Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F0B2CC46BD7611EBB7718761F8AEA228.roa
File: F0B2CC46BD7611EBB7718761F8AEA228.roa (raw, json)
Hash identifier: crAyrQV/NCeD+1xW0Tj50b1wfp7XMH4LkgPVkr0LWl8=
Subject key identifier: 5F:74:CB:93:C3:89:E1:4D:F0:04:29:0D:24:EA:2D:D3:0D:6D:23:EC
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0598
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F0B2CC46BD7611EBB7718761F8AEA228.roa
Signing time: Tue 25 May 2021 16:33:31 +0000
ROA not before: Tue 25 May 2021 16:33:27 +0000
ROA not after: Tue 24 May 2022 16:33:27 +0000
asID: 212238
IP address blocks: 154.16.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1432 (0x598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 25 16:33:27 2021 GMT
Not After : May 24 16:33:27 2022 GMT
Subject: CN=60ad26db-300a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:ad:34:21:47:1d:de:97:a3:01:dc:83:89:
7b:8e:a2:af:9e:7d:81:aa:5f:75:43:9c:f0:cd:b8:
67:f5:b8:1f:2e:de:76:de:0f:35:81:67:d8:c0:49:
64:e5:65:eb:e1:b6:78:67:70:2f:95:3b:d6:07:04:
fb:b2:16:f2:a8:e1:2c:ae:e4:0c:5e:17:fe:c9:f2:
29:1c:b9:83:87:64:9d:f4:c2:61:cd:83:53:43:6c:
40:77:7c:b9:e4:67:5b:b0:c5:78:c8:b2:4a:1e:d3:
92:51:a9:6f:cf:53:9a:57:e2:f6:79:21:4d:25:1f:
68:27:d8:fd:c5:90:6e:b8:8c:6c:54:40:eb:06:e5:
30:99:49:28:73:69:05:c9:3d:c3:42:cd:57:fb:ef:
23:81:f4:2e:00:4b:29:ea:f2:ce:72:60:9b:a6:3c:
8e:ec:1e:07:1e:52:77:a1:d0:02:56:da:bc:95:0d:
c8:99:14:46:da:b1:5c:5e:35:74:01:b3:ca:85:6b:
14:ee:96:22:bf:ed:e8:70:33:62:13:ab:cf:0a:e9:
bd:1a:fd:10:26:c5:eb:e3:5c:4d:a4:0f:12:99:48:
c4:f2:a8:37:21:cb:f5:d9:a7:71:d4:31:f6:e4:79:
63:72:59:fe:09:6f:ac:4b:b1:d3:f9:a7:7d:38:b0:
35:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:74:CB:93:C3:89:E1:4D:F0:04:29:0D:24:EA:2D:D3:0D:6D:23:EC
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F0B2CC46BD7611EBB7718761F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.139.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ab:31:86:3c:68:8c:d6:6d:1c:9a:2d:78:5b:40:0f:da:92:
02:53:ee:ed:e7:53:22:4a:9c:d9:78:85:69:f0:f6:45:fc:ec:
0d:7e:88:d9:79:9f:ee:52:49:76:e9:6d:8e:b4:71:17:c6:02:
f5:7a:ca:be:ae:e5:fa:11:8f:5b:a2:24:3b:3d:b9:46:c3:9f:
78:32:98:07:f3:fd:5e:6d:fb:c1:7d:69:c7:c5:2f:1f:1b:df:
1e:2d:a2:02:4b:3a:c6:9e:ae:1c:50:82:b9:c3:ae:00:4a:c0:
0e:49:4a:28:7a:e1:87:4c:e9:cf:57:dd:2d:7d:08:a5:5b:66:
19:13:66:83:22:a9:55:dc:94:d8:04:0d:e4:96:73:ba:ce:00:
f5:c3:59:c7:73:6b:67:b6:05:b2:e0:3e:47:b6:d5:42:36:c5:
9e:22:ef:fd:4e:57:4b:15:23:81:85:85:9f:8a:33:e6:7f:3c:
56:ba:63:41:d5:32:ce:b0:d6:bb:86:e3:1a:a7:d5:09:a5:de:
f2:cf:48:f9:5c:76:49:39:80:48:74:3c:3c:b8:e4:bd:e4:e2:
7e:fe:0d:b0:5a:b7:5c:a7:bd:65:f8:2a:cc:16:d3:a7:1e:bf:
cf:05:32:ac:7d:33:db:ab:26:10:f4:f3:58:01:b7:dc:d9:e1:
0b:c0:4f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:03 2023 by rpki-client on console-fra.rpki-client.org