Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A97A1B44B09711EC8026FA875A40D577.roa
File: A97A1B44B09711EC8026FA875A40D577.roa (raw, json)
Hash identifier: bzFCowGewmC7xp9swBYwiR4JzeKHav9ZjWsr6/lvhgA=
Subject key identifier: F1:F8:E3:3E:D2:EC:55:CF:5A:5B:B6:55:32:7C:B3:12:98:B9:53:99
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0811
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A97A1B44B09711EC8026FA875A40D577.roa
Signing time: Thu 31 Mar 2022 02:09:57 +0000
ROA not before: Thu 31 Mar 2022 02:09:53 +0000
ROA not after: Fri 31 Mar 2023 02:09:53 +0000
asID: 40676
IP address blocks: 154.16.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2065 (0x811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 31 02:09:53 2022 GMT
Not After : Mar 31 02:09:53 2023 GMT
Subject: CN=62450d75-4bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b2:58:6f:8e:05:92:6d:69:02:1a:0c:c2:ca:
0f:18:bb:06:95:92:85:16:be:fb:7d:3d:b0:2f:0b:
47:26:24:bd:4d:f4:be:3f:7f:e3:97:61:3b:a4:4d:
42:c2:4b:4c:48:65:99:cf:d4:54:60:20:81:45:9f:
62:21:fb:72:84:be:a0:9f:0e:bf:20:ad:63:8b:f4:
10:8f:f9:cc:b5:63:e6:38:84:7e:ee:e1:63:01:18:
06:f2:3c:04:51:84:d8:6f:af:a8:5a:19:24:b1:2a:
94:9d:dd:4e:03:3a:e8:09:cd:54:db:f2:fd:7e:e8:
71:07:f5:f0:40:2b:a1:7e:bb:25:48:d9:93:a3:98:
1c:17:50:b1:cd:dc:5c:29:aa:9b:d1:37:f5:20:02:
8c:fd:74:01:b8:77:79:9a:2b:09:ef:16:fa:58:58:
0e:57:ce:b8:cf:c7:26:f3:ec:f9:36:d3:40:cb:93:
2e:e5:f7:a3:73:8a:fe:cb:dc:4e:da:83:2b:c9:da:
61:77:d1:e2:c1:70:70:a8:2b:74:fc:ef:ad:fe:76:
90:2c:4e:13:8e:a0:55:00:13:53:e5:2a:01:90:2a:
6e:42:28:f4:2a:e9:c4:f9:57:8b:43:45:de:e6:55:
aa:a6:86:ce:ca:e9:74:07:91:4f:b8:4b:92:71:70:
b5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F8:E3:3E:D2:EC:55:CF:5A:5B:B6:55:32:7C:B3:12:98:B9:53:99
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A97A1B44B09711EC8026FA875A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.140.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:d2:7a:29:c2:05:fd:a0:4f:eb:ed:9e:f7:ad:1e:27:8e:cb:
96:b3:d4:73:ba:83:13:05:6c:61:b3:d1:73:57:90:09:b0:53:
26:3a:da:66:16:94:9a:2f:51:5a:53:db:60:2e:eb:a6:50:6b:
f7:20:68:0a:27:48:68:63:51:c6:02:13:bc:90:a7:46:b7:2e:
95:e4:ee:b0:9b:01:1b:b5:60:d7:91:1d:d1:8f:f3:d6:58:01:
3a:d6:43:a1:b6:5e:8b:83:a2:f8:07:50:da:3a:04:6b:0c:d6:
06:a1:d1:1e:5b:e1:2c:72:c1:69:29:5b:4b:68:99:a0:c5:94:
a9:66:c9:09:28:3e:04:a0:dd:38:f2:f4:e7:e5:5b:bc:2f:26:
5f:d2:50:a3:74:72:57:5f:f3:d3:65:72:81:f3:2c:6a:37:ec:
37:85:d7:46:c6:e5:cf:17:62:a8:9b:93:95:b4:20:34:17:82:
3a:c8:eb:04:be:bf:b5:af:39:26:8e:b3:f8:06:d4:ea:7c:76:
d2:58:de:89:93:04:c5:77:1a:1a:86:05:5d:55:b1:91:94:af:
ac:50:c6:1f:b7:cc:e8:44:13:61:36:0e:60:c0:c8:8c:9c:05:
37:b3:13:5d:4e:6f:99:5f:63:ee:64:1c:a1:66:5e:25:13:98:
4c:1f:c7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org