Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/641E0C6473EC11ECA2A2A5E25A40D577.roa
File: 641E0C6473EC11ECA2A2A5E25A40D577.roa (raw, json)
Hash identifier: ruIOngsQXnzThzIrMYjxZ1ShalxT02RweukB/yclTbY=
Subject key identifier: F2:79:59:4C:12:9F:0A:2D:F6:E5:53:2E:5D:30:BD:F6:89:C8:FC:DB
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0777
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/641E0C6473EC11ECA2A2A5E25A40D577.roa
Signing time: Wed 12 Jan 2022 21:12:47 +0000
ROA not before: Wed 12 Jan 2022 21:12:42 +0000
ROA not after: Thu 12 Jan 2023 21:12:42 +0000
asID: 54252
IP address blocks: 154.16.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1911 (0x777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 12 21:12:42 2022 GMT
Not After : Jan 12 21:12:42 2023 GMT
Subject: CN=61df444f-eea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:11:63:9a:aa:93:f9:1b:64:56:bf:d8:17:
c5:82:c7:23:dd:a9:59:81:75:07:de:18:5d:04:55:
87:44:5d:28:56:a5:64:7b:03:3e:18:4c:62:36:57:
25:71:5e:3b:dc:77:44:c0:f7:75:ea:6c:03:0e:05:
44:b0:28:9b:27:50:35:fd:41:54:2e:fc:df:bc:fb:
de:52:10:07:bb:be:17:1c:68:bf:3b:7e:51:76:77:
1b:64:e1:64:ff:70:07:f3:a3:44:1c:3d:8a:31:23:
0b:fc:2b:ad:1d:da:95:19:10:10:cc:ff:cf:e5:06:
3a:7a:b0:2e:f8:8c:8e:92:f2:f3:33:23:8e:41:57:
39:46:45:34:a5:03:19:8b:37:45:35:96:41:65:e2:
c3:db:19:75:95:44:7b:26:c3:c8:5f:49:88:c6:07:
0b:ba:b3:99:c8:4b:b9:2b:2a:e6:18:0c:91:fd:5d:
ac:0e:eb:b3:29:ef:b2:a1:38:41:5c:f6:f9:30:45:
bc:e9:cc:51:df:7f:87:f0:dc:39:09:58:c6:84:05:
23:eb:26:7f:25:5a:cb:64:d9:71:6c:b2:25:7b:94:
6d:67:3c:af:ce:5f:b6:bd:03:36:7e:64:ea:03:e9:
8f:a8:24:17:73:d8:29:dc:dd:5a:9e:2e:d1:06:db:
ee:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:79:59:4C:12:9F:0A:2D:F6:E5:53:2E:5D:30:BD:F6:89:C8:FC:DB
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/641E0C6473EC11ECA2A2A5E25A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.233.0/24
Signature Algorithm: sha256WithRSAEncryption
86:30:69:0c:61:37:d3:c6:79:26:5a:cf:04:04:e8:89:af:fb:
11:a1:e7:1a:62:4a:f4:bc:59:22:0a:7c:56:fc:26:1f:44:40:
19:72:c5:a9:c8:e9:82:69:cb:c0:ce:8d:43:44:be:ee:b5:84:
d4:a8:31:8d:90:7a:fa:59:a8:83:6d:46:2a:1e:e7:82:02:1c:
53:c3:3c:8d:9b:06:32:6f:28:db:12:28:a2:dd:3c:c7:7e:8b:
9e:52:4d:99:05:f1:89:d8:25:1a:2c:62:6b:5e:13:af:75:1c:
37:16:60:9f:f1:2b:be:6d:c2:1d:e1:52:05:4b:fc:ec:2e:ca:
c3:39:6d:af:be:65:8e:06:45:ee:03:f3:df:1c:39:ec:6e:ea:
55:fc:e2:c1:6e:42:09:ff:49:a4:ab:32:c5:f9:65:4d:04:96:
92:dd:4e:92:87:a8:26:27:d0:05:03:6c:ff:b6:35:fe:cf:33:
9d:a0:0b:c6:9f:0e:26:64:06:b8:67:18:f8:88:48:be:67:4a:
34:69:af:43:7b:e2:1e:98:06:36:0e:46:75:60:7e:60:8e:1d:
70:db:48:03:e3:24:28:86:80:ca:16:4f:47:55:96:8e:ce:77:
94:ce:8c:06:7e:26:f5:99:ba:4d:b0:7f:ea:d9:3d:76:5b:3a:
6c:08:79:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org