Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/618436F2D4C511EB82462724F8AEA228.roa
File: 618436F2D4C511EB82462724F8AEA228.roa (raw, json)
Hash identifier: +jtL6SDnFvQ+1DNBHZAWgPf+ZucaTEFUd4HQ3t0Cen0=
Subject key identifier: 7E:74:51:DE:FF:B2:41:A2:B2:D9:BF:E8:05:5C:6E:2D:25:E6:D4:58
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 05BD
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/618436F2D4C511EB82462724F8AEA228.roa
Signing time: Thu 24 Jun 2021 08:22:58 +0000
ROA not before: Thu 24 Jun 2021 08:22:53 +0000
ROA not after: Fri 24 Jun 2022 08:22:53 +0000
asID: 3356
IP address blocks: 154.16.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1469 (0x5bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 24 08:22:53 2021 GMT
Not After : Jun 24 08:22:53 2022 GMT
Subject: CN=60d440e1-f749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:bf:21:e3:4b:c9:f5:ac:7f:bf:ea:c4:66:
73:82:49:60:52:de:8c:f5:c2:5d:52:b6:76:d8:56:
79:40:5d:3b:73:02:ed:ab:1d:d1:bc:98:67:35:7d:
af:ca:69:65:f7:17:73:61:ab:e7:10:7c:45:4d:e3:
ba:7a:1f:87:d5:58:bc:62:80:ba:5b:99:7a:cc:b4:
00:ee:85:95:13:b1:a3:bc:4c:50:de:dc:39:c1:9d:
c0:ca:3b:b2:7d:b8:5e:fe:cc:6e:25:76:a1:e3:51:
d1:73:a6:92:e8:f5:12:1e:ea:ae:dd:76:aa:b3:26:
dd:26:66:25:52:fc:65:aa:cf:e7:47:6f:17:b7:f3:
ff:6e:dc:46:06:16:1d:b8:67:f7:27:fe:d9:90:df:
a7:e5:0b:44:c7:3f:ab:25:8c:7a:98:4f:17:be:79:
3f:13:53:da:a3:92:9e:75:d8:80:ee:f5:00:6b:47:
e0:1b:2e:39:2f:1d:c8:ab:0b:a0:08:39:e7:7c:f8:
7b:86:7e:78:04:1f:1b:f1:ca:ef:d1:83:f9:b0:25:
e8:1d:aa:82:fc:a0:71:fd:68:8b:d1:4f:6f:33:29:
4a:76:ea:ee:0b:89:3e:3f:99:66:ca:2c:8a:17:ed:
85:5b:2b:b7:3f:18:82:6f:d6:a9:4f:55:99:c1:5e:
66:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:74:51:DE:FF:B2:41:A2:B2:D9:BF:E8:05:5C:6E:2D:25:E6:D4:58
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/618436F2D4C511EB82462724F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.254.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:ac:ee:03:c8:53:bb:24:d4:08:3e:ca:e5:ff:a3:44:84:07:
c9:bc:35:fb:c4:8c:82:9d:b0:8c:82:35:80:d1:00:56:b9:8c:
cf:a5:26:8d:34:a7:44:7c:be:1a:45:9c:46:32:ed:d2:66:2d:
da:a6:91:d1:af:c5:16:10:07:05:16:53:b6:85:34:6e:f1:73:
9f:ec:ed:77:8d:e0:c4:9a:2b:c4:3f:aa:ef:01:7f:2d:3e:db:
d4:ff:2b:9a:c6:2f:b1:e2:d7:15:98:22:b1:1b:42:38:c6:7b:
a6:22:46:23:7c:66:c1:db:97:51:83:5f:48:02:74:62:50:a0:
bf:ec:a2:0b:96:d4:1b:96:11:65:ab:a0:6a:43:fe:63:1a:ca:
f3:4e:63:96:20:a1:da:f7:be:6d:3a:3a:50:d7:e5:11:7e:89:
85:b0:62:93:e6:2a:e5:91:6f:4f:55:1a:d4:8d:c0:49:de:b5:
3a:ea:e7:fd:33:94:e6:b9:cb:15:78:be:1e:40:2e:a6:a0:31:
27:37:ac:04:54:4d:1f:88:ad:92:05:94:70:78:ed:40:d8:47:
d6:9c:9c:0a:90:a8:06:33:e8:f4:03:88:a0:a4:7e:ab:33:b3:
55:ad:f6:d6:7c:14:3d:4c:dc:e4:7f:6f:18:05:22:3d:1a:9e:
49:85:7e:9c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBb0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMTA2MjQwODIyNTNaFw0yMjA2MjQwODIyNTNaMBgxFjAU
BgNVBAMTDTYwZDQ0MGUxLWY3NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOD78h40vJ9ax/v+rEZnOCSWBS3oz1wl1StnbYVnlAXTtzAu2rHdG8mGc1
fa/KaWX3F3Nhq+cQfEVN47p6H4fVWLxigLpbmXrMtADuhZUTsaO8TFDe3DnBncDK
O7J9uF7+zG4ldqHjUdFzppLo9RIe6q7ddqqzJt0mZiVS/GWqz+dHbxe38/9u3EYG
Fh24Z/cn/tmQ36flC0THP6sljHqYTxe+eT8TU9qjkp512IDu9QBrR+AbLjkvHcir
C6AIOed8+HuGfngEHxvxyu/Rg/mwJegdqoL8oHH9aIvRT28zKUp26u4LiT4/mWbK
LIoX7YVbK7c/GIJv1qlPVZnBXmZBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUfnRR
3v+yQaKy2b/oBVxuLSXm1FgwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzYxODQzNkYyRDRDNTExRUI4MjQ2MjcyNEY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEP4wDQYJKoZIhvcNAQEL
BQADggEBANSs7gPIU7sk1Ag+yuX/o0SEB8m8NfvEjIKdsIyCNYDRAFa5jM+lJo00
p0R8vhpFnEYy7dJmLdqmkdGvxRYQBwUWU7aFNG7xc5/s7XeN4MSaK8Q/qu8Bfy0+
29T/K5rGL7Hi1xWYIrEbQjjGe6YiRiN8ZsHbl1GDX0gCdGJQoL/soguW1BuWEWWr
oGpD/mMayvNOY5Ygodr3vm06OlDX5RF+iYWwYpPmKuWRb09VGtSNwEnetTrq5/0z
lOa5yxV4vh5ALqagMSc3rARUTR+IrZIFlHB47UDYR9acnAqQqAYz6PQDiKCkfqsz
s1Wt9tZ8FD1M3OR/bxgFIj0ankmFfpw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org