Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A14204B2AF7211EC9233B1A55A40D577.roa
File: A14204B2AF7211EC9233B1A55A40D577.roa (raw, json)
Hash identifier: IDQjb/fc05H9h/Rz34lH8g7tKUHYvnxEDLOoTUnIwBg=
Subject key identifier: 7B:5B:4E:85:54:DD:92:65:E9:55:CC:5A:49:E9:6C:31:04:E3:BD:D8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 080D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A14204B2AF7211EC9233B1A55A40D577.roa
Signing time: Tue 29 Mar 2022 15:12:21 +0000
ROA not before: Tue 29 Mar 2022 15:12:18 +0000
ROA not after: Wed 29 Mar 2023 15:12:18 +0000
asID: 174
IP address blocks: 154.16.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2061 (0x80d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 29 15:12:18 2022 GMT
Not After : Mar 29 15:12:18 2023 GMT
Subject: CN=624321d5-1c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:e8:16:e5:d4:2c:43:f9:51:e7:14:1a:37:
04:46:b7:ca:03:15:97:3c:5f:df:23:a0:a9:24:5a:
1e:27:d3:78:38:97:d7:70:d6:b8:b2:93:cc:85:f4:
1a:17:5b:66:c1:68:6c:c9:fb:e6:3b:1e:2c:d3:86:
6d:0a:00:c6:e9:3a:44:f1:59:8c:0a:8b:ca:31:7f:
e3:42:18:89:55:ae:f0:51:eb:89:cd:3c:e1:6e:17:
cf:22:5b:24:e7:bf:d9:80:df:d1:82:84:78:c0:58:
38:5f:e2:e5:e3:75:dd:3f:7c:65:ea:ea:3a:cd:7f:
d6:d9:76:41:5f:47:21:54:31:32:d6:90:6d:42:bd:
96:76:12:75:3c:9c:28:4a:ec:29:23:39:0f:cb:2a:
56:62:ac:f6:0a:0f:28:71:d2:cf:bf:ca:74:d4:52:
b7:95:16:88:f9:9d:89:41:a6:1d:ba:cf:15:9d:45:
20:05:bd:51:55:a6:a9:ac:c2:1f:6f:61:e3:f4:2c:
5d:6d:c4:31:58:8a:e4:9c:3c:d9:e0:16:86:9b:e1:
02:72:47:12:0c:82:77:c0:a6:12:80:52:b4:e1:1a:
39:da:a3:78:38:5b:8e:dd:61:fd:81:36:5a:24:8f:
23:b6:eb:a1:7b:72:bf:93:97:a1:92:a7:ce:ce:bd:
d6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5B:4E:85:54:DD:92:65:E9:55:CC:5A:49:E9:6C:31:04:E3:BD:D8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A14204B2AF7211EC9233B1A55A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.7.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:d6:c6:8c:9d:4d:43:36:a4:d6:57:3c:34:a6:2c:e9:0f:e8:
af:05:ce:0c:11:7b:a8:2f:dd:a7:14:55:dc:f5:78:03:72:b4:
7f:b0:4d:b4:8f:40:de:dc:66:09:ec:97:bf:75:7b:4c:e9:3a:
54:eb:ef:7b:a3:b3:6f:c0:bf:ad:f8:24:8d:82:06:66:28:70:
52:28:1d:9e:d2:e6:f1:66:00:0b:0d:5c:d6:3c:0c:65:e1:a1:
01:0e:ac:1f:ad:f0:d6:ca:ef:89:29:27:26:10:52:9f:00:6f:
28:0a:07:f2:f4:07:82:1c:34:6e:aa:1c:4b:b8:66:dd:28:74:
6d:3b:2a:01:4a:70:58:f5:23:11:45:73:77:7a:51:97:59:09:
b1:2f:7f:92:4a:6d:1a:5a:29:7b:2c:2f:0e:20:51:c3:db:5d:
d8:28:c5:f1:23:6e:df:42:89:84:89:21:e7:7b:8b:31:68:65:
92:5b:27:f3:95:09:3c:69:d6:67:a9:10:35:6b:91:9d:ea:c1:
70:e2:e7:59:b7:7c:65:1e:91:8c:1e:c6:16:80:bc:0a:c5:c7:
9b:e9:77:74:9c:87:d2:b2:43:44:64:00:5b:77:c7:de:8f:94:
c0:0d:16:e5:49:e3:e3:7e:62:7a:fa:55:d3:cc:8b:c7:22:2d:
59:9c:cc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org