Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/76EA8226493311EB80311158F8AEA228.roa
File: 76EA8226493311EB80311158F8AEA228.roa (raw, json)
Hash identifier: rYp0/Axu0zkvadZm0RGYMVciWiKpQ4dRvpdu5loSLss=
Subject key identifier: 47:36:90:5D:D9:4E:BE:CA:AC:7B:C7:15:87:F7:94:0C:37:D5:5F:D7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0464
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/76EA8226493311EB80311158F8AEA228.roa
Signing time: Mon 28 Dec 2020 17:38:16 +0000
ROA not before: Mon 28 Dec 2020 17:38:09 +0000
ROA not after: Wed 28 Dec 2022 17:38:09 +0000
asID: 212238
IP address blocks: 154.16.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1124 (0x464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 28 17:38:09 2020 GMT
Not After : Dec 28 17:38:09 2022 GMT
Subject: CN=5fea1807-b7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7e:55:db:ac:6f:16:c3:a0:55:7a:e1:4f:30:
82:5a:b6:be:4a:ef:c1:0f:05:43:0f:bf:ff:ae:e2:
e6:16:c3:5d:59:63:c7:58:8c:bb:5f:8d:7a:af:0f:
00:3e:06:fe:2f:69:79:ee:56:b3:14:da:de:56:5c:
b3:6a:5a:2e:28:c2:b3:b7:4a:0f:c7:0d:aa:be:3a:
ac:8a:54:55:bb:1e:2a:14:60:d7:4e:55:b0:74:cc:
2b:d3:13:7f:7f:be:da:33:eb:a7:f3:3f:0e:2b:8f:
92:06:b1:a3:e4:94:07:49:19:f4:f2:9d:2b:60:9e:
51:dd:1a:fe:52:1b:18:92:c7:6c:37:b4:00:79:e3:
2e:95:d1:52:14:d8:8a:c0:bf:3c:6f:49:32:3b:a4:
e3:5f:37:70:aa:c7:23:21:2d:26:ed:77:c7:e6:1e:
fd:87:0b:be:43:53:46:c5:ce:02:17:f3:93:90:d0:
dc:31:b9:3c:fa:20:f7:a7:b9:93:5d:45:5a:b8:0d:
36:19:d2:28:3b:03:0a:e0:db:da:08:68:93:09:fe:
f4:f2:b0:10:ac:ba:aa:4b:dc:7a:7f:5e:b9:11:e7:
fb:f9:53:e4:f7:f6:11:f6:08:f5:de:a7:0d:21:a4:
2c:91:63:f1:c7:07:c5:20:4b:15:81:22:1d:42:39:
0e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:36:90:5D:D9:4E:BE:CA:AC:7B:C7:15:87:F7:94:0C:37:D5:5F:D7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/76EA8226493311EB80311158F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.174.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:3e:7e:9a:80:9e:41:36:0b:c4:a3:56:d5:b9:08:d0:3c:36:
a0:a0:35:8b:f7:aa:8c:ee:3a:e2:a7:26:4e:78:c3:68:21:94:
70:ff:04:ce:f7:38:d7:3d:08:eb:b0:5e:f5:24:4b:f3:0d:a4:
dd:5d:e1:02:5c:09:b0:23:6c:61:77:72:60:27:f4:f1:05:dc:
0d:15:28:fa:d4:09:69:69:cb:91:f9:50:c9:ba:c1:82:5f:7e:
16:f5:e5:06:75:a8:d9:75:57:d6:04:d5:f8:b4:ed:11:4e:e6:
01:91:c9:1d:85:7d:2b:d8:44:c2:90:ff:89:54:5c:80:8a:55:
2c:b4:61:dd:50:48:cf:9a:0a:6a:9d:82:71:d6:a5:62:a0:5f:
56:1d:be:2b:21:14:89:a2:46:fe:8c:b6:06:92:54:dc:02:ca:
58:bd:32:96:43:aa:14:5b:0f:88:bb:b1:65:e1:c7:20:c4:dd:
d7:e1:1f:b5:7d:cb:2b:ff:58:27:12:3e:a8:f1:86:72:39:d1:
b1:ca:ac:ea:20:bb:f8:0b:32:be:fb:db:3d:b3:ec:7b:b6:4f:
0a:5a:16:8d:08:de:fd:1a:8c:75:56:af:31:2f:cc:4e:42:0a:
a2:4e:1e:a5:f8:6b:5f:3a:41:b7:e3:d2:ce:fc:28:c1:15:fe:
d5:17:7f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org