Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/25BA1198226F11ED8C9E7391F1222468.roa
File: 25BA1198226F11ED8C9E7391F1222468.roa (raw, json)
Hash identifier: XlnIKov1SMT//9kGkrr86bnvFFivRXX6ysGobQpFbzE=
Subject key identifier: 34:52:3E:BE:06:F9:6F:86:CE:D6:BD:29:E5:4A:06:BB:BF:D0:A2:7C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0948
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/25BA1198226F11ED8C9E7391F1222468.roa
Signing time: Mon 22 Aug 2022 23:07:09 +0000
ROA not before: Tue 23 Aug 2022 23:07:05 +0000
ROA not after: Wed 23 Aug 2023 23:07:05 +0000
asID: 204843
IP address blocks: 154.16.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2376 (0x948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 23 23:07:05 2022 GMT
Not After : Aug 23 23:07:05 2023 GMT
Subject: CN=63040c1d-ac1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b2:7a:b1:e4:17:1a:4a:25:34:7b:05:fa:db:
27:8e:12:47:db:39:19:13:8c:57:db:8f:03:57:20:
c5:4a:44:c2:64:64:fc:a3:ce:2d:b8:b1:21:41:99:
f9:41:d0:e0:45:bf:4c:83:27:b4:36:db:9a:b3:a8:
ba:4e:09:34:ac:33:99:d6:39:3f:01:75:32:cf:bd:
e9:c3:55:f6:48:06:0f:c2:81:53:cd:e7:db:8c:74:
85:c1:06:88:bd:fb:b2:a3:24:ce:61:c8:81:b3:e6:
f3:a3:ba:54:72:dd:f4:8d:ab:15:77:89:66:e1:48:
d9:93:44:c4:0e:8d:ad:12:10:f3:a5:21:f7:86:94:
01:93:cb:1a:05:e4:8a:e7:90:23:03:06:58:9f:29:
8c:ca:1e:a7:8b:88:af:a6:1a:e2:d8:dc:9f:7c:67:
b8:39:6f:e0:dc:2f:fd:ee:76:47:db:90:56:cf:48:
9e:7e:a3:76:90:57:dc:60:52:a1:66:26:d8:2b:39:
f1:d0:3c:20:74:4e:a1:ad:5d:f0:a3:e7:02:a6:fc:
9b:2c:f2:75:2e:69:d2:e2:92:27:5c:0f:15:be:56:
c6:3b:00:bc:7f:d1:e2:21:60:fe:5f:84:d1:4e:b6:
70:15:f6:17:32:5a:ae:a8:6c:71:3a:cb:90:6d:2f:
85:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:52:3E:BE:06:F9:6F:86:CE:D6:BD:29:E5:4A:06:BB:BF:D0:A2:7C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/25BA1198226F11ED8C9E7391F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.3.0/24
Signature Algorithm: sha256WithRSAEncryption
79:bb:0a:4e:83:13:aa:61:d9:2c:e8:41:cf:e6:c4:e8:ae:ee:
50:7c:22:84:a0:3c:1a:5f:b5:dd:47:20:3c:fb:df:0b:6b:fb:
f5:41:98:80:ed:ad:d7:3c:55:68:2c:f4:c5:38:12:24:b4:39:
6f:ad:99:6a:14:2d:d9:54:98:d4:84:69:cc:9f:87:44:c9:e5:
54:71:77:11:5f:52:17:16:36:a6:43:e3:e8:4c:16:b2:fc:60:
b2:c9:a7:43:46:48:93:75:f3:e8:82:7c:83:70:dd:57:0a:9b:
5c:a6:36:db:51:f1:13:ba:fe:17:8c:c7:b9:ad:b4:22:60:5a:
a1:3f:ff:58:dd:bc:8d:4c:c6:be:03:dd:8d:74:1b:5d:7b:ee:
78:df:29:ce:4b:85:92:1f:c7:99:48:fd:6f:73:89:80:3d:fd:
5e:7d:7b:ad:59:14:05:7d:96:c2:bc:76:55:c3:34:f5:d6:08:
8b:a4:44:f5:67:5f:a7:97:d8:67:00:c8:82:60:12:5c:4b:b6:
2f:3b:2e:34:36:51:70:34:59:d9:cc:c1:48:c4:e8:15:9f:57:
6b:29:2f:8e:a3:74:78:05:05:ef:7a:bf:d2:6e:e2:e3:7c:33:
cc:ea:db:81:5d:e6:5a:5f:40:92:aa:9f:7e:31:a9:5b:88:60:
ad:ca:09:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 01:25:10 2023 by rpki-client on console-ams.rpki-client.org