Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/371D01247F4B11ECB45AB2B65A40D577.roa
File: 371D01247F4B11ECB45AB2B65A40D577.roa (raw, json)
Hash identifier: Ug4UY23Sl+YnDHMbtgjxwmM9yb5tiUI5qfoIutQKP1g=
Subject key identifier: 60:4A:CF:CF:5D:C3:4D:A6:D8:35:95:5F:72:92:EC:38:0B:77:AA:96
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0798
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/371D01247F4B11ECB45AB2B65A40D577.roa
Signing time: Thu 27 Jan 2022 08:29:17 +0000
ROA not before: Thu 27 Jan 2022 08:29:11 +0000
ROA not after: Fri 27 Jan 2023 08:29:11 +0000
asID: 133973
IP address blocks: 154.127.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1944 (0x798)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 27 08:29:11 2022 GMT
Not After : Jan 27 08:29:11 2023 GMT
Subject: CN=61f257dc-a4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ab:4a:07:9c:79:5b:f6:ed:44:7e:68:66:45:
fb:c7:09:94:b0:bc:04:7a:eb:34:2b:2d:88:d5:e4:
dd:b4:db:1a:9e:cc:45:96:0e:de:1d:4a:d0:dd:47:
41:86:3d:5e:41:a4:56:70:c9:51:70:16:df:c1:15:
99:85:6a:a2:d4:b9:dc:58:b2:22:56:cc:55:a4:14:
68:5d:62:4c:a1:ac:e6:20:40:fd:e8:e6:0e:0f:45:
a6:bd:03:3a:91:60:34:6c:eb:38:8e:18:04:c3:07:
48:8a:86:c0:b2:33:10:ef:2f:60:a3:de:f4:41:33:
e9:e2:f7:16:43:58:29:19:31:ec:4b:2a:ee:93:27:
b2:4b:41:0d:51:50:62:9f:77:d8:17:92:03:57:8a:
5f:c2:ed:06:c4:0a:03:c5:37:df:ba:de:33:95:fd:
9d:1f:05:72:de:c4:4d:a0:d1:b8:75:da:7c:14:5d:
7e:bc:cd:75:d9:73:9c:32:88:7a:eb:1c:75:45:1c:
14:35:82:d1:9b:d3:f4:e0:a1:c4:49:3c:8b:46:85:
70:9c:3e:da:13:f2:69:3c:70:34:27:b7:1e:7a:a8:
3a:2b:8e:60:9c:ed:1e:0c:3a:ba:ab:79:26:ae:85:
cd:6c:4c:f1:e3:83:01:08:19:c1:74:00:cb:50:fc:
b9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4A:CF:CF:5D:C3:4D:A6:D8:35:95:5F:72:92:EC:38:0B:77:AA:96
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/371D01247F4B11ECB45AB2B65A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.62.0/24
Signature Algorithm: sha256WithRSAEncryption
39:cd:05:49:72:78:b5:7c:0e:24:6b:6e:7d:ec:2c:c8:6e:7d:
0e:b5:0a:e8:8d:6e:50:83:fb:a9:7e:9d:64:99:da:fe:58:8b:
1f:40:1d:b7:5c:36:18:b0:67:f4:07:24:2b:3e:bf:77:f0:4b:
40:d3:ff:d3:30:d3:b6:59:2a:0c:44:70:55:1a:ee:dd:a3:3e:
9b:4f:76:8c:c2:11:cd:73:f1:86:b1:24:24:26:8e:93:5d:4e:
c8:fa:0c:a7:e1:d1:99:d9:21:f2:34:84:5f:62:4a:9d:44:24:
32:e1:45:d5:2b:1a:09:b0:3f:4d:10:26:e6:52:32:37:7d:64:
74:a1:f7:d7:6d:ee:64:6a:d8:02:58:62:bf:88:e7:ef:28:d2:
b4:fc:24:78:23:2e:5a:82:e4:32:c8:32:c4:d5:1f:b9:50:0c:
6a:ea:6b:c7:0d:22:e5:ec:d2:81:02:c5:f4:1d:25:03:19:91:
90:5d:97:82:68:de:23:5a:96:ed:24:9d:c5:d0:3e:e0:de:5a:
db:e3:5b:fa:b3:51:10:9a:62:11:bf:0a:8d:f8:64:50:65:c7:
83:a1:3b:e4:ad:6b:d2:81:2d:db:38:4c:26:fb:1b:9a:b3:9a:
d5:ab:61:d1:55:bb:2a:d1:16:22:6b:d0:04:c7:46:ee:4d:15:
c6:89:c3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org