60:74:12:be:0a:25:f3:3f:03:
0c:56:4c:3e:f5:09:bf:b4:16:85:5a:d0:61:08:03:
4f:50:3e:ba:b3:2e:fc:2e:cc:77:3c:cf:0c:f0:3b:
a4:58:8b:08:21:f5:d5:74:fa:f5:90:e7:37:5e:b9:
a6:03:e5:f9:a3:46:6c:b0:1b:89:c1:71:fc:6a:5f:
45:7a:50:c8:78:b1:ec:89:ff:dd:83:b6:78:40:27:
e1:47:ef:4f:8b:f3:0d:2b:07:2e:09:1c:b5:8f:50:
ee:ff:0e:33:3a:a9:38:88:97:63:e8:3c:cc:7a:a3:
e4:46:83:00:8f:1d:aa:d5:ea:3b:4c:f0:24:0c:b0:
97:cc:d0:61:cf:27:21:41:63:07:d2:3b:a2:9e:27:
b9:1f:dd:0b:fb:93:a1:c7:30:9c:37:00:7e:ac:87:
0b:91:f8:55:39:19:f8:4a:d4:c5:de:b5:0b:d8:6e:
96:7f:e3:10:e7:07:ed:48:60:32:7e:02:2c:40:25:
76:be:81:6d:b8:7b:49:f7:14:09:06:76:07:f2:2a:
a2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C0:0B:E9:A5:3E:D8:58:BC:AC:2D:46:39:B4:A5:A0:18:70:BE:E2
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/206635C66B3711ED82754CBEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.66.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:84:84:fa:79:e3:c9:ee:24:5a:c9:f4:07:64:44:d5:9b:75:
0e:07:a4:e1:7d:12:e1:11:e7:af:a1:f7:75:6a:0d:5d:35:88:
37:aa:c0:be:05:a6:08:06:14:1d:4d:b8:b6:92:a8:40:ed:28:
3c:95:ef:09:0e:c7:c9:21:e1:09:c9:76:59:0c:ba:65:cc:4a:
2f:77:05:db:a4:44:1b:f3:6a:60:d4:00:73:2e:49:4e:0d:77:
c5:d0:2b:c7:45:83:99:47:14:bc:f6:fe:91:da:11:77:b3:97:
dd:82:f2:8a:14:01:73:0b:89:13:32:70:1b:47:2c:37:2a:4d:
fa:fc:0e:d1:9a:66:51:9e:b8:6f:4e:d8:37:6e:31:42:35:08:
6d:4b:8b:a9:cc:02:d5:95:a6:18:3f:76:c9:ab:07:aa:c9:6c:
27:fa:fc:d1:a4:96:9e:12:16:1e:2c:fe:0c:27:0c:50:ee:42:
6d:53:6c:af:bb:d3:96:2d:57:7f:06:d8:5e:c6:7f:67:7b:29:
d0:b0:c1:2e:9d:e3:0f:a4:16:95:48:03:80:15:45:64:52:22:
0c:6c:2c:36:c7:dc:b3:7c:c1:85:26:3e:56:52:60:db:08:14:
17:71:12:4f:45:92:07:23:0b:78:55:9d:7f:8b:ec:3b:e0:2a:
94:c2:43:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:53:17 2025 by rpki-client