Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/731BEBD87ABD11EB8F1BD827F8AEA228.roa
File: 731BEBD87ABD11EB8F1BD827F8AEA228.roa (raw, json)
Hash identifier: pScZBFUgfKUqcyEjE7tVITWt8eJyxIdYT/2XIRRr3Zg=
Subject key identifier: 57:F1:36:60:7B:48:5A:F5:CD:7C:00:CA:A8:22:55:90:08:05:B6:2D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 04C8
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/731BEBD87ABD11EB8F1BD827F8AEA228.roa
Signing time: Mon 01 Mar 2021 18:39:27 +0000
ROA not before: Mon 01 Mar 2021 18:39:20 +0000
ROA not after: Tue 01 Mar 2022 18:39:20 +0000
asID: 397423
IP address blocks: 154.16.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1224 (0x4c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 1 18:39:20 2021 GMT
Not After : Mar 1 18:39:20 2022 GMT
Subject: CN=603d34df-1ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d7:bf:81:68:62:52:b7:8c:89:21:a2:cc:5f:
34:9c:23:a5:5c:38:c9:ae:44:a6:3b:09:95:f4:be:
7a:72:83:37:d8:38:2f:f4:07:cb:4f:53:cb:a7:0d:
06:24:cf:f0:bf:f9:4e:3a:48:87:2e:c0:13:dd:5f:
d0:fe:47:94:24:1a:49:ce:8d:00:f5:04:32:a9:9b:
6e:86:e6:f3:b8:04:85:b2:37:4f:4c:c4:f9:a2:41:
d2:78:2e:58:d7:81:38:61:6f:e2:91:87:3c:95:74:
ba:ec:f6:9d:e0:95:d2:eb:35:1b:ef:67:96:2f:25:
ce:15:e9:ab:90:bf:5a:ac:bf:85:e2:5a:3e:78:5d:
97:13:b1:40:b9:b4:de:f9:61:5c:b8:09:e7:df:cf:
1b:6a:1a:c5:2c:28:fc:0e:52:aa:b1:ec:d5:d8:59:
49:85:24:3f:95:96:b9:2a:8b:ad:98:7c:19:98:60:
68:da:bb:24:98:d9:f3:4a:09:84:46:a5:a1:a2:73:
81:54:16:e6:87:f4:24:a7:8d:26:90:52:dd:70:00:
0d:a4:af:bc:41:65:60:27:1c:be:3f:e2:49:cb:f7:
7f:ac:d2:11:17:73:d3:95:cf:70:3a:10:55:0c:32:
48:39:57:c2:74:7f:00:0a:76:87:03:6a:c0:65:bf:
79:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F1:36:60:7B:48:5A:F5:CD:7C:00:CA:A8:22:55:90:08:05:B6:2D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/731BEBD87ABD11EB8F1BD827F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.137.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:8e:00:9c:06:99:19:ff:71:b2:cd:78:25:05:6e:1c:cd:ce:
46:ba:54:42:18:0f:81:7f:8d:36:b4:62:34:a9:12:e1:74:02:
bd:21:22:28:e7:50:b4:9a:3b:90:95:67:23:8c:6a:41:8e:12:
f6:17:05:c2:e2:22:90:e8:3e:5b:39:42:4c:08:9a:5b:9d:32:
04:fe:8f:f3:cb:d6:55:de:b4:d4:5d:25:8c:18:5d:71:ce:f3:
f3:21:43:72:3f:d7:65:6d:06:9a:ea:0a:15:73:10:fb:c7:ed:
3e:4c:b7:19:38:3f:3f:67:64:1c:52:6b:e4:e7:a4:c2:7c:11:
56:f5:0c:05:d3:45:78:cf:83:f6:89:c2:39:d1:1a:28:c2:b9:
22:8e:ba:c2:67:68:37:23:b4:0f:fa:1d:2c:ad:6a:e8:c2:8b:
83:5e:32:5e:7f:27:a6:77:7a:38:16:07:47:ce:db:42:95:70:
aa:cf:5b:a4:4d:4a:c6:83:a7:b0:b1:93:b2:ce:03:d0:dc:eb:
44:2d:a9:25:12:5f:9c:40:ba:f9:97:b8:6c:7f:1c:95:17:71:
86:60:dd:a0:20:c5:58:17:46:e5:47:7f:ee:05:51:0d:12:79:
af:94:1f:f9:0c:aa:9f:74:02:cc:84:55:46:f4:ae:c6:b5:8d:
d4:38:e4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org