Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/292AAF30890011ECAEBC9EB35A40D577.roa
File: 292AAF30890011ECAEBC9EB35A40D577.roa (raw, json)
Hash identifier: sDTv4qv/gwkPAsO+FmrVp0MMMbe4jI/JZ/n0beh0zCQ=
Subject key identifier: E5:B5:E4:85:1D:7C:F6:78:8C:7E:01:DE:08:E8:33:CF:B9:AD:2D:4C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 07B8
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/292AAF30890011ECAEBC9EB35A40D577.roa
Signing time: Tue 08 Feb 2022 16:57:13 +0000
ROA not before: Tue 08 Feb 2022 16:57:10 +0000
ROA not after: Wed 08 Feb 2023 16:57:10 +0000
asID: 0
IP address blocks: 154.16.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1976 (0x7b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 8 16:57:10 2022 GMT
Not After : Feb 8 16:57:10 2023 GMT
Subject: CN=6202a0e9-b792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0e:28:8e:e2:e8:b5:b3:23:4f:fd:16:03:01:
21:1e:5d:9e:26:8b:0b:58:25:b4:f9:50:65:7c:3a:
f5:e8:51:20:16:7a:24:53:76:10:1b:12:01:39:c4:
f3:73:24:97:85:85:03:58:95:63:7b:4b:07:1d:a3:
be:54:57:10:b3:5e:a3:2e:51:82:04:f0:2a:f8:1c:
8f:56:e4:3f:f3:a7:7d:e3:76:ba:53:36:ba:50:fa:
f5:a3:e4:b3:40:13:56:a0:df:19:b3:3f:7b:14:ec:
b9:7a:5d:5f:18:8b:e1:52:a0:b8:06:00:4d:e9:b2:
24:d6:14:7c:28:72:48:0d:a3:f1:3d:82:ea:35:4a:
ca:c9:83:b5:1c:17:05:1a:de:d0:43:ac:33:eb:e0:
48:b4:89:80:c2:c0:d8:51:96:56:8a:9e:22:ea:3e:
9f:e0:8e:56:7b:74:96:77:72:27:fe:c9:83:90:88:
b5:47:1b:e6:de:13:d4:5e:43:e4:97:3c:a9:0f:34:
87:a0:e1:93:85:c6:43:85:1e:38:d1:90:0a:c8:9e:
3f:58:6e:df:3c:77:c2:09:c9:1b:79:3c:15:cc:ae:
99:f3:6f:bb:0c:07:0c:2c:99:f1:22:a2:91:dc:aa:
ef:f4:bd:5a:67:02:1e:c1:4e:46:40:b9:25:3f:c4:
57:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B5:E4:85:1D:7C:F6:78:8C:7E:01:DE:08:E8:33:CF:B9:AD:2D:4C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/292AAF30890011ECAEBC9EB35A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.209.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:9f:f1:00:5d:59:9c:b5:f1:ef:f1:13:94:af:3f:a2:eb:50:
20:ff:b4:a2:c6:a4:24:ee:04:a1:35:60:c0:42:00:02:39:3b:
3e:ac:31:24:51:f3:6f:52:78:7e:26:b8:63:64:11:df:b7:15:
f6:66:1f:21:7a:84:8a:25:f8:70:45:a0:bc:4b:09:a5:70:87:
25:7c:25:b3:6d:bd:81:78:99:6a:d4:32:0c:ef:74:63:c6:87:
fa:08:10:03:d4:d7:4e:7e:e9:86:a1:3f:f7:42:a4:0b:03:96:
ff:4d:5c:dd:65:71:8c:eb:65:0f:28:cf:a8:b9:30:b5:3a:cc:
a8:ac:f4:84:53:e7:c9:df:63:db:9a:a9:0f:1f:33:b5:d0:40:
54:12:96:24:e6:d8:bb:82:76:52:e7:6b:f2:c7:24:d2:34:34:
17:78:aa:a9:71:bb:19:78:47:86:c8:a3:51:e3:19:3e:ff:b6:
ed:6f:cf:54:ea:2a:49:0c:6b:4f:17:ca:c8:8d:e2:dd:84:de:
32:a8:5f:0b:3a:c9:6a:92:61:ba:da:3d:19:7f:43:3c:9f:37:
85:90:dc:18:25:bf:78:c2:1a:c6:c6:78:e8:22:8e:56:27:eb:
d9:97:c6:cf:35:75:38:19:a9:29:9b:c0:9f:93:20:73:9a:5c:
f6:5b:2f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org