Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8BEB985EAB3011EBAEDF7483F8AEA228.roa
File: 8BEB985EAB3011EBAEDF7483F8AEA228.roa (raw, json)
Hash identifier: 6xwpEYqWG/tYSLl/4IN5OWtPJcmL0TXjeQSc3xFDRy8=
Subject key identifier: 73:B4:02:A7:4E:AB:59:85:0F:39:8E:28:2B:F8:80:31:CC:EC:4C:19
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0572
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8BEB985EAB3011EBAEDF7483F8AEA228.roa
Signing time: Sun 02 May 2021 10:24:16 +0000
ROA not before: Sun 02 May 2021 10:24:09 +0000
ROA not after: Mon 02 May 2022 10:24:09 +0000
asID: 1239
IP address blocks: 154.16.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1394 (0x572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 2 10:24:09 2021 GMT
Not After : May 2 10:24:09 2022 GMT
Subject: CN=608e7dd0-e2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e9:80:4b:31:fc:70:47:31:5a:b4:e3:5c:6a:
53:53:fb:2f:3a:71:13:51:2b:f6:b4:88:98:b8:66:
33:f9:d6:d7:58:da:77:5c:8c:39:02:cd:d5:9f:4a:
36:d2:0d:4a:35:84:76:c2:ef:56:a6:39:a7:44:2a:
7a:94:d6:10:bb:ed:f4:ca:62:c5:6c:60:a0:6a:30:
ec:73:33:ec:7a:4d:cd:9f:6b:f4:ed:bf:67:b1:2f:
dd:59:2b:14:d9:21:c2:48:a3:41:19:f3:2e:ec:03:
0d:c0:79:75:dc:47:42:66:d9:1e:f4:d0:f4:91:55:
56:eb:ae:18:4c:74:2e:d9:dc:16:48:20:dd:aa:f8:
67:ce:da:20:ad:fd:73:e5:e8:fe:07:8d:1e:03:21:
98:35:98:b1:c5:8d:5d:06:3a:7b:52:4f:dd:6e:6b:
26:27:34:9a:63:65:fd:3e:1a:72:ed:e7:ac:96:44:
a2:72:90:01:f5:13:02:c0:50:85:db:a6:f8:96:2c:
9e:52:b1:94:83:b5:58:48:ae:12:b2:26:d7:61:a8:
9f:53:68:fa:20:18:ab:ea:eb:a8:a6:88:fe:c2:ec:
29:da:f0:40:09:2c:ff:74:70:b9:80:24:23:0b:46:
2b:d5:35:90:19:05:eb:d0:87:c3:57:4b:aa:65:a7:
e1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B4:02:A7:4E:AB:59:85:0F:39:8E:28:2B:F8:80:31:CC:EC:4C:19
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8BEB985EAB3011EBAEDF7483F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.31.0/24
Signature Algorithm: sha256WithRSAEncryption
76:b1:85:19:da:71:91:9b:b9:9d:6a:94:e1:27:6c:9b:5a:ac:
fe:d5:65:8c:d7:77:1f:ca:7f:84:1a:9a:ce:bd:eb:54:9c:5f:
89:b6:ee:c9:d7:1d:5c:c9:05:8d:a9:ab:38:72:e4:c6:35:39:
fe:89:93:e2:69:65:f1:86:f2:77:bc:df:5f:40:a9:20:a2:e5:
a2:74:9c:b2:27:a1:ad:aa:42:c2:3c:38:3c:1e:1b:4b:d3:86:
95:47:be:df:a5:ed:7f:65:69:96:3d:aa:d5:22:93:7b:a3:43:
4e:84:b5:1b:da:f5:f2:de:8b:f1:b1:ce:0d:ae:3b:05:25:62:
c1:43:8d:b3:69:71:b4:9c:3d:81:a2:19:2b:97:0b:6a:fa:ab:
31:3c:49:06:18:14:72:22:90:55:9c:04:12:b8:2d:34:f4:75:
f5:b6:2f:21:8c:6e:51:01:7f:05:4e:d6:b3:58:42:fe:16:c2:
26:09:79:cc:a2:66:b7:1d:81:38:4f:30:0c:d1:2b:ec:59:1f:
30:88:e9:21:b3:93:8a:69:16:f0:aa:1c:ed:3c:ca:16:d5:c3:
bc:bc:c0:0d:fe:ae:6f:86:9f:c0:52:28:83:20:1b:86:03:21:
d0:33:fc:2a:7c:0a:49:7f:7e:ee:c8:ad:b0:6d:8d:86:41:29:
f1:cc:91:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org