Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5027B49CF42211EC92206EEEF1222468.roa
File: 5027B49CF42211EC92206EEEF1222468.roa (raw, json)
Hash identifier: FSmxzHPh6GC87SjIJj5VlbpJdx8eBNBmX7gXt968rVA=
Subject key identifier: 6E:F9:68:E5:05:CB:D4:91:93:2A:2E:FC:A2:6A:08:41:5F:2E:91:FE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 08B3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5027B49CF42211EC92206EEEF1222468.roa
Signing time: Sat 25 Jun 2022 01:01:15 +0000
ROA not before: Sat 25 Jun 2022 01:01:11 +0000
ROA not after: Sun 25 Jun 2023 01:01:11 +0000
asID: 40676
IP address blocks: 154.16.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2227 (0x8b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 25 01:01:11 2022 GMT
Not After : Jun 25 01:01:11 2023 GMT
Subject: CN=62b65e5b-3771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ee:8f:4a:55:f7:45:e0:9f:54:86:0c:9b:f7:
ba:46:2c:ca:dd:d5:84:61:af:8a:a1:a9:a3:89:e0:
3a:d4:47:53:ec:78:bc:d6:f7:57:8b:10:e1:3c:ba:
dc:78:e7:3c:19:e0:9b:9a:d5:ce:e6:26:24:ea:78:
67:39:3a:cc:81:cf:cb:df:76:59:6e:58:07:02:0c:
2a:1b:b8:a2:74:1f:fb:70:37:d1:c7:d7:cb:0f:fb:
c4:4e:73:89:56:30:ff:47:03:63:f0:96:44:93:83:
7f:ab:c5:34:f4:e4:3e:10:ac:3a:e3:ed:4a:59:b9:
5c:f1:6c:cc:ea:6f:2a:d3:ae:02:ae:42:d7:e1:47:
12:3f:dd:28:e9:a9:54:85:eb:48:23:c9:d1:d2:1b:
51:9b:0f:46:9b:cf:a2:08:8b:7a:c2:50:b1:dc:ac:
4b:23:a1:4e:84:96:a4:33:27:35:2f:02:12:1c:f7:
9a:32:9c:11:03:37:b7:15:b4:a4:f3:4a:09:a6:c6:
23:31:04:b0:8e:8e:3c:e5:36:b6:a8:fd:fd:bd:b9:
b8:79:b4:43:f5:a4:82:74:32:fe:9d:21:6e:4b:ca:
7a:1d:1c:ad:41:67:ef:b3:00:3a:45:d8:12:25:f3:
2d:89:fa:99:56:2e:0a:d6:e2:26:49:5e:17:21:0a:
86:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F9:68:E5:05:CB:D4:91:93:2A:2E:FC:A2:6A:08:41:5F:2E:91:FE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5027B49CF42211EC92206EEEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.86.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ea:20:54:db:df:31:08:6b:43:0a:2d:0a:a3:f9:1a:e6:07:
18:16:d6:40:63:e8:b1:cf:c8:a4:b7:96:d1:37:d3:c0:70:d1:
57:f4:71:e0:c5:ee:9c:ea:99:50:c1:39:3d:bb:d7:ee:27:97:
02:8d:b1:31:06:3b:d8:49:cf:36:61:04:7c:02:94:01:f7:6d:
1f:3e:38:ba:9d:a1:97:cc:6d:48:6a:b1:ef:5a:b6:39:b7:cf:
50:5c:6b:f0:cc:9a:8b:3f:3e:cb:d7:a4:3b:f6:95:73:cb:c1:
bf:f1:85:8a:e0:52:23:8b:b1:de:20:a6:90:aa:ef:5b:90:af:
ed:0c:a5:1a:57:63:7e:1f:27:ee:07:78:4d:d5:22:11:da:50:
b4:29:30:e5:53:1a:6b:63:50:95:fa:5c:9a:ed:0c:e6:65:52:
df:9d:f3:cc:70:33:7d:28:2d:42:a0:bc:33:3a:8a:7d:57:4f:
c6:67:92:f0:c4:29:c1:b1:cc:e0:2a:c2:5b:d6:77:1e:81:b0:
bf:55:d0:64:23:71:5e:8a:a5:0b:0d:d7:80:04:2a:d5:62:ff:
95:8a:be:77:ee:aa:2b:d0:ed:62:d4:e6:7e:f1:a8:2d:21:01:
d5:7e:65:38:67:5c:e9:bc:67:93:48:a9:c2:a1:ca:fe:46:ec:
d6:48:70:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org