Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/50F3CE3A587111EC96A4B98D5A40D577.roa
File: 50F3CE3A587111EC96A4B98D5A40D577.roa (raw, json)
Hash identifier: MG4JhuhRbxBjaOyAovNGiaucjYem3O9em06FlvAFwdU=
Subject key identifier: 22:CE:CD:F4:FC:8F:99:A2:E5:34:EC:D5:B1:E5:5D:F8:76:BE:06:F1
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0725
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/50F3CE3A587111EC96A4B98D5A40D577.roa
Signing time: Wed 08 Dec 2021 21:53:45 +0000
ROA not before: Wed 08 Dec 2021 21:53:40 +0000
ROA not after: Thu 08 Dec 2022 21:53:40 +0000
asID: 11426
IP address blocks: 154.16.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1829 (0x725)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 8 21:53:40 2021 GMT
Not After : Dec 8 21:53:40 2022 GMT
Subject: CN=61b12969-5a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:f2:c0:4f:2b:14:19:c6:57:e4:a4:aa:32:
0c:91:65:3b:0d:fd:24:46:80:83:e2:b7:6c:b6:84:
df:14:c2:ff:43:83:7e:2e:53:39:98:91:f1:b8:36:
4a:d2:dd:bd:3f:59:b5:52:12:bc:ae:1d:54:30:d4:
a0:16:25:6b:33:6a:73:1d:66:ff:2d:ac:3c:2b:6e:
82:71:c2:44:92:d6:78:9e:05:90:45:c3:af:1e:4c:
65:ec:24:e2:b6:1c:22:63:2c:96:72:d6:a3:c4:61:
1d:b3:30:dd:0f:40:ab:9d:e3:8a:cc:74:a2:a5:13:
92:6d:f3:a0:7b:3a:37:49:bc:3e:3b:1b:1d:44:b2:
b5:33:e1:79:6c:e8:3c:e9:4c:c9:45:8d:94:11:67:
3f:c1:c6:93:78:64:1b:62:fc:e5:19:68:44:01:9f:
c7:53:98:52:bf:e9:8a:16:d3:8f:71:35:4d:db:4c:
87:a7:d6:0e:ef:e7:31:53:ab:2f:29:45:d3:c2:de:
58:90:e2:a9:bd:3c:df:fa:f3:27:e7:60:38:07:b2:
3e:9d:12:67:79:92:7e:e6:20:5a:dd:bf:61:35:67:
15:72:9e:c3:58:0e:d6:d6:15:23:79:29:35:54:02:
5e:a6:a7:c6:1d:8a:3c:59:97:30:f9:14:68:e1:61:
cb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CE:CD:F4:FC:8F:99:A2:E5:34:EC:D5:B1:E5:5D:F8:76:BE:06:F1
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/50F3CE3A587111EC96A4B98D5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.173.0/24
Signature Algorithm: sha256WithRSAEncryption
84:6b:44:16:19:c5:d5:cc:ec:f5:ea:e8:a9:49:e0:a3:ea:c2:
2b:a9:e9:56:e0:82:23:47:e2:6f:29:a1:e8:bb:33:56:39:2d:
57:6e:ab:1c:c9:17:14:5a:31:45:88:5a:0a:5d:af:f6:30:36:
5a:a8:3e:c2:99:bf:bb:7e:80:87:a7:db:f6:9d:af:fb:96:cb:
a5:6c:f1:5d:90:56:80:ef:2c:98:fb:c7:73:f0:99:9a:46:1c:
c1:71:34:ad:09:46:4b:dd:24:e1:8d:1e:61:33:72:89:59:23:
28:e2:be:cc:0f:ae:db:e2:03:20:5d:e2:83:26:70:14:a2:bd:
e4:7f:34:73:b3:67:7f:d2:52:91:ad:16:11:59:89:13:5a:83:
db:b3:82:f5:38:3f:cc:93:b2:f1:c1:fc:c1:5e:0f:63:b9:d5:
dc:3a:66:06:c3:2c:73:22:14:4e:49:51:bd:f6:10:f2:0f:7a:
6c:14:14:64:7a:cd:0f:71:63:6d:6c:35:c7:70:e8:7c:5b:db:
b5:ac:69:78:17:84:6f:96:b3:78:fc:8c:78:3c:4a:f2:89:0e:
90:a0:b9:f4:1c:7b:8c:7b:05:de:09:5a:68:b9:d7:59:38:3c:
88:31:5c:ed:8b:06:35:dd:d7:c2:e3:d0:16:0e:7d:3e:b5:fb:
c9:9f:01:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org