Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7528539E23FE11ED89124988F1222468.roa
File: 7528539E23FE11ED89124988F1222468.roa (raw, json)
Hash identifier: iSVxskQtj/qDJLFFNQCMdB/PM7ZBy/vXzQzwqlnkf2E=
Subject key identifier: B2:CF:E1:BF:3E:96:F6:CE:60:24:B4:40:9A:6C:AE:88:8C:88:27:4D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0955
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7528539E23FE11ED89124988F1222468.roa
Signing time: Wed 24 Aug 2022 22:45:31 +0000
ROA not before: Wed 24 Aug 2022 22:45:28 +0000
ROA not after: Fri 25 Aug 2023 22:45:28 +0000
asID: 212238
IP address blocks: 154.16.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2389 (0x955)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 24 22:45:28 2022 GMT
Not After : Aug 25 22:45:28 2023 GMT
Subject: CN=6306aa0b-dc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:90:ad:97:ba:01:a5:d7:11:30:7d:b5:10:
f0:9b:da:f3:79:19:5d:2b:6e:19:b8:45:5d:f9:43:
99:18:db:cb:df:7d:cc:f8:b7:29:67:ed:37:2f:b5:
9e:2b:07:40:d5:e3:1d:18:77:5d:f2:8d:12:a4:45:
1a:49:9f:b6:b7:6a:8a:9c:5b:79:35:a1:d9:d8:d7:
1a:7f:01:83:59:ff:d4:89:b0:a7:58:1f:ce:f1:79:
d1:15:b8:0c:99:b7:10:a1:fb:f0:1c:f0:b3:cc:26:
8e:14:b5:91:99:9e:79:38:2e:9b:c0:ff:e7:58:9f:
ec:5a:76:54:2c:8b:29:dd:80:94:ad:e8:88:fa:81:
46:75:d8:f4:87:96:b7:17:56:aa:5c:3f:52:dc:6e:
a9:a5:5f:30:6d:d5:aa:42:a3:d1:6b:23:76:3f:ea:
23:49:41:20:56:15:72:e8:cb:12:b5:54:b3:57:1c:
db:8e:2f:8e:3b:77:4a:20:8b:79:0e:cb:21:65:ee:
24:a3:b7:5c:44:04:bc:ee:2c:5b:e0:54:72:2a:47:
15:e2:f4:a2:b9:fa:8f:e7:c0:65:e6:e3:13:a8:02:
0c:4f:2e:c5:99:81:8d:aa:3d:00:ed:6a:b0:f1:a1:
cd:9f:a7:66:f8:37:b4:a3:51:6e:7e:65:eb:c1:36:
5c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CF:E1:BF:3E:96:F6:CE:60:24:B4:40:9A:6C:AE:88:8C:88:27:4D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7528539E23FE11ED89124988F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.131.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:9f:fa:4b:96:4b:b6:54:bf:b7:0e:d8:cc:5f:54:67:2b:eb:
a7:2f:9e:9f:c5:42:8a:dc:79:12:2b:f3:e9:1e:6b:a2:fe:4d:
0b:1e:af:22:8e:1b:b5:c0:e9:65:30:4b:6d:07:50:ca:6f:94:
73:70:09:9d:c7:28:09:92:b6:ab:fc:33:94:c3:d3:3e:27:28:
9c:b4:37:e6:f5:e3:66:8a:9e:dd:88:df:58:13:b7:b4:ae:ac:
7d:f5:0f:01:2e:29:8d:be:4f:d2:02:0a:6b:f4:f5:dd:48:2a:
a1:3d:b3:ba:ff:1a:62:ea:60:56:6e:73:80:d9:81:1a:5a:25:
c3:47:d3:5e:a1:5c:60:7f:75:a7:d3:b0:b6:27:d6:bc:0d:1b:
7d:f8:5f:80:d0:f1:90:74:ee:28:0e:7c:30:65:68:72:26:85:
e1:d9:e3:82:f9:33:af:a0:61:6c:b5:c9:01:4d:f9:b1:21:7d:
0b:83:92:ad:7f:de:18:55:65:25:40:88:03:33:8b:31:9e:bc:
66:98:66:82:4e:69:01:45:61:aa:f7:68:cb:05:0f:f3:16:04:
6e:8a:50:01:99:3b:b0:4d:25:57:91:4f:d4:45:75:2c:35:83:
54:6d:2b:32:d8:5b:72:1f:1a:76:db:1e:da:27:25:e0:be:31:
6e:b9:ea:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 26 01:13:23 2023 by rpki-client on console-fra.rpki-client.org