Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/84FC59405E9D11EC86509AD45A40D577.roa
File: 84FC59405E9D11EC86509AD45A40D577.roa (raw, json)
Hash identifier: uZBwmTSZKZBHWMP5EO63tUQs5WqrnOWx0IAIqBBgaxo=
Subject key identifier: 6B:AF:24:EE:4D:1F:1D:33:F4:8D:91:4E:51:B8:07:76:E6:52:61:1D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0737
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/84FC59405E9D11EC86509AD45A40D577.roa
Signing time: Thu 16 Dec 2021 18:25:18 +0000
ROA not before: Thu 16 Dec 2021 18:25:13 +0000
ROA not after: Fri 16 Dec 2022 18:25:13 +0000
asID: 207326
IP address blocks: 154.16.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1847 (0x737)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Dec 16 18:25:13 2021 GMT
Not After : Dec 16 18:25:13 2022 GMT
Subject: CN=61bb848e-0b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:83:43:7b:ad:20:c8:ec:4b:34:4d:f1:7e:
76:d1:65:bb:30:0c:fd:eb:cc:e0:1e:60:02:7d:3f:
68:b6:62:5d:ab:1f:b8:da:7c:8c:27:61:34:bf:4b:
79:05:d6:17:ca:bc:d1:17:02:86:47:06:f9:14:5d:
16:ce:22:65:b3:b0:4f:4b:84:5d:bb:cc:5a:09:bd:
ab:21:32:41:8c:a2:f3:18:a6:d0:6c:65:60:e4:a4:
2b:8c:a0:1a:8a:fb:24:b3:9a:a5:86:d2:1f:fe:04:
c3:16:e1:4a:3b:7e:61:6c:3f:66:d3:b0:f2:5b:b4:
10:34:37:e0:7a:ea:dc:e6:9f:fd:02:87:f3:03:83:
46:89:d6:c9:bf:07:64:f2:d5:1d:71:59:63:56:54:
e1:c3:ee:33:23:10:c0:4d:65:43:2f:3f:41:df:8d:
d2:be:f3:77:73:14:a8:c1:39:01:65:ca:4f:dc:9a:
db:9b:c9:11:1d:72:a6:46:9a:50:96:2e:79:a7:20:
e1:99:c5:ee:70:1c:d3:5c:43:4e:d7:34:c8:35:0b:
53:3c:05:d3:17:6e:a3:56:cc:32:68:20:74:d8:9c:
53:b5:5a:4e:c5:7a:94:f5:61:a4:36:7b:15:b7:29:
b1:1a:27:6e:31:23:56:a3:29:cd:de:42:31:ff:7d:
f2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AF:24:EE:4D:1F:1D:33:F4:8D:91:4E:51:B8:07:76:E6:52:61:1D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/84FC59405E9D11EC86509AD45A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.190.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:0e:ba:86:28:3c:fe:f2:86:0b:e8:01:ea:ab:cd:6a:76:c2:
f7:8e:e8:98:8f:18:18:a8:30:9c:6e:d4:b4:ab:9e:cb:80:83:
3e:54:0b:cc:42:45:89:c5:02:d4:78:76:64:90:79:d6:38:cc:
07:e9:54:68:c4:d2:03:87:41:17:75:97:3a:a0:52:33:17:e1:
c7:3e:c8:92:0c:de:30:94:4d:0b:7c:27:02:aa:27:cb:b7:4c:
d9:f7:b4:c8:f7:4d:97:7c:b9:f7:e1:ec:de:5f:52:ac:ab:5a:
89:00:91:a8:82:7f:1e:a6:d3:73:1e:13:57:fa:92:07:e2:71:
2a:0a:87:08:43:b9:e2:8b:8b:19:2f:f5:41:0d:93:75:a8:1b:
5f:20:00:5d:a0:30:e5:ac:95:21:0a:74:11:09:4f:1f:a2:6a:
6b:9d:7a:4d:47:66:7a:2d:18:9d:70:bd:60:73:3a:d5:79:b2:
8f:de:9d:22:e6:38:75:4d:7d:21:cf:66:c8:d9:e8:25:43:b2:
a4:20:ec:dc:a6:87:ca:c2:13:4a:d1:5e:50:8e:83:aa:db:8d:
4b:3f:d4:ba:fc:54:4a:6d:d4:06:62:54:7c:6c:42:70:0c:d6:
90:94:d2:76:a8:df:33:eb:f4:f3:33:e9:ea:5c:11:5c:3f:23:
a5:84:26:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 15:01:10 2025 by rpki-client