Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8FFA2A0423FD11EDA5978D85F1222468.roa
File: 8FFA2A0423FD11EDA5978D85F1222468.roa (raw, json)
Hash identifier: fKkiYVXQQ2AFkPIdkXpYfQ+XwBxjs6Y4QEoHOrC9CfI=
Subject key identifier: E0:81:35:D2:45:BB:3B:14:6D:27:12:7D:EC:61:F6:93:7C:12:20:42
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0951
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8FFA2A0423FD11EDA5978D85F1222468.roa
Signing time: Wed 24 Aug 2022 22:39:07 +0000
ROA not before: Wed 24 Aug 2022 22:39:01 +0000
ROA not after: Fri 25 Aug 2023 22:39:01 +0000
asID: 212238
IP address blocks: 154.16.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2385 (0x951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 24 22:39:01 2022 GMT
Not After : Aug 25 22:39:01 2023 GMT
Subject: CN=6306a88b-cfb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:83:d4:1a:a6:df:0d:7a:12:dd:b7:47:0c:c7:
25:bb:30:49:ee:1d:25:ad:30:47:c2:4a:79:08:ae:
bd:42:fd:4b:7e:a3:dc:20:bc:ec:22:1a:5f:51:db:
a6:2d:04:57:19:c0:8c:20:dc:77:ab:e5:4a:ef:0e:
6b:6e:79:00:68:8f:ce:84:35:31:ec:18:ec:c4:62:
85:73:9f:e4:b4:50:b6:dc:cb:8c:51:49:d5:11:42:
0a:19:4b:86:44:74:05:2e:12:93:66:c3:0f:53:f7:
80:ef:92:37:34:1d:13:9d:df:c3:59:34:85:3e:e0:
8d:23:96:82:36:c8:9d:5c:6d:89:02:c0:3d:be:7d:
53:ba:da:b7:83:78:60:eb:5c:79:4a:fd:bc:6b:f3:
af:7a:89:68:87:1d:fe:0e:2a:73:b3:ee:c1:1a:ff:
92:8e:a8:ae:67:2d:77:8c:e2:13:8b:79:22:9d:60:
d6:d8:21:87:6f:4d:81:a0:6c:51:2c:2e:4e:4a:69:
0f:3f:57:3f:82:b9:5a:49:be:ed:ce:ed:a4:6b:92:
05:3a:27:4f:c7:02:d2:36:5e:2b:62:2e:2a:2e:5b:
fd:cf:00:2b:6d:e2:30:7c:19:0a:b6:13:4a:66:6f:
e0:20:9b:a8:0d:48:4f:79:cd:54:0c:db:89:d4:95:
d0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:81:35:D2:45:BB:3B:14:6D:27:12:7D:EC:61:F6:93:7C:12:20:42
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8FFA2A0423FD11EDA5978D85F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.182.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:c1:1a:f4:a8:dc:c6:89:cf:ef:f4:90:4b:86:2c:35:ac:65:
20:51:9e:3d:d7:50:42:4e:4d:f3:5a:14:32:d0:4f:5d:a2:a0:
eb:d7:8c:21:8c:5e:19:76:6b:25:17:19:64:97:48:a9:8a:ba:
5d:21:f1:3f:68:5a:12:9f:02:62:6d:a3:14:34:46:11:bf:4c:
36:2b:4e:59:a1:3b:10:f3:4f:41:1c:d1:35:74:ed:09:ab:4b:
d6:ee:19:35:0f:f4:22:cb:45:e0:44:1c:b8:28:7b:c7:84:f4:
14:d5:1c:4b:8e:9d:fb:ef:7d:4f:fb:cc:28:6d:05:60:71:22:
47:96:65:12:67:1d:ba:40:9c:8f:1d:e7:2b:5a:76:be:5e:e3:
bd:57:86:0a:54:a6:1c:21:c2:9f:0d:ad:96:65:b6:0c:d1:df:
c7:a3:46:24:b9:e7:7b:23:df:4f:8a:af:f2:18:13:2e:ba:57:
72:ce:95:d3:f0:8e:e8:30:10:40:cf:d4:ab:01:e8:fd:e9:43:
b1:c2:f6:0f:23:4c:60:c4:a9:dd:03:49:6d:48:43:1f:5f:dc:
7a:2d:17:22:b1:16:50:86:b0:ef:4c:80:bd:64:2c:0c:35:6d:
83:0f:ac:d7:49:ac:4b:cf:4e:de:53:68:79:46:a9:1a:fd:25:
2b:27:9b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 26 01:13:23 2023 by rpki-client on console-fra.rpki-client.org