Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/885D4B387F6511ECA3E736835A40D577.roa
File: 885D4B387F6511ECA3E736835A40D577.roa (raw, json)
Hash identifier: 7dErZ63IU97N5sKjRRiLWZOy07gOL9G5wrOZbnh6zTc=
Subject key identifier: C8:3D:FC:32:CA:68:0F:73:AF:A0:13:B9:FB:77:7C:44:1B:65:5C:CA
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 079A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/885D4B387F6511ECA3E736835A40D577.roa
Signing time: Thu 27 Jan 2022 11:37:40 +0000
ROA not before: Thu 27 Jan 2022 11:37:35 +0000
ROA not after: Fri 27 Jan 2023 11:37:35 +0000
asID: 212238
IP address blocks: 154.16.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946 (0x79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 27 11:37:35 2022 GMT
Not After : Jan 27 11:37:35 2023 GMT
Subject: CN=61f28404-e792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:af:4a:9b:89:cb:18:1d:00:d2:bd:b6:51:
2a:87:01:e8:7e:1e:55:89:fd:75:80:46:94:13:a1:
26:a3:e9:dc:82:dd:20:5c:e4:4a:c9:cd:60:0a:ef:
01:e0:6a:fe:94:25:18:e4:00:bf:62:f9:b2:9d:1c:
7a:b7:92:18:80:4b:10:73:41:25:9b:cf:56:06:15:
d7:be:51:cb:1c:73:ba:eb:e3:e3:1a:1c:75:2e:f2:
7c:6a:d9:ed:fa:91:96:04:8d:f7:cf:cd:5f:a7:69:
39:1d:63:f3:3e:7b:b9:3f:7b:97:3f:bf:c9:73:5a:
36:dc:b1:05:e5:f8:e0:8c:58:9d:79:42:93:a1:94:
19:4a:24:92:00:9b:94:f2:ee:b2:45:cd:ec:a1:ec:
24:85:80:19:c0:89:f3:23:1a:0a:33:ad:1d:1a:ac:
2c:5e:e2:45:be:9b:f3:b2:cf:1f:ca:48:9f:fd:71:
7c:f2:ae:33:98:f8:02:31:65:3c:7e:62:b4:c1:d7:
4e:66:71:2c:82:87:4a:eb:5d:c0:2b:06:30:42:dd:
15:3b:b5:dc:57:e0:1a:2e:60:b1:c6:3a:a0:c4:6b:
22:5e:f8:ac:0e:ae:6a:8c:ce:f9:8d:a7:6d:c0:90:
6a:ac:a3:3d:95:59:94:f8:de:cf:28:38:b5:ea:b7:
84:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3D:FC:32:CA:68:0F:73:AF:A0:13:B9:FB:77:7C:44:1B:65:5C:CA
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/885D4B387F6511ECA3E736835A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.163.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:01:d2:0f:a6:79:8d:9a:ca:e9:53:88:49:9c:ad:f0:ba:6e:
00:d1:ac:07:c4:69:88:14:4b:bb:9e:84:9d:af:13:c3:fb:85:
bb:f4:8d:86:c2:74:82:c3:0e:ad:a1:7b:a0:fa:e6:d5:45:9a:
af:af:70:44:f6:04:23:72:73:c4:b0:fd:79:16:6f:c2:70:31:
88:47:ff:a7:52:4b:52:63:4d:35:79:10:bc:50:f2:97:40:03:
d9:55:7e:52:a2:85:bd:b3:c3:fc:79:25:df:9f:31:7b:aa:52:
50:44:39:ff:df:18:56:89:46:27:84:4b:86:8d:84:c3:c3:de:
9b:80:cb:ca:8b:03:d0:82:cd:5b:f1:96:6e:4f:49:a0:2d:da:
1a:9f:59:12:26:4f:96:7e:7f:8a:45:15:ee:79:36:15:38:49:
58:ae:dd:02:72:48:0a:f8:d6:7e:18:d5:38:8d:10:c5:2d:f7:
93:9c:05:07:60:57:64:d3:7f:c0:39:a5:e9:58:50:09:dc:7a:
30:2c:cd:9f:df:2f:7a:ab:24:a3:5d:d3:4b:8e:4b:ea:c6:c0:
e6:8f:e1:44:9f:d6:0a:56:4c:03:f8:95:28:12:3d:ee:e5:7d:
fb:44:36:a3:68:e9:43:96:0c:17:a4:ac:e3:2e:a8:b0:ef:82:
f4:25:68:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org