Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EC50BE26F65811EC912010F7F1222468.roa
File: EC50BE26F65811EC912010F7F1222468.roa (raw, json)
Hash identifier: gpoj10kLDVOhQ+YrG2rey3QBkmxYpLyPZEkV3cs9izc=
Subject key identifier: BD:5C:97:1B:98:92:FA:2E:8F:21:8E:55:BC:4F:BC:76:72:AF:E6:CA
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 08C7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EC50BE26F65811EC912010F7F1222468.roa
Signing time: Mon 27 Jun 2022 20:37:12 +0000
ROA not before: Mon 27 Jun 2022 20:37:08 +0000
ROA not after: Tue 27 Jun 2023 20:37:08 +0000
asID: 60721
IP address blocks: 154.127.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2247 (0x8c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 27 20:37:08 2022 GMT
Not After : Jun 27 20:37:08 2023 GMT
Subject: CN=62ba14f8-572b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5b:43:62:08:62:90:d2:5e:4e:21:6b:78:3a:
45:03:e4:68:e5:1d:ad:a6:44:e1:d9:bd:9d:46:92:
eb:04:48:f9:a6:9a:6b:12:ae:6a:af:98:ab:46:cd:
27:6c:69:cd:3a:f6:43:c4:84:d8:02:fb:44:59:c8:
cc:03:c5:44:1e:8a:91:b1:a5:0e:92:bd:33:14:39:
b8:61:9d:f1:cb:bc:7f:d6:6a:68:35:7d:fc:7a:00:
26:d0:0d:d0:bf:2b:2c:5b:65:eb:06:a1:39:ed:67:
fe:f1:7d:8b:df:7c:fb:83:c0:07:b9:a9:87:ab:ea:
0f:e6:98:54:27:1c:41:08:a2:1b:dd:fd:63:b3:09:
15:ad:69:dc:0c:3f:71:17:62:88:33:48:84:69:94:
94:d4:a3:18:5f:43:bb:35:f3:7b:a0:6a:04:0b:68:
0c:f3:05:cb:b0:21:fd:4f:63:79:cd:8d:98:73:2e:
ee:69:a9:1f:15:cb:73:1e:b0:43:98:65:be:53:c8:
39:66:4f:36:3e:60:88:3e:1f:3e:96:2f:ea:cc:8e:
9e:ea:04:ed:52:c0:9a:87:6c:5a:3b:f8:db:3e:77:
18:47:2c:f8:62:00:88:63:7f:36:8b:fd:b9:02:60:
8e:bd:c4:17:fc:17:a8:53:c9:6a:7d:26:c1:9d:fe:
cd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5C:97:1B:98:92:FA:2E:8F:21:8E:55:BC:4F:BC:76:72:AF:E6:CA
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EC50BE26F65811EC912010F7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.63.0/24
Signature Algorithm: sha256WithRSAEncryption
29:2b:8e:17:1d:3a:5a:53:6a:20:f1:e9:cc:ef:14:7d:4b:16:
ba:84:15:26:96:53:36:d2:30:fc:f4:fd:4a:19:d4:27:6a:a0:
bd:c1:7e:29:9f:1f:0f:48:62:70:ee:e7:15:f2:80:57:7b:5c:
a5:8e:33:c0:00:be:9c:6c:5a:35:02:86:c9:34:6c:aa:6a:0d:
aa:c0:f2:b8:9a:81:25:f5:1c:66:dc:8a:17:32:42:4b:0d:53:
46:12:37:c1:67:e3:03:11:cf:d6:fd:98:de:aa:02:bf:1d:d2:
26:0f:e9:07:19:9a:db:76:e4:b7:89:8f:48:05:59:bc:56:54:
fa:70:db:f5:92:60:24:0b:eb:99:45:d6:90:eb:7b:98:0c:52:
c8:fe:f9:b9:2a:ae:66:be:3c:ed:c3:ae:c5:a6:d3:ef:f5:83:
65:b8:b1:e7:e7:f5:c5:d7:a2:ae:80:08:f8:37:e8:df:6c:47:
b9:e3:2c:2b:cb:55:86:b9:87:cb:98:78:e4:15:ae:5e:64:0e:
aa:28:a9:3c:3a:27:68:05:75:b7:61:85:c4:85:f6:c9:d8:a6:
07:63:be:36:56:99:7f:ea:65:71:03:b4:ba:20:0f:93:1a:0b:
60:84:f3:ca:77:7d:ae:20:48:6c:84:76:19:ed:22:ec:1a:7d:
13:dc:cb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:03 2023 by rpki-client on console-fra.rpki-client.org