Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DE3B36B4F5F311EC823B75BCF1222468.roa
File: DE3B36B4F5F311EC823B75BCF1222468.roa (raw, json)
Hash identifier: 0gr2QAwUKbkKYEE6pXPwpRY7LGxyIs9UpbrvyeSYG3c=
Subject key identifier: 66:B2:1C:9B:EA:D5:E4:EE:B1:AE:A0:C4:54:89:23:61:66:43:B8:7C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 08C2
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DE3B36B4F5F311EC823B75BCF1222468.roa
Signing time: Mon 27 Jun 2022 08:33:50 +0000
ROA not before: Mon 27 Jun 2022 08:33:44 +0000
ROA not after: Thu 27 Jun 2024 08:33:44 +0000
asID: 26548
IP address blocks: 154.16.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2242 (0x8c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Jun 27 08:33:44 2022 GMT
Not After : Jun 27 08:33:44 2024 GMT
Subject: CN=62b96b6e-7aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:78:a1:01:86:bc:6b:f9:00:1b:19:ac:82:
54:00:67:32:86:61:23:b8:60:db:2d:d5:7b:be:40:
02:05:a5:37:a9:f0:55:03:f0:6d:82:12:3b:c0:c9:
16:c7:0a:da:1d:66:f7:83:02:1b:92:08:41:6d:db:
52:41:75:64:54:72:a6:2a:ac:e2:97:9e:ef:f4:d3:
86:e5:13:c0:4b:a4:5b:54:e7:9d:47:66:c1:49:04:
80:18:b8:3f:5c:31:95:80:fa:30:e4:7c:03:17:81:
c6:f9:e1:65:1f:55:d7:e2:30:4f:17:eb:35:87:0e:
1c:1b:17:34:88:da:a4:a1:4a:fc:cc:9b:84:01:0d:
dd:43:22:6b:8c:82:57:2a:7e:26:7a:64:81:51:14:
62:46:5f:e3:06:05:26:a2:8a:88:43:9d:5e:00:e3:
2c:49:fe:83:f3:8c:42:c9:eb:02:f7:aa:6a:3b:b4:
2b:4d:48:de:ed:11:bb:98:f5:18:1e:4f:13:19:24:
31:85:18:c1:ce:3e:23:75:b5:3c:e0:9e:0f:9e:fb:
1c:ae:78:85:28:7e:0c:1a:c6:f4:1b:28:cf:4e:8b:
a7:62:e3:5d:51:05:4e:3f:bc:0e:7b:8c:55:49:e9:
01:91:02:3b:7b:a4:db:c9:65:db:6c:02:05:0c:99:
8c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B2:1C:9B:EA:D5:E4:EE:B1:AE:A0:C4:54:89:23:61:66:43:B8:7C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DE3B36B4F5F311EC823B75BCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.7.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:1c:c9:e6:33:a2:0f:da:9e:78:d1:a4:11:27:cd:18:84:44:
92:97:6d:02:00:cc:f3:4d:c5:ad:4b:fd:e9:3d:76:2b:a5:34:
2d:4d:73:2c:a1:98:35:2c:42:11:b9:fe:7b:70:1b:52:ae:cc:
9f:8b:7e:02:a9:11:7b:9e:dc:50:8d:cf:c4:cb:08:7e:a1:be:
60:b9:d8:eb:64:f1:37:1b:2e:dd:c1:b5:6f:98:8a:9a:da:f7:
dc:d8:44:3f:63:29:c3:23:98:11:7c:b7:37:84:bd:98:37:1b:
c1:61:ed:4b:5b:cb:7e:58:40:32:9a:90:33:6c:a0:32:64:b8:
e7:0f:e8:65:bd:d0:4a:4c:d5:0c:64:ea:c3:1c:5e:95:7e:ce:
e7:45:e0:dd:75:c1:71:ed:5d:b4:97:db:d5:98:67:05:d7:dd:
53:ee:fe:4a:6f:85:c5:ae:7e:f3:70:f8:fc:5d:47:27:70:27:
68:e3:56:28:15:f5:a7:e5:8b:8b:d6:d1:80:c2:cb:b9:5b:03:
b3:0e:01:53:a1:50:da:df:19:49:e1:8c:14:5d:11:43:94:6f:
ef:7b:54:5e:be:58:bb:1d:e0:70:36:12:f2:ce:d7:fd:ce:2e:
63:c0:47:e5:23:e4:4b:77:5b:bc:a4:e0:50:fb:aa:fe:4e:28:
20:06:75:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:52:55 2025 by rpki-client