Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/484270121AB811EC974FED28D8A014CE.roa
File: 484270121AB811EC974FED28D8A014CE.roa (raw, json)
Hash identifier: VMB8AeJ8tT8A4ijw850F0qi+9Zbq3ckLfgNdnj/P/Vs=
Subject key identifier: 5F:A3:02:7E:45:A2:E2:32:54:64:F8:9F:22:3D:4B:BD:DB:71:70:A0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 068F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/484270121AB811EC974FED28D8A014CE.roa
Signing time: Tue 21 Sep 2021 08:45:33 +0000
ROA not before: Tue 21 Sep 2021 08:45:29 +0000
ROA not after: Wed 21 Sep 2022 08:45:29 +0000
asID: 22773
IP address blocks: 154.16.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1679 (0x68f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 21 08:45:29 2021 GMT
Not After : Sep 21 08:45:29 2022 GMT
Subject: CN=61499bad-8cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3b:6c:7c:d8:31:2b:2e:3f:6e:dd:d4:c0:69:
61:fb:6b:dd:5d:93:af:5c:3d:6e:28:39:6e:c2:82:
d1:0d:03:51:5e:0c:6e:e4:d7:0c:48:13:48:96:c3:
2d:10:c4:12:c6:46:3e:63:e7:d5:e2:fd:4b:e4:9f:
14:7d:7b:58:65:e4:27:35:d3:a7:79:e8:a2:ad:d6:
87:6a:0a:4a:72:9d:22:f9:be:09:b3:b0:69:27:0e:
b9:b0:6c:24:f9:05:f5:da:f2:cd:8a:0f:08:f0:f7:
83:5f:1d:18:57:15:5d:16:57:f3:49:f7:ca:65:cd:
e5:d6:ee:16:d7:87:ce:5e:b2:eb:82:85:81:37:9f:
c8:55:45:54:2a:28:d0:5b:96:82:b8:5b:c5:18:b5:
08:ee:39:17:81:15:d1:df:e4:cc:52:f7:8e:02:9f:
74:07:a9:13:62:2e:2d:08:b6:ac:54:f8:0a:d0:e7:
87:98:07:33:82:dc:bc:61:1e:3c:fb:9c:b1:04:df:
18:ee:eb:0c:db:9d:7f:61:58:4d:dd:29:d4:cd:f8:
d2:ab:5b:bd:a8:cb:07:00:06:93:f4:a6:c1:dc:00:
69:c6:46:6e:07:39:5d:24:b5:e4:7f:01:32:f1:2d:
a1:8e:34:e9:24:05:95:29:59:5c:79:e0:59:18:7f:
ab:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A3:02:7E:45:A2:E2:32:54:64:F8:9F:22:3D:4B:BD:DB:71:70:A0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/484270121AB811EC974FED28D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.194.0/24
Signature Algorithm: sha256WithRSAEncryption
be:2d:ea:db:09:a8:fa:09:1b:6d:4e:7f:ef:35:f8:03:01:fb:
5b:85:48:55:33:08:92:90:53:03:d4:14:8d:6c:d5:a0:a6:05:
6b:de:21:d8:33:96:2d:5c:9f:12:1e:b9:58:6f:22:9f:e6:f5:
19:99:2a:c8:df:5b:fd:6e:71:df:31:cb:c5:9f:37:3e:83:1a:
b1:95:6e:d5:ff:04:19:41:2c:d7:91:c2:54:23:f8:7f:eb:d6:
df:18:db:5d:43:10:ca:7c:00:4f:95:36:a0:12:11:c6:5f:9c:
49:09:b0:9d:6e:5f:53:2f:bc:11:c9:10:3b:88:ae:39:53:41:
2e:0f:bd:49:96:da:3f:12:44:a3:a9:16:11:df:c1:4e:20:8d:
03:24:5c:5d:34:8a:fd:f9:6c:6b:fe:d0:3f:5c:d5:81:bf:1c:
fd:90:9f:09:5b:01:fd:26:5b:cc:30:df:7d:be:00:a0:9f:3d:
b2:51:a1:5f:89:87:25:5e:a0:c4:e2:84:50:b2:38:35:18:fa:
58:01:8b:85:74:de:6c:b2:60:f7:97:69:d0:6d:be:1e:53:5a:
2b:c8:a8:b9:ab:1e:74:92:3c:87:29:bf:b7:20:f0:e6:a7:c3:
ac:55:4e:50:3e:01:06:ca:fe:3f:4f:20:81:a8:69:79:68:a9:
c8:b9:46:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org