Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CDFDC5528DB411ECA12023865A40D577.roa
File: CDFDC5528DB411ECA12023865A40D577.roa (raw, json)
Hash identifier: rNo6P6BqCzg+760qqjKZb1Vjt/dogxe7VP2VaZggfLE=
Subject key identifier: E9:73:7C:57:ED:B9:2D:48:35:FC:A6:06:6E:AA:CD:F5:4C:A3:DF:04
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 07C5
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CDFDC5528DB411ECA12023865A40D577.roa
Signing time: Mon 14 Feb 2022 16:40:23 +0000
ROA not before: Mon 14 Feb 2022 16:40:18 +0000
ROA not after: Tue 14 Feb 2023 16:40:18 +0000
asID: 212238
IP address blocks: 154.16.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1989 (0x7c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 14 16:40:18 2022 GMT
Not After : Feb 14 16:40:18 2023 GMT
Subject: CN=620a85f7-e06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:80:0b:17:a3:37:54:2a:ca:a1:86:ef:88:
cf:b8:92:ee:d8:c9:55:44:40:4d:e9:57:0f:11:4c:
15:ac:08:f9:69:8a:2e:d6:cf:bb:f8:39:62:23:3d:
94:77:08:d8:82:e9:eb:56:d1:d6:48:8f:dc:41:a7:
09:78:fd:b5:e8:ab:56:6f:09:b2:e1:7c:d0:dc:d6:
5a:89:f2:1c:30:1c:1d:e9:db:76:92:da:b2:16:0b:
63:23:cf:69:24:ea:ca:28:9f:3b:2b:9c:6b:a0:24:
e1:a4:ac:18:50:f5:7d:21:d2:34:f3:61:22:88:8a:
f8:0d:3d:8d:30:cf:40:9f:48:59:42:81:f8:61:22:
46:3d:5f:6c:9b:0e:68:62:fc:cc:0e:15:e2:b1:56:
ec:48:ec:46:28:99:a2:5d:1f:04:ca:b1:3c:68:28:
38:5f:d9:3b:e6:cb:07:1a:62:66:ed:52:4e:cc:4c:
43:fd:e6:0d:ee:9b:4e:5c:26:80:5d:ef:6b:51:e0:
53:1c:4e:11:c2:6c:43:71:dc:53:9f:24:50:34:b6:
6a:d9:9f:6d:28:44:60:35:72:e5:62:b7:12:9e:99:
82:9e:8c:5b:16:c6:3e:e2:dd:fc:0c:2c:a9:c3:d4:
03:60:df:15:d2:13:d4:17:15:f2:3d:b4:da:a4:86:
7b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:73:7C:57:ED:B9:2D:48:35:FC:A6:06:6E:AA:CD:F5:4C:A3:DF:04
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CDFDC5528DB411ECA12023865A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.110.0/24
Signature Algorithm: sha256WithRSAEncryption
70:8d:68:33:e0:55:eb:10:53:54:c7:f1:fb:79:71:a1:f2:c9:
e2:58:ed:5f:c8:ab:57:c3:74:53:9f:da:d6:96:ab:76:ec:75:
6f:e5:20:8c:f0:bf:41:cb:fb:d2:1e:09:bc:fb:b2:15:f5:55:
50:13:96:80:3e:27:c5:22:2e:87:21:44:d4:78:80:b8:79:0b:
22:be:68:b2:df:7a:e6:68:47:c5:65:7a:27:5e:05:02:d7:07:
34:63:70:6d:31:9c:84:b3:2e:fc:d1:aa:04:f8:a4:1d:2b:ec:
e4:08:e9:f9:f0:28:5d:ff:b9:94:af:75:e2:0a:e1:32:f4:77:
72:4c:1c:d7:10:ef:e4:be:a0:44:76:58:05:aa:ce:1a:84:e9:
e3:1e:dd:52:77:97:08:48:c0:3d:1c:55:80:a2:3b:94:b4:ef:
9f:e8:1a:14:4d:48:0a:2b:b7:45:10:16:57:50:95:bc:f9:c9:
4f:27:e7:20:44:f0:9a:29:a5:87:36:ea:9d:d9:dd:00:07:5d:
d5:42:87:5b:42:ab:17:29:ec:e2:43:c2:d9:25:30:dd:d9:aa:
34:74:38:b2:b4:d9:d1:7f:dc:8c:65:a3:5e:7c:19:7f:8e:c2:
d0:d2:66:4c:f3:ed:4e:63:91:a1:64:eb:70:35:67:a6:f6:88:
b8:25:dd:70
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB8UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjAyMTQxNjQwMThaFw0yMzAyMTQxNjQwMThaMBgxFjAU
BgNVBAMMDTYyMGE4NWY3LWUwNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5tYALF6M3VCrKoYbviM+4ku7YyVVEQE3pVw8RTBWsCPlpii7Wz7v4OWIj
PZR3CNiC6etW0dZIj9xBpwl4/bXoq1ZvCbLhfNDc1lqJ8hwwHB3p23aS2rIWC2Mj
z2kk6soonzsrnGugJOGkrBhQ9X0h0jTzYSKIivgNPY0wz0CfSFlCgfhhIkY9X2yb
Dmhi/MwOFeKxVuxI7EYomaJdHwTKsTxoKDhf2TvmywcaYmbtUk7MTEP95g3um05c
JoBd72tR4FMcThHCbENx3FOfJFA0tmrZn20oRGA1cuVitxKemYKejFsWxj7i3fwM
LKnD1ANg3xXSE9QXFfI9tNqkhnt5AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU6XN8
V+25LUg1/KYGbqrN9Uyj3wQwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0NERkRDNTUyOERCNDExRUNBMTIwMjM4NjVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEG4wDQYJKoZIhvcNAQEL
BQADggEBAHCNaDPgVesQU1TH8ft5caHyyeJY7V/Iq1fDdFOf2taWq3bsdW/lIIzw
v0HL+9IeCbz7shX1VVATloA+J8UiLochRNR4gLh5CyK+aLLfeuZoR8VleideBQLX
BzRjcG0xnISzLvzRqgT4pB0r7OQI6fnwKF3/uZSvdeIK4TL0d3JMHNcQ7+S+oER2
WAWqzhqE6eMe3VJ3lwhIwD0cVYCiO5S075/oGhRNSAort0UQFldQlbz5yU8n5yBE
8JoppYc26p3Z3QAHXdVCh1tCqxcp7OJDwtklMN3ZqjR0OLK02dF/3Ixlo158GX+O
wtDSZkzz7U5jkaFk63A1Z6b2iLgl3XA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org