Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2897670E779211ECB3FE559E5A40D577.roa
File: 2897670E779211ECB3FE559E5A40D577.roa (raw, json)
Hash identifier: 5hxhpMRoZaxuE2xl0n8tvksAdeL0Z4c4SWabzpw5hm4=
Subject key identifier: 06:66:E3:B0:D5:00:7B:FA:DB:A0:07:84:1F:8C:A4:57:4B:FD:1B:2C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0784
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2897670E779211ECB3FE559E5A40D577.roa
Signing time: Mon 17 Jan 2022 12:36:57 +0000
ROA not before: Mon 17 Jan 2022 12:36:54 +0000
ROA not after: Tue 17 Jan 2023 12:36:54 +0000
asID: 212238
IP address blocks: 154.16.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1924 (0x784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 17 12:36:54 2022 GMT
Not After : Jan 17 12:36:54 2023 GMT
Subject: CN=61e562e9-0ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:98:d2:8c:89:57:e6:de:91:70:65:e2:1c:
4a:6d:c2:29:de:0f:85:74:19:4b:f8:4f:65:0a:c7:
00:31:66:cd:37:ff:02:0b:4a:a4:e0:03:9b:63:34:
0e:07:cc:3c:1b:46:40:60:7b:e3:dd:9c:fd:b0:96:
08:9a:76:b1:dc:c2:d9:72:ce:ce:6e:62:4f:be:61:
61:61:c8:7b:e0:ed:b5:ae:89:de:bf:9a:7f:2b:70:
2c:c7:0c:e5:cd:d2:2c:de:86:4c:c9:12:9a:5a:19:
85:1e:3c:10:f2:1a:05:87:1f:99:54:0b:43:00:31:
8d:12:e1:a7:33:58:98:ee:89:ef:02:69:9f:d1:25:
d6:c6:61:8f:c5:67:cd:46:5c:1e:3e:ad:c3:16:6b:
24:fd:70:ac:84:d4:68:a8:6b:cd:8b:75:fd:2d:54:
77:69:2e:b1:4e:80:f9:82:74:16:33:66:f7:c8:9a:
84:22:c6:3e:56:83:cf:35:88:42:52:73:ff:21:b3:
87:da:06:9f:ff:e9:39:81:81:98:64:b6:40:5c:81:
ba:5c:21:8e:ce:c9:e2:2f:42:5f:f3:c5:ec:a5:04:
cb:93:a3:59:d9:03:67:f9:c9:bf:e1:f7:62:29:ad:
a9:1d:17:0a:42:17:a8:2f:cd:a4:08:cb:73:f8:eb:
6a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:66:E3:B0:D5:00:7B:FA:DB:A0:07:84:1F:8C:A4:57:4B:FD:1B:2C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2897670E779211ECB3FE559E5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.209.0/24
Signature Algorithm: sha256WithRSAEncryption
67:9a:19:b8:9d:dc:e6:42:45:29:4e:a2:53:a4:f3:0f:2c:73:
99:d8:18:ae:35:ea:19:cd:92:a6:39:2b:c3:82:d5:72:a3:a0:
31:ff:5f:15:f4:d1:41:78:04:ed:46:a8:e5:1d:bd:c5:90:4e:
89:d1:7f:e5:95:d7:b0:a8:58:3a:a1:65:f5:c4:7a:8e:20:e2:
1c:3d:84:3a:0b:e3:bb:17:f4:73:bf:22:0c:dc:06:4a:57:24:
0a:59:fa:a3:db:b0:61:2d:9a:c2:94:41:0a:e8:1d:41:a6:81:
59:64:a5:6e:8f:03:f3:10:14:b8:e1:03:74:50:4c:b0:a0:38:
55:a9:cd:03:ed:14:da:6e:91:a2:92:67:80:36:8d:e1:ae:21:
ec:cc:d6:68:e0:26:49:62:01:4b:36:6e:f4:97:06:98:85:a7:
60:e7:61:05:00:44:bd:53:4d:09:63:b1:7d:d6:9f:78:a6:2a:
5e:d2:99:36:a2:75:4c:d6:ab:82:12:75:ee:d6:8b:dc:85:ac:
7b:18:6b:31:27:58:e4:7b:44:dd:cf:e8:c0:fc:29:cc:4b:9b:
82:b6:ed:23:1b:fc:5f:85:f4:5c:2f:cc:b9:6e:61:01:23:60:
b8:10:90:8a:dd:9b:58:43:92:98:b6:a9:5d:95:e6:e7:94:4c:
2a:4b:b9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org