Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FE551EFAC61011ECB2AA6A84F1222468.roa
File: FE551EFAC61011ECB2AA6A84F1222468.roa (raw, json)
Hash identifier: dOgvT+/PrJUo6RcegN7KRviI/c3/k8Qu/p18XRtrwRE=
Subject key identifier: 4F:80:67:65:F4:B3:19:82:3D:7E:2E:4C:92:8B:04:43:D3:BC:95:3F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 083F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FE551EFAC61011ECB2AA6A84F1222468.roa
Signing time: Wed 27 Apr 2022 10:01:23 +0000
ROA not before: Wed 27 Apr 2022 10:01:19 +0000
ROA not after: Thu 27 Apr 2023 10:01:19 +0000
asID: 174
IP address blocks: 154.16.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2111 (0x83f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 27 10:01:19 2022 GMT
Not After : Apr 27 10:01:19 2023 GMT
Subject: CN=62691473-d98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cc:f5:2d:82:50:e0:3f:12:34:de:0f:5e:46:
85:22:39:cc:d9:fe:31:03:c2:df:5f:1b:19:46:0a:
f5:bc:e7:76:01:d7:57:b3:0b:40:0f:91:2a:4e:ef:
4e:5c:2b:56:d6:79:35:ee:da:bc:a0:0a:20:bd:96:
17:6a:c9:dc:df:95:36:a6:30:c4:8b:41:1f:e1:30:
8b:4e:0f:76:6a:72:b0:08:37:93:2b:5a:55:b9:23:
10:36:bb:3b:1d:8f:3d:c4:89:61:fb:9f:75:b0:3e:
e2:87:fe:25:27:f3:23:dc:66:bf:53:0a:75:72:a7:
ed:66:eb:ef:80:29:66:03:ce:91:61:7f:8f:18:e0:
1a:8d:7a:6b:fd:7b:bd:f1:d2:e6:b9:00:1b:44:ee:
ce:23:d1:0d:ed:87:65:7f:57:8b:64:43:68:b5:b0:
5c:2e:5a:8e:e1:ad:3c:9f:58:3e:5b:da:e1:a1:5e:
76:70:2a:f3:5f:5c:99:29:65:9a:59:02:0e:bb:36:
c9:8e:38:ca:34:a8:45:01:3f:05:6c:08:5e:96:46:
d1:bc:73:05:42:22:f1:82:4d:a7:c2:99:95:cf:36:
35:f0:1a:e6:dc:ce:56:7f:59:3f:91:0d:ff:14:d3:
b1:45:e3:24:46:e0:3e:ea:4e:71:67:b5:09:4d:92:
a2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:80:67:65:F4:B3:19:82:3D:7E:2E:4C:92:8B:04:43:D3:BC:95:3F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FE551EFAC61011ECB2AA6A84F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.192.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:a2:44:2b:68:79:8d:80:d8:7b:ee:69:02:54:f0:42:f2:46:
5a:0c:81:33:56:85:fd:0c:f7:4b:54:c2:a6:8f:99:05:f0:63:
61:73:a9:9f:0f:7e:23:07:6e:79:f8:82:24:cc:8e:b3:97:08:
84:c4:8a:9b:cc:63:37:41:72:77:03:20:5f:83:80:40:55:3e:
8c:a8:ba:36:f2:16:5e:68:92:59:b0:33:05:ec:b4:24:6f:70:
4d:1c:04:25:f0:57:e0:44:c1:ac:33:cf:3f:47:b3:f3:49:84:
05:51:fe:71:8a:50:f3:3e:21:86:1a:44:23:57:05:67:1f:83:
17:1f:d9:53:b9:aa:9f:4a:4f:12:3d:99:b6:2b:52:68:c9:1b:
d5:15:7e:2d:8b:5c:49:2a:a4:ca:fb:63:75:4f:91:92:40:d5:
66:91:43:7e:e0:85:1b:e0:7d:4d:0c:bb:a8:60:0f:f9:0d:8b:
f9:bc:8e:d7:49:75:05:56:4c:82:97:43:93:71:c9:6c:15:48:
5b:48:86:b2:11:f3:47:bf:b7:f8:e0:6a:fe:18:68:1e:00:ed:
7b:1c:43:4b:79:bc:53:af:b3:c3:31:33:b9:26:3d:4c:29:f1:
dc:74:7d:58:60:aa:0b:94:13:9b:ff:72:3d:fb:96:9d:11:56:
20:97:95:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:03 2023 by rpki-client on console-fra.rpki-client.org