Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D3A6B4B467F811EC8FE0A1D55A40D577.roa
File: D3A6B4B467F811EC8FE0A1D55A40D577.roa (raw, json)
Hash identifier: 4V07HmfFccgv0lXLg6Vw48deSoxYgr+ErNGLtf0jkQA=
Subject key identifier: B8:F8:08:C3:1D:DB:3D:38:F9:D2:E4:78:F4:12:9D:0C:B8:49:C5:38
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 074B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D3A6B4B467F811EC8FE0A1D55A40D577.roa
Signing time: Tue 28 Dec 2021 16:11:34 +0000
ROA not before: Tue 28 Dec 2021 16:11:29 +0000
ROA not after: Wed 28 Dec 2022 16:11:29 +0000
asID: 207429
IP address blocks: 154.16.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1867 (0x74b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 28 16:11:29 2021 GMT
Not After : Dec 28 16:11:29 2022 GMT
Subject: CN=61cb3736-ed5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:21:23:60:48:99:5d:ec:75:26:77:5c:db:
be:b3:72:19:9c:50:37:57:0a:a2:42:b3:4e:62:c5:
37:09:50:ef:75:97:78:70:11:c6:42:76:a3:da:b1:
47:cf:ce:e8:d1:98:7b:1f:ce:36:95:30:e5:90:58:
26:c8:58:f5:25:10:a1:fa:c2:87:17:3d:af:39:c1:
4f:16:10:ce:c2:d7:4b:09:d8:84:1a:68:2d:96:cc:
9e:a2:22:9f:c9:ac:97:02:32:7e:74:b7:6e:f8:da:
e3:04:8f:d9:03:96:95:42:a8:ac:bc:2e:73:06:a3:
4e:97:3e:f0:e5:60:ea:a1:f7:67:c8:f9:9c:61:fd:
0f:05:0e:c4:e7:69:55:dc:7a:23:09:21:64:ab:32:
d4:d4:7b:89:4d:32:6b:a9:46:c3:fa:f3:0c:99:46:
fb:57:f6:c9:09:2b:2c:5c:fd:ed:7f:af:61:c5:67:
ff:3e:ba:5a:14:ce:76:b9:41:49:eb:5b:9b:64:51:
14:34:f8:77:ae:68:39:5a:12:c1:69:31:01:a6:6c:
2e:e7:4e:55:25:38:b8:01:a2:07:93:69:a8:85:48:
9a:3f:5e:9d:6d:b9:2a:00:08:46:8d:05:c1:4b:1d:
c1:e3:df:38:9c:21:18:14:ec:4a:3a:87:72:1a:ee:
ba:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F8:08:C3:1D:DB:3D:38:F9:D2:E4:78:F4:12:9D:0C:B8:49:C5:38
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D3A6B4B467F811EC8FE0A1D55A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.189.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:0f:26:10:11:79:68:6f:c6:ca:4c:cf:cf:bf:9d:9e:fd:62:
25:99:5d:7f:21:2d:19:e9:39:6d:37:7b:00:9f:73:72:5d:6e:
b4:d5:bb:00:57:b7:48:9a:c7:fe:cf:22:88:ec:eb:8b:b3:e6:
24:b4:bb:d1:91:94:45:f9:da:17:cc:3f:a0:00:59:cd:ba:ad:
a1:b3:1e:f6:44:a3:99:28:8a:9e:c5:4b:14:c3:a5:9a:2d:6f:
7b:41:9d:39:64:f5:65:da:91:46:04:cb:0d:59:a2:ee:f2:b6:
02:a4:75:2e:ce:4e:ab:1e:58:71:04:8c:2e:23:90:cb:ab:92:
35:ae:e6:f1:32:be:de:b3:73:a4:ae:d6:2e:f0:7f:6d:ce:29:
50:88:f8:54:c3:76:8d:57:a0:4d:4d:b1:6a:24:50:42:c7:07:
1e:2e:e9:21:b7:c6:60:a5:c2:26:4c:86:cf:bf:cc:88:84:17:
c2:55:91:d1:e4:b9:20:2c:3d:b1:3b:d3:78:f1:50:3d:65:f9:
f4:15:c2:af:f0:4a:a1:f2:1f:a4:91:96:e1:b7:54:51:2f:77:
f8:70:36:43:96:ce:ff:96:a0:6c:c9:95:ac:34:bf:dd:48:b1:
4b:ef:a8:d1:9d:70:de:6f:51:b8:21:fc:f4:92:03:56:3d:c3:
37:a1:00:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org