Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EC6A23A2FB4E11EC993C0BC6F1222468.roa
File: EC6A23A2FB4E11EC993C0BC6F1222468.roa (raw, json)
Hash identifier: nN0xwElNrAK+LK4n/9eCZcb9VY/61xot+dZuiIOGLyg=
Subject key identifier: D5:CA:4F:19:47:88:CB:F3:DF:4C:03:38:ED:63:20:09:7A:78:29:79
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 08D0
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EC6A23A2FB4E11EC993C0BC6F1222468.roa
Signing time: Mon 04 Jul 2022 04:08:13 +0000
ROA not before: Mon 04 Jul 2022 04:08:09 +0000
ROA not after: Tue 04 Jul 2023 04:08:09 +0000
asID: 207459
IP address blocks: 154.16.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2256 (0x8d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 4 04:08:09 2022 GMT
Not After : Jul 4 04:08:09 2023 GMT
Subject: CN=62c267ad-16c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:22:c5:91:48:13:92:77:40:d1:28:f8:25:ce:
e3:5f:ea:8f:ac:8e:7c:f5:92:4f:7e:02:d2:03:d1:
f8:2a:dc:37:a7:c5:d6:74:51:f5:3f:ed:74:aa:e0:
87:5e:55:58:94:8b:09:6b:9f:5c:88:6d:7a:d8:13:
0a:80:ac:d6:a2:02:08:2f:7d:21:5f:af:ad:0e:80:
de:93:ce:1f:7f:fa:e4:4c:0f:f8:92:a6:91:1d:75:
0f:b0:2e:59:1e:d0:00:90:40:67:bb:01:01:b6:6c:
49:aa:45:d1:7a:54:3d:f2:45:c1:27:53:38:86:cf:
b1:60:66:db:00:cf:e8:53:60:fb:5f:cf:e7:58:95:
88:94:77:da:97:86:8b:ac:d9:3b:96:e9:cb:de:3b:
38:45:33:a0:f2:5a:41:86:b7:89:8d:76:9d:a8:cd:
1c:72:c5:e0:2b:41:e1:e6:b0:49:1e:30:66:9c:c3:
0a:f0:94:3f:6e:a6:66:fd:ac:58:e1:42:c8:91:8d:
59:5b:ae:c1:2b:4d:e7:df:16:f8:aa:d8:76:b0:6c:
90:9c:fa:7c:25:80:10:c4:0a:93:82:33:24:e9:34:
e8:03:9e:3e:bd:46:40:21:43:b9:53:00:52:c1:16:
53:73:de:a4:4d:ab:1b:de:49:6a:27:14:64:17:31:
67:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CA:4F:19:47:88:CB:F3:DF:4C:03:38:ED:63:20:09:7A:78:29:79
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EC6A23A2FB4E11EC993C0BC6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.186.0/24
Signature Algorithm: sha256WithRSAEncryption
36:fa:56:66:9c:34:d6:61:b4:a9:bb:9f:d6:1a:67:bb:dc:cc:
a3:3c:d1:3e:db:4c:6a:8c:32:0b:0b:aa:76:79:ae:2f:b4:98:
dd:a6:fc:c0:dd:92:61:c4:ae:ad:4c:3c:48:e2:11:5e:6b:2b:
bc:ac:4a:93:67:7e:b7:3c:ce:5d:7a:eb:77:c4:06:de:34:b3:
91:60:66:69:82:88:9c:0f:ac:a9:61:01:eb:95:cc:5a:8b:b2:
0e:6a:a8:bd:73:47:b0:52:19:07:cb:ed:07:eb:a9:de:66:29:
a6:a9:33:ff:b2:e0:2c:a2:c0:5c:9c:61:92:03:48:93:02:29:
a1:86:d9:07:e6:a1:72:5b:f1:49:12:09:73:86:09:ab:c8:2c:
42:18:cd:f5:f1:86:52:0d:03:2c:79:7a:5e:cf:53:1f:77:9a:
19:e6:e6:d8:ba:2a:e3:5f:93:2a:ae:43:f5:31:b4:30:58:87:
2d:b9:18:30:32:0f:31:e6:59:79:8c:ef:2c:a0:16:40:77:b5:
b1:ec:41:26:ae:fa:de:fb:00:b0:d0:44:b9:84:c6:79:cd:c1:
40:ba:3e:17:c6:8f:be:8f:2c:dd:ea:9d:99:27:5e:e5:99:aa:
df:04:0e:6c:f0:ac:b3:78:54:06:55:d6:bd:3b:d3:4d:c5:60:
c0:e8:20:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org