Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CF421158A59211EB9389F324F8AEA228.roa
File: CF421158A59211EB9389F324F8AEA228.roa (raw, json)
Hash identifier: 91RvBoV2uk3WJO4XtHGji3dukprc5v9VJlqT9EAllQc=
Subject key identifier: 72:4B:A4:7A:4E:C7:4B:BC:D8:6B:34:39:8D:09:75:30:CE:A2:09:25
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0565
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CF421158A59211EB9389F324F8AEA228.roa
Signing time: Sun 25 Apr 2021 06:52:32 +0000
ROA not before: Sun 25 Apr 2021 06:52:28 +0000
ROA not after: Mon 25 Apr 2022 06:52:28 +0000
asID: 270014
IP address blocks: 154.16.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1381 (0x565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 25 06:52:28 2021 GMT
Not After : Apr 25 06:52:28 2022 GMT
Subject: CN=608511b0-e5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9c:e0:3c:60:d7:f7:11:f5:c2:aa:ae:1a:9d:
e8:f4:0e:fe:cd:13:bb:81:62:4a:50:0c:c0:2e:87:
90:de:25:98:76:dd:e8:ed:86:ae:f6:09:1b:92:8b:
a3:ba:2b:bd:ce:06:68:2a:59:05:39:b4:b2:bc:d8:
04:41:5b:eb:61:13:83:6f:25:7a:ea:5f:85:6e:62:
cb:88:72:e2:d5:34:c3:e1:9e:c2:1d:d7:80:f3:78:
57:22:fe:c5:fe:f7:55:26:43:08:77:9f:d9:3e:12:
30:41:00:ee:59:0b:9c:1e:a6:10:07:0b:e5:e6:c4:
79:c5:75:33:6c:84:eb:69:b4:59:ad:bc:2e:90:fc:
5f:74:8a:cc:fd:16:2f:e8:6e:d7:5b:41:6d:f9:84:
39:3c:3c:7d:f5:98:89:1d:cb:72:08:5a:16:78:49:
bc:b6:5e:f5:fd:76:58:a1:4c:e5:dc:b3:bb:b7:89:
02:94:bf:05:61:30:ba:04:97:73:52:3d:ec:c8:c3:
d3:0d:1f:61:e3:b2:5a:ae:9e:46:0b:c5:d3:ba:ad:
1d:2a:bc:83:88:d6:d5:09:5e:c2:a8:f3:c4:de:8f:
e8:00:0c:98:db:6b:23:35:dd:ef:8e:ee:c7:5a:3c:
ce:d0:88:a8:1e:3d:a2:30:f0:b1:52:cd:b4:da:d0:
a7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4B:A4:7A:4E:C7:4B:BC:D8:6B:34:39:8D:09:75:30:CE:A2:09:25
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CF421158A59211EB9389F324F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.208.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:02:55:e7:ed:f0:89:c5:11:3d:41:c4:59:cc:96:61:aa:bd:
c0:51:69:92:7c:c7:2d:ee:4b:ab:5e:2c:5f:c1:20:ca:25:40:
d3:2a:7f:a6:a2:90:3f:4b:c0:3f:82:bc:48:7e:5a:be:44:3b:
4b:d8:a9:17:0c:f2:b2:bf:2a:09:dd:b5:36:73:a8:fd:6c:9b:
e5:3b:5a:76:c7:13:75:da:b7:f9:19:42:c2:7b:f4:07:fc:cd:
2e:ad:d9:12:da:0d:a2:22:60:c3:08:ec:a3:a4:6b:16:8b:22:
88:d1:92:fb:e2:d0:8b:2a:6a:aa:2a:df:a1:9e:03:62:a0:7a:
1a:8a:17:84:d2:80:bb:d1:94:a5:99:b6:f8:b7:86:99:f0:11:
1d:2f:c8:f0:01:d0:a3:5a:de:bc:59:8e:08:d5:38:2b:dc:bd:
e0:d7:10:fe:e2:9a:14:5b:c6:63:76:68:ce:3d:41:6c:1e:f0:
5f:8f:da:c6:56:c7:4a:66:89:c8:53:9d:fc:d4:2b:25:aa:fd:
86:72:f9:b0:97:70:47:44:1b:a4:e6:58:e9:4c:78:a1:f8:75:
9d:ef:3c:c1:80:a6:ca:80:27:31:bd:64:e5:2c:3b:3a:bb:47:
04:8a:e3:4f:58:d2:c9:4a:31:38:e7:5f:d5:cb:8f:ae:42:d3:
de:43:b4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org