Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/271550368D9911EC822882B55A40D577.roa
File: 271550368D9911EC822882B55A40D577.roa (raw, json)
Hash identifier: MlgyTFwNflROuD/KAsjVWAsLQJ1/vTt+Q/4A+7YIZSM=
Subject key identifier: 20:4C:8A:5C:C8:E2:30:AC:E5:C1:91:10:DD:4B:BD:81:91:14:E4:E5
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 07C3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/271550368D9911EC822882B55A40D577.roa
Signing time: Mon 14 Feb 2022 13:22:27 +0000
ROA not before: Mon 14 Feb 2022 13:22:23 +0000
ROA not after: Tue 14 Feb 2023 13:22:23 +0000
asID: 60068
IP address blocks: 154.16.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1987 (0x7c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 14 13:22:23 2022 GMT
Not After : Feb 14 13:22:23 2023 GMT
Subject: CN=620a5793-eb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:a5:54:2d:f2:a4:84:31:f9:cf:dc:4a:f1:
2d:f7:49:df:df:d9:20:77:42:11:48:56:1d:6a:12:
14:51:a8:c2:b8:9c:6d:5c:91:0c:37:4f:e6:e2:2d:
c5:d6:5c:4a:3a:18:8e:52:88:bd:4d:c8:b7:71:6a:
6f:3e:da:18:18:f5:e7:90:0d:21:3b:08:3e:53:72:
06:36:65:7d:6a:7c:4a:0b:5c:0b:3b:3d:d4:3f:30:
17:cd:dd:9f:6d:91:14:62:31:7c:d8:e3:44:04:15:
9b:7a:95:bb:11:d1:1b:a0:bb:07:c9:45:96:ca:c5:
c0:d5:ff:97:09:06:9e:e9:f8:e7:26:90:ea:34:dc:
ce:ad:31:3c:db:37:db:df:6a:0d:48:4f:3f:c2:fe:
3f:0c:69:60:0b:30:ce:65:da:20:d3:30:f8:e3:b1:
f5:65:f2:47:fc:0c:df:d2:e8:f1:1b:32:d2:77:be:
ee:94:2c:25:c7:65:6a:8e:b3:41:19:f6:db:6e:55:
c6:83:91:df:28:10:5a:a1:3d:5c:8a:6e:1c:f6:84:
ec:d0:ce:50:9e:59:6c:b7:43:9a:c1:db:a6:82:67:
16:44:b1:06:b6:ec:7d:d6:ed:51:fa:0a:8f:e2:27:
ef:ce:01:d7:47:50:f5:f5:84:4a:64:4c:37:e7:1c:
20:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4C:8A:5C:C8:E2:30:AC:E5:C1:91:10:DD:4B:BD:81:91:14:E4:E5
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/271550368D9911EC822882B55A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.110.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:75:73:1f:48:56:e7:6e:a3:11:58:ad:80:e4:19:0e:e0:ff:
be:37:7e:69:33:87:56:12:2e:dd:4f:31:c7:35:38:88:7b:e5:
ae:ac:1b:e5:8c:fc:3e:76:46:35:88:77:31:42:54:79:77:9a:
fe:c8:6d:2e:07:89:f5:ca:47:1b:5e:9b:cd:be:74:ac:2b:35:
eb:0f:2b:67:4a:e6:b5:ad:98:94:bf:41:ad:d8:14:75:d0:9e:
50:81:be:a9:75:74:c2:de:45:59:65:ab:57:ce:61:11:60:f4:
86:8d:56:fe:ed:97:de:6f:6a:9b:0b:3c:02:e6:3a:66:92:dc:
fb:69:12:ac:10:a1:7b:4f:b6:8c:85:b3:92:64:1d:19:a6:69:
da:3c:80:ee:17:42:14:e1:c6:77:89:cd:9c:57:3e:04:9f:9b:
6d:2e:da:3d:cb:0b:be:bb:d3:95:20:38:cc:43:d7:82:2a:b1:
38:d8:13:e4:8a:97:ba:60:23:d1:08:e7:2d:a5:14:c7:59:46:
8d:f2:4b:7c:9c:cc:c9:94:33:0c:68:da:27:9a:2c:48:5d:d3:
47:1e:26:f0:cd:cb:e6:ec:62:40:12:e6:9e:3f:28:8c:73:6e:
10:5b:94:79:6e:1f:c9:aa:71:b5:5d:1f:30:a4:48:a5:89:a9:
79:85:69:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org