Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C01A65BCB2E011EB93A9E532F8AEA228.roa
File: C01A65BCB2E011EB93A9E532F8AEA228.roa (raw, json)
Hash identifier: nYJ11tTNkr8a7fwIw0Q0MWJtpr1L26eTVGqwgqv69Q0=
Subject key identifier: 58:E5:4C:95:A9:A7:60:CB:B5:38:83:0E:37:47:7D:B5:54:19:A9:CE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0582
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C01A65BCB2E011EB93A9E532F8AEA228.roa
Signing time: Wed 12 May 2021 05:13:13 +0000
ROA not before: Wed 12 May 2021 05:13:08 +0000
ROA not after: Thu 12 May 2022 05:13:08 +0000
asID: 206092
IP address blocks: 154.16.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1410 (0x582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 12 05:13:08 2021 GMT
Not After : May 12 05:13:08 2022 GMT
Subject: CN=609b63e9-2a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:af:a9:6f:19:e2:54:90:a5:1f:f2:95:fb:
a7:71:b3:c6:87:10:1e:d4:9a:a7:75:78:cd:15:68:
26:27:0f:82:a1:01:8e:94:3f:70:24:dc:6c:55:bb:
93:89:a2:0b:23:9f:87:62:4d:61:86:22:24:cc:85:
c3:e3:fd:65:9c:01:c8:ee:28:f7:2d:10:df:53:d4:
4f:a4:e8:9e:3d:b2:38:7f:dd:6a:6f:31:7c:63:b0:
a7:d5:88:2c:a4:69:96:c9:49:aa:5e:60:55:0f:01:
01:ff:5c:20:c0:d5:10:28:17:f2:62:18:82:9e:f4:
de:38:77:17:df:00:6a:78:64:70:ec:56:db:27:bb:
9c:ae:c6:a9:a1:d2:96:af:b3:09:ad:d2:d5:7c:73:
6b:6b:85:cf:a9:e0:a6:81:ef:a9:59:d4:bb:9a:79:
0d:21:d5:c2:87:8d:33:1d:1b:d5:97:03:bf:2c:10:
d4:d6:47:59:23:0a:81:d6:67:01:d6:03:51:33:e5:
3d:4a:40:6d:a5:fc:22:2a:8e:18:5d:92:3e:51:3c:
84:0b:a8:b8:d8:4b:ff:3b:3d:63:9e:99:f0:81:61:
90:9e:7a:11:46:fb:80:4c:d5:46:53:da:c0:82:7f:
b0:9a:a7:72:a2:a7:73:ce:d2:20:32:08:7d:88:d1:
60:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E5:4C:95:A9:A7:60:CB:B5:38:83:0E:37:47:7D:B5:54:19:A9:CE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C01A65BCB2E011EB93A9E532F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.96.0/24
Signature Algorithm: sha256WithRSAEncryption
95:91:24:fe:a2:8b:0f:65:8a:d4:8f:91:50:f6:51:49:4f:db:
3c:10:fd:fa:16:0d:5c:35:49:33:d0:4f:c6:61:ba:ae:9d:51:
a3:58:1e:69:65:47:bc:8e:b2:d7:3a:1e:ca:ba:8c:16:b6:67:
20:95:21:dd:c8:63:69:95:ec:99:15:a4:b2:93:e3:a4:fb:61:
5f:fa:14:61:9e:d9:2f:3b:d5:dd:c8:98:a9:2f:af:92:0d:be:
ac:d4:c9:85:3c:a2:20:46:15:79:00:4f:f8:8b:7f:b0:ae:ba:
ee:40:2f:b4:a4:fa:b7:c2:ef:06:91:30:ec:e1:58:a5:d0:da:
2f:5b:8a:c6:0e:fb:e9:35:61:2e:30:31:17:ae:f7:e8:20:a1:
0d:e8:7b:3d:ea:4f:98:9c:b6:43:cc:57:60:30:64:76:a6:cd:
75:53:fe:1c:72:0a:df:72:18:dc:4c:92:f5:05:f9:e8:fe:23:
fa:93:64:f3:08:b4:e2:cc:76:83:9d:ff:53:df:cd:03:97:72:
00:57:c7:aa:a5:46:87:69:b7:c0:99:83:44:c0:b9:b5:10:ba:
17:11:a5:dc:71:1e:91:e9:aa:a2:96:a9:9d:95:5e:3a:44:9c:
03:d8:9f:7b:18:5b:23:50:ab:e7:ab:7d:43:e3:2a:de:fb:9a:
bc:11:be:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org