Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ED6E72B43E4011ED95730DB0F1222468.roa
File: ED6E72B43E4011ED95730DB0F1222468.roa (raw, json)
Hash identifier: SscRXSdD6KHtNG/iCgojxsMnIbwJLhoV8ttdurXIm2Q=
Subject key identifier: 33:57:47:D2:EE:F4:26:E6:CB:3A:F8:2D:AD:BE:22:49:CD:79:55:FE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 09C2
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ED6E72B43E4011ED95730DB0F1222468.roa
Signing time: Tue 27 Sep 2022 08:46:50 +0000
ROA not before: Tue 27 Sep 2022 08:46:45 +0000
ROA not after: Sat 30 Sep 2023 08:46:45 +0000
asID: 61317
IP address blocks: 154.16.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2498 (0x9c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 27 08:46:45 2022 GMT
Not After : Sep 30 08:46:45 2023 GMT
Subject: CN=6332b87a-8b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:18:d3:d4:3d:ce:db:cc:66:f8:38:f0:74:
d1:4f:56:22:cb:52:24:49:74:b9:07:e6:51:34:8c:
ad:1d:17:29:9c:dd:71:0c:b3:0e:a5:63:80:1d:bf:
80:6a:c3:fe:7f:28:e3:38:fd:08:77:09:77:23:1a:
6e:4b:c8:3c:d2:4e:aa:27:cd:4c:0f:ca:8e:95:ab:
e8:30:6f:38:6f:e9:2e:dd:4e:d6:d0:c6:21:78:29:
8d:28:81:ca:a5:41:1b:fa:6f:ba:73:de:45:19:76:
37:51:16:49:dd:ea:6b:76:ab:8c:41:94:36:fd:21:
0e:26:89:79:ff:a4:9b:be:d3:53:c2:51:05:09:67:
0e:a4:df:f6:45:5d:21:a6:ef:fc:a8:2e:06:c5:10:
04:c1:c8:8b:5a:47:49:d7:09:a5:0b:84:b6:63:cd:
d0:01:97:71:37:82:01:9f:48:97:e2:f0:27:93:c1:
62:28:4f:76:32:ed:f6:06:3a:f2:c6:1e:86:ba:c8:
f7:f0:a8:ae:09:f9:b6:3c:82:0b:46:32:25:9b:fa:
55:ed:2b:71:94:c4:ed:21:e0:e4:cf:c0:a5:3c:56:
e8:e8:8c:15:f3:bb:32:dd:d1:f5:c9:85:87:02:f5:
5d:95:b7:0f:da:d1:ad:35:98:67:a5:34:58:b7:14:
5a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:57:47:D2:EE:F4:26:E6:CB:3A:F8:2D:AD:BE:22:49:CD:79:55:FE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ED6E72B43E4011ED95730DB0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.40.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:22:5a:5e:d1:95:1e:40:b7:e3:18:22:27:56:07:29:a6:0f:
74:6c:74:c7:24:f1:a9:a6:e8:2e:e6:63:8f:36:86:76:c6:b2:
0f:2b:b7:cc:54:8d:76:25:80:fb:73:ba:eb:74:22:22:b4:11:
ea:13:c2:df:2b:40:b4:93:b9:64:a8:da:d7:47:70:f8:37:23:
ed:8e:5a:f7:31:9e:a5:60:d6:fb:0f:98:72:92:f0:5f:15:79:
00:08:54:01:45:99:3a:2f:e2:43:da:13:ed:df:79:9b:4d:45:
f8:3d:ee:49:9f:f9:13:ab:36:2f:bb:ee:93:37:a5:09:72:37:
b5:e2:d9:2e:6b:c9:24:66:fc:8f:9d:0e:e5:a5:44:b9:ce:19:
78:c4:8c:5b:87:2b:cb:a0:69:87:08:bc:44:1a:99:c8:38:c4:
3d:d2:db:49:f8:de:e8:ea:bf:bd:97:84:d9:e8:40:89:01:f7:
cb:72:2a:bc:4a:21:fa:f9:f0:ed:b9:8b:63:5c:c6:e1:45:02:
2d:3c:7a:96:63:ae:67:be:4f:a5:9d:6b:44:df:cd:7b:9e:a4:
4b:98:58:70:fa:d0:50:04:60:02:5d:42:6e:b8:34:66:54:9b:
51:80:94:0c:be:73:ff:ee:5b:e0:82:30:ed:79:72:49:6b:c7:
e7:8d:fa:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 01:07:50 2023 by rpki-client on console-fra.rpki-client.org