Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4C89877C567C11EDA96287AAF1222468.roa
File: 4C89877C567C11EDA96287AAF1222468.roa (raw, json)
Hash identifier: zazPyzq7+pZMlXrdmNDRMlsCgpUFkWlkYi5XMTtTIgQ=
Subject key identifier: 88:A2:49:FD:05:6F:F0:D5:AC:6C:9B:18:18:C9:78:2D:73:99:3D:D0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0A85
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4C89877C567C11EDA96287AAF1222468.roa
Signing time: Fri 28 Oct 2022 04:52:18 +0000
ROA not before: Fri 28 Oct 2022 04:52:13 +0000
ROA not after: Sat 28 Oct 2023 04:52:13 +0000
asID: 60781
IP address blocks: 154.127.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2693 (0xa85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Oct 28 04:52:13 2022 GMT
Not After : Oct 28 04:52:13 2023 GMT
Subject: CN=635b6002-3c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:83:d8:36:be:c8:ff:15:94:d3:72:98:d5:c9:
2b:ce:d2:dd:a9:10:0d:d9:5a:5f:12:29:07:c8:48:
b8:c6:6a:37:a8:93:9c:ea:52:98:b2:da:2d:17:62:
6e:31:b4:84:ac:1e:91:32:a4:75:65:a9:29:b5:db:
f8:08:a8:b2:a8:a2:ae:67:1e:27:43:98:63:29:4d:
f5:a5:cf:36:86:81:83:10:82:1e:7a:a7:d2:03:08:
53:86:3a:6e:ce:92:09:fc:7a:fe:94:58:f3:9e:16:
da:81:ce:1f:49:03:ab:a9:32:4c:4f:d3:f4:55:ea:
c9:29:e5:f8:9c:52:ab:57:6f:c7:9e:4a:7b:66:cd:
0e:21:ea:57:5b:56:77:ae:8a:83:10:a1:c5:d9:a1:
6b:20:f5:0c:ce:3d:90:d2:9d:e1:30:fe:65:51:d0:
68:37:ac:5e:16:26:c1:24:77:ca:0d:d6:48:f4:f2:
13:21:ea:39:4d:c7:9a:06:5b:61:a0:a9:2d:18:66:
fe:73:a7:2e:08:7c:d0:da:02:5a:11:59:7b:e3:39:
72:5e:f6:91:b0:a5:1c:16:7b:37:9b:86:f5:96:82:
42:f4:10:0a:46:92:47:21:3c:13:ba:5f:66:e2:b4:
34:11:34:74:21:da:50:b8:20:11:41:a1:38:f2:ae:
f8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A2:49:FD:05:6F:F0:D5:AC:6C:9B:18:18:C9:78:2D:73:99:3D:D0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4C89877C567C11EDA96287AAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.48.0/24
Signature Algorithm: sha256WithRSAEncryption
23:b8:4d:d6:27:e4:45:87:cb:91:f5:ed:85:5a:4d:16:c7:f4:
f4:ab:e0:5f:05:f0:c0:de:f4:a8:b6:d4:41:b5:89:5d:96:7e:
a3:ce:84:27:e8:1c:c1:9e:ad:58:42:b8:d9:9d:47:f5:ff:5b:
cc:af:38:ce:d8:cf:d5:f5:9b:e5:83:8f:9b:38:8b:ba:c8:3a:
04:43:1e:60:83:46:e0:b4:58:bc:06:80:62:b2:80:37:7c:e3:
4b:f6:a1:ab:be:2d:3b:fb:3b:95:c7:7d:a9:83:b8:a0:28:df:
c7:2d:bd:53:10:7f:78:dd:49:74:01:2e:5c:cd:89:ed:ce:1a:
97:14:a2:34:2c:86:73:d3:a9:ad:72:c8:ad:84:17:b3:c4:39:
5a:a2:dd:e8:f2:13:26:8c:08:2e:c5:22:72:7b:71:5a:03:b2:
0b:f5:dc:21:01:69:2b:56:d4:3c:ff:22:73:af:5a:88:f1:1c:
1b:44:c6:a7:54:8f:72:1d:c2:7c:43:8c:eb:99:a1:ca:db:f1:
bf:3f:05:33:f1:77:7a:2b:a9:8b:ab:50:20:56:5a:c3:83:78:
7e:9d:4f:9e:84:44:44:f5:c0:38:30:02:53:9d:37:d1:70:b5:
10:0f:8d:b1:8d:5a:ec:fb:ef:9a:77:fd:d3:45:33:11:f6:8e:
36:4b:7c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:50:42 2025 by rpki-client