Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C0F7CA026F8111EC85249F785A40D577.roa
File: C0F7CA026F8111EC85249F785A40D577.roa (raw, json)
Hash identifier: Ex18mzKFDyPvjowRN9hUzcEU0Rg6UC5yLHKXU0+qjr0=
Subject key identifier: 79:F4:D6:B1:CA:C7:E4:01:9C:0D:F8:C4:D0:6F:4F:08:B1:73:2C:26
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 076D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C0F7CA026F8111EC85249F785A40D577.roa
Signing time: Fri 07 Jan 2022 06:19:22 +0000
ROA not before: Fri 07 Jan 2022 06:19:17 +0000
ROA not after: Sat 07 Jan 2023 06:19:17 +0000
asID: 399045
IP address blocks: 154.16.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1901 (0x76d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 7 06:19:17 2022 GMT
Not After : Jan 7 06:19:17 2023 GMT
Subject: CN=61d7db6a-b606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c8:52:c6:3a:73:e9:44:b0:0c:ce:76:db:38:
be:d7:ed:3b:08:5a:68:48:b7:93:17:d9:9d:7a:b6:
61:23:85:c5:dc:58:1b:05:fc:44:bb:26:4d:63:fc:
21:6e:2c:a9:94:06:ae:85:35:f8:cc:55:da:8c:e8:
a4:0d:0c:b3:4f:42:21:d2:25:2c:31:0b:ce:68:69:
14:83:78:3e:07:ae:d6:05:3b:be:93:9b:aa:b9:ec:
55:8e:38:b3:a9:bb:64:58:d5:36:57:89:b4:6e:cc:
4f:e1:bc:81:dd:a5:df:70:e7:28:a5:df:0a:2a:35:
d7:9a:3f:b1:ac:30:f5:e4:d4:f8:af:f9:33:75:10:
ea:3e:2a:4f:85:1e:45:02:c9:2c:e1:32:ac:c0:3c:
2c:42:c7:f6:31:5b:81:62:5a:37:90:e2:90:14:39:
16:87:88:34:79:2c:4d:c6:1f:97:36:e4:61:00:51:
0d:25:21:01:dc:4a:ad:8d:10:9a:6c:1a:8b:30:ab:
ca:48:a3:e5:6d:a4:0c:be:a9:74:37:a0:2d:ca:63:
f5:bc:31:58:59:4b:44:19:51:e3:0d:ef:ea:61:13:
d6:5b:1e:6e:e8:8c:36:cd:8a:5a:87:0e:ba:c4:f6:
9a:71:46:51:29:f0:67:e8:55:85:26:4b:dc:3d:18:
c4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F4:D6:B1:CA:C7:E4:01:9C:0D:F8:C4:D0:6F:4F:08:B1:73:2C:26
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C0F7CA026F8111EC85249F785A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.185.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:74:c2:71:c4:9b:b1:c7:e6:e4:2e:2a:a2:b0:4d:38:3c:dd:
f4:32:86:03:c0:e5:63:16:4b:2d:73:d6:60:9d:aa:bf:0e:2c:
db:d6:31:d6:f4:ef:8e:1f:ac:9e:e9:85:b5:aa:e1:a1:96:eb:
16:26:df:d2:51:0f:11:64:2f:12:54:5f:02:3a:e9:d6:7a:22:
20:2b:a1:e3:dd:c3:d9:96:9c:51:c3:da:06:49:c7:96:f5:33:
3c:29:45:c6:44:17:95:53:10:7d:29:9b:c3:0f:4f:25:08:a3:
db:cf:cf:82:ed:ff:c6:22:00:ef:12:4f:20:13:4a:1c:48:bf:
ce:8a:9d:05:75:cb:6a:1c:ac:a8:57:b6:73:20:ed:b8:39:8d:
c9:a9:b8:ce:03:47:f7:d6:ca:0e:ea:88:1c:b7:3f:ab:be:c9:
3b:b4:01:e4:65:5d:e0:07:7e:6b:22:5e:1b:06:37:2b:2d:bc:
d8:69:42:7a:4d:be:a7:3e:79:e5:8c:37:50:33:7c:2d:69:a0:
6e:51:84:fe:d6:27:d7:96:e2:07:8e:de:7c:5d:29:94:2e:5d:
4a:0c:c2:fd:b8:7e:82:a7:18:53:3e:e2:66:3e:36:bc:1f:65:
d9:2d:51:5c:2c:a2:0a:6c:85:50:d2:1a:53:79:0d:f5:99:77:
47:a0:a3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org