Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E1B50048B8B611EB876A7133F8AEA228.roa
File: E1B50048B8B611EB876A7133F8AEA228.roa (raw, json)
Hash identifier: Vd06OJAMn2PSYvKOR6x+DLwINzSnq+Nj21cPb5c4niM=
Subject key identifier: C5:1F:CD:7D:16:41:60:1C:D4:0A:44:FE:3C:0E:39:00:8C:B0:C9:76
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 058E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E1B50048B8B611EB876A7133F8AEA228.roa
Signing time: Wed 19 May 2021 15:28:38 +0000
ROA not before: Wed 19 May 2021 15:28:32 +0000
ROA not after: Fri 19 May 2023 15:28:32 +0000
asID: 142165
IP address blocks: 154.16.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1422 (0x58e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 19 15:28:32 2021 GMT
Not After : May 19 15:28:32 2023 GMT
Subject: CN=60a52ea6-17c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7e:1d:cc:dd:67:69:f8:cf:79:14:17:b4:be:
22:b4:a7:4d:2d:7f:7a:0b:a7:b1:3b:6a:c8:db:92:
49:b2:93:ef:4f:84:4f:5a:38:25:45:13:00:8c:4d:
af:0b:76:a0:90:ef:18:32:aa:7e:ff:d7:a4:b0:52:
35:d2:e3:41:5b:d2:ef:73:53:40:ed:14:01:fb:1f:
1d:86:d2:71:52:82:5e:fb:d2:7f:33:26:64:8f:40:
3a:a2:07:c9:ac:b4:d1:5b:55:b1:4a:06:54:1a:91:
7c:e8:79:c4:ee:d0:b7:f8:f9:d0:5a:0c:4c:7e:0f:
88:fe:6c:92:24:4b:02:a1:52:79:41:a2:b5:6a:80:
fc:b7:e1:3a:1c:5c:c6:2b:36:5a:41:10:35:d8:e6:
0a:4e:7d:35:33:84:32:2e:c7:7e:40:52:49:4b:eb:
53:38:3e:fe:e0:13:8b:c0:f9:d6:81:f7:92:69:a9:
5b:3d:a3:52:23:ba:8e:6f:16:b3:0a:7f:ee:41:0d:
df:9c:f6:79:c2:bc:33:78:06:8f:36:53:e4:53:bb:
86:6a:7b:f8:b3:50:f1:4a:79:4b:b6:aa:33:2a:60:
49:02:c8:59:d1:41:f1:b8:cb:22:5c:a6:12:61:10:
de:e1:97:33:a6:e0:c6:44:d2:7e:2b:7b:f2:43:2a:
88:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1F:CD:7D:16:41:60:1C:D4:0A:44:FE:3C:0E:39:00:8C:B0:C9:76
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E1B50048B8B611EB876A7133F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.3.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:4a:fa:7c:b8:67:4f:05:8f:09:2e:49:ae:a4:6c:d2:c5:de:
ee:26:ce:54:cb:42:77:ca:53:06:76:7d:cd:63:80:8a:9d:3e:
71:9f:88:23:a5:1c:b0:a8:ba:ab:c0:35:4e:30:4a:b0:22:26:
e7:ac:86:e7:0b:5b:1f:6a:e9:76:ff:b4:a9:36:cd:ad:4a:e0:
4b:72:86:35:ad:a4:5a:9d:6b:79:f0:90:22:36:13:ed:5b:cc:
31:6d:8f:c1:3e:72:da:2c:6b:97:40:a5:fb:a3:50:46:ae:28:
ee:25:f2:b8:71:e6:5e:e5:4b:e0:c8:af:83:f5:8e:51:74:16:
8e:22:e9:95:9e:ba:02:23:35:c2:31:c4:97:fc:5b:3e:df:1c:
e2:ae:1f:4b:56:48:81:73:23:e3:c8:4a:7e:0a:3d:17:8c:a1:
68:f0:80:c8:50:81:3d:97:c8:33:7a:8f:93:9f:56:e8:bd:6a:
d6:f2:5c:f3:ae:98:d8:dc:be:ec:4b:82:f4:4c:ac:ac:fb:f4:
0c:17:87:a4:14:c5:4c:cd:c3:6e:24:d1:97:68:3d:1e:6c:30:
c6:90:06:db:61:bc:8a:21:2e:86:ba:d7:23:8f:f9:c3:bf:3d:
e3:e1:e9:1f:a8:a4:ec:75:a0:73:63:92:1a:b0:67:d0:b3:cb:
2f:d4:2a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org