Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AA1740B0FB8711EB83627324D8A014CE.roa
File: AA1740B0FB8711EB83627324D8A014CE.roa (raw, json)
Hash identifier: DBSpsRKUvQi4qgQf/nUvee/nmc/qmQ2DQSAH9Net2A8=
Subject key identifier: E2:A1:69:4E:64:09:FB:FD:31:84:DB:77:CE:0B:64:4A:CE:D8:24:BF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0615
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AA1740B0FB8711EB83627324D8A014CE.roa
Signing time: Thu 12 Aug 2021 16:10:08 +0000
ROA not before: Thu 12 Aug 2021 16:09:59 +0000
ROA not after: Fri 12 Aug 2022 16:09:59 +0000
asID: 396073
IP address blocks: 154.127.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1557 (0x615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 12 16:09:59 2021 GMT
Not After : Aug 12 16:09:59 2022 GMT
Subject: CN=611547e0-e047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:22:5c:4e:18:84:b0:28:a5:07:dc:bb:0c:
5b:83:d0:c1:e4:dc:98:f6:3c:ac:fd:70:65:a6:a9:
20:72:d9:0c:bd:0d:82:32:be:0c:92:49:80:64:0f:
43:c9:09:df:5c:99:37:10:12:5c:9f:3b:be:0d:37:
40:db:f8:83:3b:89:e8:47:7b:d7:39:2b:80:7a:2d:
97:24:1a:20:85:e8:56:54:75:b6:56:2f:b8:29:7a:
73:f5:25:3b:ca:22:0a:ce:5c:fa:49:59:6c:a0:f0:
32:6c:4d:cf:b7:31:a3:3a:be:e0:5a:52:e9:01:d5:
7c:11:55:c2:71:bb:34:5e:91:01:05:f7:a7:65:a7:
8d:eb:eb:dc:0b:fc:7d:8b:00:9d:dd:7f:3d:9a:28:
79:48:4e:99:14:d7:cc:a4:52:52:fa:56:29:fe:5a:
a7:62:85:58:9c:0d:70:3c:0e:6e:3d:d8:46:13:40:
e7:9f:46:fc:af:37:51:43:8b:3c:fe:83:bb:2c:a3:
f9:bf:7f:a4:1c:60:59:3a:63:21:0f:e2:61:35:b5:
8e:a8:5c:cb:5c:c1:9e:bd:77:43:de:da:b0:e7:b3:
93:f4:c7:d2:63:fb:26:9d:ca:24:03:a6:03:98:2e:
fb:41:15:2f:81:d8:ee:64:e3:98:4b:0b:21:08:ad:
25:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A1:69:4E:64:09:FB:FD:31:84:DB:77:CE:0B:64:4A:CE:D8:24:BF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AA1740B0FB8711EB83627324D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.53.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e2:f0:3f:24:00:89:d4:e6:f7:66:44:8d:d7:cb:5b:a2:db:
d6:58:15:cd:46:ed:a7:70:10:ea:27:5a:4d:32:9f:14:2a:a2:
f9:73:ed:e9:f9:2b:ec:33:dc:be:71:2e:6a:8a:85:8e:28:f1:
93:e7:d1:81:cf:2d:a5:6d:aa:d9:1e:8f:96:b0:a6:d1:e3:49:
df:3d:83:3c:f0:11:4b:bd:26:91:f0:ce:d3:4b:30:18:e3:9c:
8b:7b:f4:5b:82:fd:5b:39:56:26:1d:50:18:71:d9:c8:45:40:
61:ce:53:38:b5:45:4d:29:8e:f6:74:be:07:8d:02:13:77:53:
24:b2:06:78:c3:76:5c:38:8c:91:ff:e4:ce:e1:f4:69:dc:a2:
76:c2:f5:28:d0:2e:18:46:b0:ed:8e:a9:f1:87:bb:06:01:e8:
39:20:23:91:7a:2b:c1:45:be:74:7b:83:d0:0f:b4:9e:1d:dc:
8c:a6:be:53:a9:5a:d3:63:d3:89:d3:07:3d:86:ad:e6:78:01:
63:b2:0f:3d:14:ff:4e:90:4c:1c:32:ce:a2:cd:3b:e1:e1:ea:
9a:24:1f:5e:e2:ec:ae:ad:12:13:be:0e:63:df:24:86:e4:ef:
7b:bb:b0:1e:4f:b7:47:24:90:13:45:d9:74:2e:9c:9a:9e:20:
c2:ce:59:f6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBhUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMTA4MTIxNjA5NTlaFw0yMjA4MTIxNjA5NTlaMBgxFjAU
BgNVBAMMDTYxMTU0N2UwLWUwNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCr0SJcThiEsCilB9y7DFuD0MHk3Jj2PKz9cGWmqSBy2Qy9DYIyvgySSYBk
D0PJCd9cmTcQElyfO74NN0Db+IM7iehHe9c5K4B6LZckGiCF6FZUdbZWL7gpenP1
JTvKIgrOXPpJWWyg8DJsTc+3MaM6vuBaUukB1XwRVcJxuzRekQEF96dlp43r69wL
/H2LAJ3dfz2aKHlITpkU18ykUlL6Vin+WqdihVicDXA8Dm492EYTQOefRvyvN1FD
izz+g7sso/m/f6QcYFk6YyEP4mE1tY6oXMtcwZ69d0Pe2rDns5P0x9Jj+yadyiQD
pgOYLvtBFS+B2O5k45hLCyEIrSVzAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU4qFp
TmQJ+/0xhNt3zgtkSs7YJL8wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0FBMTc0MEIwRkI4NzExRUI4MzYyNzMyNEQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACafzUwDQYJKoZIhvcNAQEL
BQADggEBABbi8D8kAInU5vdmRI3Xy1ui29ZYFc1G7adwEOonWk0ynxQqovlz7en5
K+wz3L5xLmqKhY4o8ZPn0YHPLaVtqtkej5awptHjSd89gzzwEUu9JpHwztNLMBjj
nIt79FuC/Vs5ViYdUBhx2chFQGHOUzi1RU0pjvZ0vgeNAhN3UySyBnjDdlw4jJH/
5M7h9GnconbC9SjQLhhGsO2OqfGHuwYB6DkgI5F6K8FFvnR7g9APtJ4d3IymvlOp
WtNj04nTBz2GreZ4AWOyDz0U/06QTBwyzqLNO+Hh6pokH17i7K6tEhO+DmPfJIbk
73u7sB5Pt0ckkBNF2XQunJqeIMLOWfY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org