Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/537EA0842A2211EDA7E15598F1222468.roa
File: 537EA0842A2211EDA7E15598F1222468.roa (raw, json)
Hash identifier: yadvTyarfweR6vgVFdCQAKJHsbMUtE9jvWWXhKxLJXw=
Subject key identifier: 5B:0E:8F:8C:41:9E:BF:ED:B6:7D:41:5A:38:4D:20:44:1A:DB:AD:3A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0983
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/537EA0842A2211EDA7E15598F1222468.roa
Signing time: Thu 01 Sep 2022 18:17:24 +0000
ROA not before: Thu 01 Sep 2022 18:17:18 +0000
ROA not after: Sat 09 Sep 2023 18:17:18 +0000
asID: 43431
IP address blocks: 154.16.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2435 (0x983)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 1 18:17:18 2022 GMT
Not After : Sep 9 18:17:18 2023 GMT
Subject: CN=6310f734-75aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:14:75:89:57:17:a0:17:86:26:dc:f5:40:
d3:1c:77:e7:f3:74:26:4e:67:c7:41:1e:42:fd:09:
13:b2:ba:b2:73:af:5b:cf:33:f8:6d:90:3f:77:c2:
a7:f6:86:71:7c:05:33:51:64:76:de:45:c4:37:11:
4c:e0:ad:ae:09:c0:9a:19:5d:03:7e:55:e1:59:4c:
98:b3:60:6f:49:c3:f6:f3:be:49:47:10:ee:ae:09:
af:4b:3e:11:66:73:a3:9c:58:60:b4:77:dd:a6:fc:
9d:5c:5d:06:79:cf:8d:20:a8:95:27:3d:f4:c6:03:
b9:f6:a5:32:60:a7:4c:b3:d8:a7:3d:2e:3f:a2:88:
f4:7f:4f:f9:72:7c:c1:3f:d0:91:ed:5e:19:b1:dd:
d6:91:91:4f:ae:21:fa:c4:95:f3:0c:ea:fb:86:51:
40:72:5b:b0:74:84:8d:18:3d:b0:77:11:f3:7e:d2:
63:fe:b9:77:30:01:b9:74:06:66:0a:39:0f:01:84:
f8:a2:95:09:4d:42:a5:0d:21:dc:4b:cf:60:2e:7a:
f9:93:95:b3:4d:de:03:aa:1f:43:b2:3e:7c:7e:ef:
87:60:5d:bd:97:a8:cf:7a:1b:93:74:2f:74:a1:b3:
f2:69:25:f5:12:75:d9:cc:29:99:4c:c4:fc:0b:2f:
2b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0E:8F:8C:41:9E:BF:ED:B6:7D:41:5A:38:4D:20:44:1A:DB:AD:3A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/537EA0842A2211EDA7E15598F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.164.0/24
Signature Algorithm: sha256WithRSAEncryption
29:f7:65:15:b2:0e:56:4e:3b:66:35:0d:b5:cd:ec:2c:60:de:
0b:33:88:ba:25:c5:48:71:43:1b:1c:c0:68:24:51:30:f8:2d:
31:18:a9:2d:bd:8e:c5:d0:c8:e8:94:ea:c6:2e:3c:65:0a:af:
fd:37:54:df:21:4c:e9:60:65:54:dc:9d:03:20:8d:7c:27:7e:
05:ce:dc:cf:84:d7:34:28:aa:cd:bb:bd:b6:d9:46:5b:c8:fa:
a8:3f:a2:0a:b0:84:23:95:4b:82:b4:af:72:1a:d2:8b:c2:39:
ef:47:6a:d5:d8:f7:be:4d:02:ef:bf:25:8c:3e:73:67:2b:87:
23:30:a7:c5:f5:5c:9f:26:16:47:c7:98:21:af:44:4a:2d:ef:
18:f6:de:a7:ad:6a:45:8d:e9:86:22:5e:ce:6a:02:87:6a:d3:
a7:19:16:38:a0:2d:41:4d:99:6a:6a:cb:ff:ac:4c:ee:4e:d5:
2d:1e:3a:42:96:8e:fe:1c:f3:a6:cc:8d:b1:d1:94:04:6a:8f:
7a:29:8f:1c:b5:f0:59:a2:be:ac:08:5c:c4:ab:9e:bb:90:5e:
93:d2:29:f3:d3:de:82:8f:51:e6:5d:22:2a:ef:a4:cd:a6:91:
df:47:7b:c4:0a:c4:2a:50:bd:b6:02:9b:a1:7b:79:63:cb:c5:
ce:af:83:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 10 01:30:50 2023 by rpki-client on console-ams.rpki-client.org