Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A5166C96590411EC8D3BB2C35A40D577.roa
File: A5166C96590411EC8D3BB2C35A40D577.roa (raw, json)
Hash identifier: X0rlu63U1Bp9vFs0t2rs6s9EK4HDxZzw0c1S0P0iRFM=
Subject key identifier: F8:DC:26:8E:86:52:C5:97:1A:0B:7A:96:FC:D9:B7:65:D8:02:61:01
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0729
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A5166C96590411EC8D3BB2C35A40D577.roa
Signing time: Thu 09 Dec 2021 15:28:23 +0000
ROA not before: Thu 09 Dec 2021 15:28:19 +0000
ROA not after: Fri 09 Dec 2022 15:28:19 +0000
asID: 207429
IP address blocks: 154.16.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1833 (0x729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 9 15:28:19 2021 GMT
Not After : Dec 9 15:28:19 2022 GMT
Subject: CN=61b22097-b234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0c:57:5a:bf:bf:8b:75:17:0a:c5:73:dd:9e:
28:db:6a:f7:dd:09:8c:6b:dc:a1:60:7f:5e:2b:72:
a8:19:d4:fb:d3:e2:dd:64:00:b3:c2:9a:8f:dc:b3:
47:f8:92:29:f2:fc:6b:4f:62:d3:b3:04:9d:d6:bf:
7b:d2:1f:80:87:6f:0c:68:eb:f9:81:e3:94:36:c8:
3e:cb:89:2e:e5:11:59:51:f0:85:11:45:63:8f:f6:
c5:93:d1:cf:5c:c2:64:6c:5f:9d:64:6b:b6:3b:ae:
c1:e3:b2:88:bc:63:7f:44:af:24:39:28:12:30:75:
9a:7c:5e:9d:9d:3f:6a:c0:63:c0:2f:14:a9:f0:4d:
4d:2b:7d:45:7a:e0:6a:68:e7:76:2f:e2:70:b9:2d:
cf:97:9e:5e:00:cf:3d:60:db:cd:44:a9:6b:4e:4b:
ae:14:e8:5b:94:8e:aa:c6:2c:4a:0b:f4:16:1f:3f:
f3:15:b0:96:ff:c3:8f:58:f9:92:85:6e:fa:ee:1f:
87:31:08:75:32:d0:db:b4:bc:8f:c2:ed:cc:bd:2f:
0d:63:0b:4a:6d:f6:e5:10:b3:94:e4:20:4c:f6:c5:
83:7d:2e:a2:ee:6b:b2:c1:0c:bf:53:c7:58:81:12:
a6:4d:84:bf:17:fc:51:20:83:71:74:9e:b7:eb:57:
3e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DC:26:8E:86:52:C5:97:1A:0B:7A:96:FC:D9:B7:65:D8:02:61:01
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A5166C96590411EC8D3BB2C35A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.123.0/24
Signature Algorithm: sha256WithRSAEncryption
35:d5:55:9a:9d:41:78:d1:47:bd:c1:6b:5f:43:9f:38:52:05:
42:c3:5b:e1:28:e2:b4:86:29:37:be:bb:c5:21:f1:35:66:36:
1e:cd:fe:66:93:8b:b5:dc:b7:8d:88:a4:51:be:b3:98:d1:b8:
9d:c2:78:ac:8a:78:52:35:33:00:5d:a3:1e:e0:88:20:96:3a:
5b:3a:30:98:5e:50:cc:e6:98:c3:c1:57:7a:c7:66:41:84:1c:
a3:50:6c:07:ca:08:21:ce:85:d2:ca:fc:b9:24:32:e4:8e:51:
ac:c9:ef:8a:cc:3b:2f:c8:12:b7:7d:b6:ae:a5:1f:aa:9b:16:
57:45:69:7e:d1:46:76:ff:75:81:fd:0e:9b:af:a6:74:bc:70:
97:40:68:62:50:73:1f:2d:0c:1c:84:a9:6d:a8:ab:c9:9b:42:
bc:ff:4e:22:97:b7:f5:9a:23:58:dc:d5:4b:a2:9a:25:3a:e8:
84:78:d3:0c:ea:07:4d:93:29:9c:43:5a:9c:8a:c6:62:a6:f9:
d0:6a:6e:93:0b:e2:86:3b:d3:44:2a:d3:55:b0:6a:53:02:ad:
90:5a:bf:44:fe:e4:b6:3b:8c:7c:2f:71:58:45:31:1d:a2:49:
3e:6c:6e:a8:8e:90:7b:9c:bc:82:77:4d:05:05:b6:4e:4b:ab:
44:e3:d9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org