Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D5AED968B5CC11ECA12268C55A40D577.roa
File: D5AED968B5CC11ECA12268C55A40D577.roa (raw, json)
Hash identifier: 7uO/ztstp99xcR9qO3ls732GwLFhUIbNSTmuMaLzeCU=
Subject key identifier: 2E:36:BF:02:FF:83:BE:BD:9E:B4:BA:B5:FD:D1:5D:C5:51:4B:52:2B
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0819
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D5AED968B5CC11ECA12268C55A40D577.roa
Signing time: Wed 06 Apr 2022 17:13:10 +0000
ROA not before: Wed 06 Apr 2022 17:13:06 +0000
ROA not after: Fri 06 May 2022 17:13:06 +0000
asID: 272095
IP address blocks: 154.16.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2073 (0x819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 6 17:13:06 2022 GMT
Not After : May 6 17:13:06 2022 GMT
Subject: CN=624dca26-24c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:15:00:32:7f:c9:72:b1:69:d1:cd:ef:66:
1d:da:fe:9d:45:7b:b3:d5:37:2e:a9:c4:80:52:38:
9c:a6:fd:53:ae:ce:f8:00:be:98:eb:dd:00:4d:d9:
f3:5d:59:13:67:7b:2b:1e:2c:61:ac:03:97:12:75:
91:cf:b0:e6:fa:b9:53:5e:c0:e1:77:e7:6e:66:1d:
93:c8:e5:6c:f3:28:45:a2:8c:7b:8e:e7:df:1c:a2:
a8:55:df:32:e1:82:c3:cf:c5:c0:0f:8b:81:d5:21:
8a:15:b9:92:e9:2d:2a:6b:f3:03:43:ef:ff:10:27:
0f:5f:64:7f:f1:b9:df:5f:9f:5c:2e:80:cd:4b:59:
7a:7e:ac:cc:59:2e:68:ac:ce:77:87:a9:6a:72:12:
f4:a3:d7:17:2a:b5:50:03:b2:4b:55:7c:b9:70:0c:
eb:36:8f:81:4c:db:74:62:f8:30:1f:d0:59:d3:98:
63:6d:03:54:1d:60:ae:c7:80:73:c5:8b:7d:6d:59:
db:a3:a4:94:f8:86:48:ed:a6:bd:c6:8d:85:66:76:
82:2e:ba:fc:48:c9:18:b9:cd:c8:b9:fb:c0:c4:d9:
bf:4d:80:4a:07:d4:fc:e7:59:53:f8:fb:ff:20:07:
f6:e3:0b:a8:63:c8:82:5a:be:22:df:cd:8d:d4:40:
a0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:36:BF:02:FF:83:BE:BD:9E:B4:BA:B5:FD:D1:5D:C5:51:4B:52:2B
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D5AED968B5CC11ECA12268C55A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.3.0/24
Signature Algorithm: sha256WithRSAEncryption
18:cd:15:db:cd:b7:e8:fe:31:c4:74:3f:4e:83:4e:f3:7c:fd:
eb:e4:3b:9f:84:ed:62:40:2f:4d:e3:69:5b:48:05:4a:75:b3:
1f:05:96:59:38:e3:ed:5f:92:26:3f:5a:0e:fc:4a:f0:aa:0d:
f9:34:22:77:09:f5:24:bc:a2:f0:1b:47:15:ff:64:6c:0c:e1:
9f:62:71:60:e6:69:64:bc:27:15:70:d7:d8:79:7e:12:f4:69:
25:12:cb:73:5e:eb:4b:f0:84:6c:2e:bb:05:90:2a:78:80:2e:
36:f3:9f:90:dc:94:22:eb:b8:fa:5a:16:e2:5d:13:83:ef:2b:
21:6b:9b:ea:b2:5c:ed:e1:7b:7f:23:4f:c8:d1:da:e6:a2:d0:
9f:9c:a8:89:f3:43:53:8f:5f:41:db:e7:e9:c9:4f:70:b9:94:
36:68:35:ad:24:86:0f:b9:6f:3b:f5:df:42:9a:59:0c:cf:93:
7f:16:9b:94:16:75:d9:75:f7:d5:0c:7a:58:70:d9:8d:4c:4a:
72:80:a1:cd:2b:94:42:f9:83:cd:6e:6e:93:5a:00:22:77:7b:
25:16:69:fd:fd:ab:cf:f8:b4:15:97:9c:db:d8:e1:21:67:74:
4f:6d:22:bd:fc:c2:4e:5d:fc:dc:c9:37:55:02:e8:c7:86:0f:
85:e5:9a:03
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCBkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjA0MDYxNzEzMDZaFw0yMjA1MDYxNzEzMDZaMBgxFjAU
BgNVBAMMDTYyNGRjYTI2LTI0YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCfxUAMn/JcrFp0c3vZh3a/p1Fe7PVNy6pxIBSOJym/VOuzvgAvpjr3QBN
2fNdWRNneyseLGGsA5cSdZHPsOb6uVNewOF3525mHZPI5WzzKEWijHuO598coqhV
3zLhgsPPxcAPi4HVIYoVuZLpLSpr8wND7/8QJw9fZH/xud9fn1wugM1LWXp+rMxZ
LmiszneHqWpyEvSj1xcqtVADsktVfLlwDOs2j4FM23Ri+DAf0FnTmGNtA1QdYK7H
gHPFi31tWdujpJT4hkjtpr3GjYVmdoIuuvxIyRi5zci5+8DE2b9NgEoH1PznWVP4
+/8gB/bjC6hjyIJaviLfzY3UQKAxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQULja/
Av+Dvr2etLq1/dFdxVFLUiswHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0Q1QUVEOTY4QjVDQzExRUNBMTIyNjhDNTVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEAMwDQYJKoZIhvcNAQEL
BQADggEBABjNFdvNt+j+McR0P06DTvN8/evkO5+E7WJAL03jaVtIBUp1sx8Fllk4
4+1fkiY/Wg78SvCqDfk0IncJ9SS8ovAbRxX/ZGwM4Z9icWDmaWS8JxVw19h5fhL0
aSUSy3Ne60vwhGwuuwWQKniALjbzn5DclCLruPpaFuJdE4PvKyFrm+qyXO3he38j
T8jR2uai0J+cqInzQ1OPX0Hb5+nJT3C5lDZoNa0khg+5bzv130KaWQzPk38Wm5QW
ddl199UMelhw2Y1MSnKAoc0rlEL5g81ubpNaACJ3eyUWaf39q8/4tBWXnNvY4SFn
dE9tIr38wk5d/NzJN1UC6MeGD4XlmgM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org