Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8AA530A48C8B11EB9B2E397AF8AEA228.roa
File: 8AA530A48C8B11EB9B2E397AF8AEA228.roa (raw, json)
Hash identifier: SV0zbyRW4v/iRN8EtQU0PMm7fZmsQ7BH49rIuQlhV5o=
Subject key identifier: BD:2F:B4:8B:DE:CC:EF:F6:CE:27:80:79:0E:36:D7:64:EE:51:2A:4C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 04EF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8AA530A48C8B11EB9B2E397AF8AEA228.roa
Signing time: Wed 24 Mar 2021 10:27:32 +0000
ROA not before: Wed 24 Mar 2021 10:27:28 +0000
ROA not after: Thu 24 Mar 2022 10:27:28 +0000
asID: 3356
IP address blocks: 154.16.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1263 (0x4ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 24 10:27:28 2021 GMT
Not After : Mar 24 10:27:28 2022 GMT
Subject: CN=605b1414-695e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:44:68:6b:2c:f6:80:94:e3:d2:98:03:b5:fc:
ca:75:e8:0d:ba:ec:bb:64:7c:a0:0b:19:40:04:90:
49:46:b6:1e:05:33:10:13:1f:83:09:33:99:f7:56:
31:39:15:ad:74:9c:64:e5:fc:d8:0c:f2:73:bd:2b:
6b:fd:2c:f4:f7:97:75:de:0d:ba:38:42:0a:89:58:
c2:33:a0:2b:08:75:69:a9:5d:71:78:f8:4b:68:d3:
f2:4c:a3:b2:39:1c:4c:c1:ce:66:30:6d:1e:77:2a:
9b:51:bc:38:14:9b:9a:22:f9:b1:da:1f:b8:81:2f:
67:55:13:df:cd:da:8d:fe:e5:86:1f:7f:ad:f5:11:
19:3b:63:88:17:11:9c:44:c3:19:ca:0b:2f:35:fe:
45:52:d0:01:00:29:ff:9f:68:c4:20:a6:9e:74:1b:
c1:64:4e:17:45:0b:aa:18:7d:3d:93:c2:a3:0b:18:
64:13:7e:fb:61:a9:e4:f7:2d:ac:52:62:0e:95:2a:
57:af:88:b6:02:3b:33:2c:77:27:5e:6a:ab:b5:36:
91:3c:f9:bd:14:6c:0a:0b:0a:6e:b4:b4:e8:f5:1e:
7b:b1:66:ce:47:f1:5d:a3:4b:64:a2:2a:1a:3e:af:
07:98:cf:a8:3b:cc:bc:9a:14:f4:ff:29:55:54:73:
90:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2F:B4:8B:DE:CC:EF:F6:CE:27:80:79:0E:36:D7:64:EE:51:2A:4C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8AA530A48C8B11EB9B2E397AF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.77.0/24
Signature Algorithm: sha256WithRSAEncryption
93:1b:06:6c:a9:10:5a:76:73:5c:7d:9f:22:0f:8a:c2:f0:1e:
d4:7b:d4:22:68:7d:e1:96:3f:7a:d6:89:5d:b5:1f:b2:26:91:
9a:82:c7:26:8e:2e:94:92:0e:d7:23:6d:e4:88:15:21:96:c3:
7e:1a:fe:ab:89:d6:b2:97:e3:ff:7f:d7:a0:ab:c9:87:b0:0c:
f5:95:24:eb:30:04:01:ed:bb:0a:dd:29:35:c7:21:a3:00:6a:
1f:53:5a:ce:45:8f:52:b5:ee:fa:c2:97:ab:be:e4:5c:be:27:
b2:82:68:e5:0e:1c:41:ca:d0:03:37:fb:45:e3:d2:8c:67:6c:
3b:cd:b1:aa:d6:76:1e:7b:91:2d:62:cd:19:e9:fa:fc:41:02:
84:c3:67:bf:6b:69:01:e0:c8:4f:db:88:46:b8:09:7a:0f:ba:
eb:3a:b1:a6:f6:cc:85:4a:60:3c:b6:73:d9:53:4d:af:ac:b8:
ae:e5:1a:85:2b:b4:83:7c:ca:6a:75:28:3f:50:4b:8d:01:db:
94:e0:b6:4e:48:05:61:0c:b2:e8:df:d2:bf:fa:ae:6d:d9:88:
bd:90:22:f3:90:c5:9a:02:04:f0:6b:5d:2d:df:0b:d7:f6:47:
85:97:d4:ba:f6:39:d6:ea:20:ee:65:06:28:b5:1f:89:b4:ce:
0e:00:d7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org