Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8C7A8A486D7011ECB66161E25A40D577.roa
File: 8C7A8A486D7011ECB66161E25A40D577.roa (raw, json)
Hash identifier: eBPekvQsAVmcO6z4whkqsjFpPSwL2dxdvM9E4HN+wTA=
Subject key identifier: CD:0B:99:C4:71:49:5F:57:59:99:D5:BC:41:00:1F:43:C8:0E:74:3E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0762
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8C7A8A486D7011ECB66161E25A40D577.roa
Signing time: Tue 04 Jan 2022 15:11:10 +0000
ROA not before: Tue 04 Jan 2022 15:11:05 +0000
ROA not after: Wed 04 Jan 2023 15:11:05 +0000
asID: 23470
IP address blocks: 154.16.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1890 (0x762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 4 15:11:05 2022 GMT
Not After : Jan 4 15:11:05 2023 GMT
Subject: CN=61d4638e-69a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:82:77:03:9c:05:52:67:97:72:77:5c:56:5a:
86:36:a5:1e:e9:7c:c4:21:db:28:0b:07:09:14:c0:
67:74:cc:e1:df:f9:68:f0:23:c0:9f:49:06:fa:ae:
e2:7b:d2:3c:a5:f1:ec:1c:d7:13:b0:35:50:1c:1d:
d8:cd:b4:d1:1e:2b:20:65:34:5d:fc:ac:15:db:7a:
3e:a6:29:d5:25:57:64:ec:f1:84:f5:77:eb:2d:a6:
30:e1:a9:a9:e1:5d:54:63:b7:84:12:76:d3:60:1b:
27:3d:be:78:d5:f1:ec:f4:bb:ed:e8:88:82:82:a0:
b0:ef:c3:f1:00:7b:30:ed:c3:dd:ec:64:91:ee:85:
79:0f:f7:a9:f5:35:9d:77:12:29:0a:76:2f:67:f8:
82:7f:c1:42:45:8a:31:a5:2e:20:dc:45:34:18:e0:
1c:6a:a7:77:0c:7e:68:cd:f1:45:b5:15:fe:1d:c0:
a2:43:0e:b3:a0:44:dd:13:93:59:e5:91:9b:f7:95:
92:6d:11:87:c7:eb:76:19:e8:59:91:55:84:e1:34:
60:03:c5:72:a3:e3:e0:8f:d1:3e:67:06:3d:73:7c:
62:57:64:dd:12:08:95:57:48:74:3e:d7:cc:24:9b:
ae:3d:71:3f:b9:a5:75:d3:c0:15:14:46:b4:ba:79:
af:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0B:99:C4:71:49:5F:57:59:99:D5:BC:41:00:1F:43:C8:0E:74:3E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8C7A8A486D7011ECB66161E25A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.51.0/24
Signature Algorithm: sha256WithRSAEncryption
18:d0:0b:65:c4:7f:66:35:b5:e7:85:d1:da:94:1d:ed:ff:c1:
6e:d9:98:d5:ea:d8:cc:b9:77:be:9b:97:f7:75:30:23:4a:33:
a7:0c:c4:22:70:c7:40:b8:9f:21:25:33:90:61:d6:60:e2:11:
0b:8a:3f:86:84:ec:e5:b3:80:e6:7a:46:5c:9b:6e:44:24:a1:
c2:3c:ec:48:27:bd:46:0e:1f:ea:92:f6:37:e8:1d:82:4b:bc:
2b:3d:78:1d:dd:1a:34:db:7a:ec:e5:9b:57:e6:56:6a:fd:b8:
00:b2:88:5c:f7:77:85:e5:de:82:06:44:13:df:4b:bb:5c:f5:
44:5b:a9:5b:02:22:f6:0a:7d:6e:26:ee:5b:af:43:32:d5:d6:
cf:59:86:9e:fe:5d:b7:81:a4:73:ca:c8:b2:46:1c:db:80:fe:
fc:a6:c0:2a:41:11:29:93:ab:c8:33:4b:e7:a6:e8:5f:35:ec:
31:f7:98:60:1c:05:6c:8e:ae:66:9f:43:05:7d:79:27:4d:b1:
69:70:94:fe:49:b7:44:fe:da:df:1a:74:92:ed:47:f3:9e:a6:
05:55:c9:60:db:ea:89:6a:fb:8a:4b:a4:ae:81:c9:50:9e:a0:
93:57:c5:16:19:b4:cc:27:28:f3:83:50:09:d5:dc:c1:03:89:
c9:ff:9f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org