Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/059952FE088511EFAEE76554017001B1.roa
File: 059952FE088511EFAEE76554017001B1.roa (raw, json)
Hash identifier: 7hMzzn0qwrtAi72gV+lsGRf8kJ1WvZ8C5AL8YwnVE0s=
Subject key identifier: E4:99:5C:D0:7D:4B:A5:40:35:C7:16:5E:CE:8D:C5:3B:93:EB:A5:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B3BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/059952FE088511EFAEE76554017001B1.roa
Signing time: Thu 02 May 2024 13:08:09 +0000
ROA not before: Thu 02 May 2024 13:08:06 +0000
ROA not after: Sun 12 May 2024 13:08:06 +0000
asID: 45194
IP address blocks: 154.84.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46014 (0xb3be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 13:08:06 2024 GMT
Not After : May 12 13:08:06 2024 GMT
Subject: CN=66339039-9d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:8d:c4:f1:e0:ed:48:bd:d4:7c:c4:59:27:
7b:f1:36:50:4d:70:1c:e5:63:b5:3a:e3:18:f9:8c:
30:24:12:24:bb:8b:1b:0d:cd:2d:33:12:a8:95:ed:
a1:b1:02:cf:de:2d:24:c1:b0:0a:79:68:00:e7:71:
9c:bf:ce:b7:14:6e:99:04:4e:de:1c:b4:54:95:7f:
aa:bb:e1:36:27:45:95:c8:37:90:85:12:58:16:5e:
1a:91:67:2a:27:7d:fd:8c:36:8f:74:11:c2:66:b4:
11:e1:07:55:90:4a:2e:5e:d2:be:3b:9c:aa:45:be:
89:45:74:58:aa:d1:d7:cd:85:15:3e:61:ed:e5:f7:
5a:06:ae:18:d6:51:0f:81:df:c5:ef:dd:92:2b:f8:
38:53:14:06:4d:6c:b7:2f:77:d1:f2:78:40:88:5c:
a1:f6:46:e3:70:87:01:f4:6a:49:e9:16:19:85:26:
01:04:f4:a5:e2:18:e2:9b:4c:8b:51:74:37:dd:53:
f0:bb:87:b0:98:98:4c:9b:d0:e2:84:2c:c2:10:fb:
28:74:10:24:69:0b:a1:43:c9:6b:15:8f:a5:c4:72:
a1:58:78:72:d9:f3:b3:49:12:c9:48:20:78:0d:a1:
1f:3e:46:e2:d9:77:90:ce:71:7b:d1:7f:fa:8b:f5:
5b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:99:5C:D0:7D:4B:A5:40:35:C7:16:5E:CE:8D:C5:3B:93:EB:A5:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/059952FE088511EFAEE76554017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.192.0/18
Signature Algorithm: sha256WithRSAEncryption
5c:5a:c2:72:1e:a3:92:fc:ff:c9:70:7c:39:56:7b:87:1b:4a:
32:53:8a:09:69:ab:cb:4a:c1:98:ea:ab:62:02:3e:af:d8:05:
e8:01:f2:6b:44:7e:6c:7a:5d:de:da:fb:3b:f2:c3:dc:a4:83:
0d:9b:9c:43:95:bf:e2:e7:34:01:26:20:d6:99:89:01:2c:be:
99:53:84:96:dd:11:0e:cc:a7:04:97:bb:b8:54:68:8a:1d:e9:
55:43:3c:12:bf:a5:ae:90:ee:97:49:52:59:50:cf:2e:5f:b0:
31:bb:3b:2b:12:90:fe:bf:21:7b:36:62:91:fa:f7:37:39:93:
aa:98:ed:60:31:b5:d7:4d:07:a9:bb:93:a1:c2:44:67:ce:6a:
05:87:fd:51:a1:ae:a5:7f:24:56:40:71:31:9f:78:81:cf:22:
e3:07:f0:c0:87:6f:a6:11:50:a1:04:aa:89:70:aa:53:03:44:
a1:d4:27:31:5d:ed:3b:ad:57:7e:51:76:dc:ec:25:20:21:17:
bd:38:98:29:48:59:9a:b4:4e:66:7f:64:12:21:92:3d:5f:ad:
00:09:d3:ab:c2:1d:77:4e:52:0d:3f:92:db:4f:8d:1f:5e:24:
5f:44:6c:94:c3:22:ac:c3:ab:f5:70:36:22:ad:ba:36:8e:00:
14:61:0f:9c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALO+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTAyMTMwODA2WhcNMjQwNTEyMTMwODA2WjAYMRYw
FAYDVQQDEw02NjMzOTAzOS05ZDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs9KNxPHg7Ui91HzEWSd78TZQTXAc5WO1OuMY+YwwJBIku4sbDc0tMxKo
le2hsQLP3i0kwbAKeWgA53Gcv863FG6ZBE7eHLRUlX+qu+E2J0WVyDeQhRJYFl4a
kWcqJ339jDaPdBHCZrQR4QdVkEouXtK+O5yqRb6JRXRYqtHXzYUVPmHt5fdaBq4Y
1lEPgd/F792SK/g4UxQGTWy3L3fR8nhAiFyh9kbjcIcB9GpJ6RYZhSYBBPSl4hji
m0yLUXQ33VPwu4ewmJhMm9DihCzCEPsodBAkaQuhQ8lrFY+lxHKhWHhy2fOzSRLJ
SCB4DaEfPkbi2XeQznF70X/6i/VbvQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOSZ
XNB9S6VANccWXs6NxTuT66VpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNTk5NTJGRTA4ODUxMUVGQUVFNzY1NTQwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmlTAMA0GCSqGSIb3DQEB
CwUAA4IBAQBcWsJyHqOS/P/JcHw5VnuHG0oyU4oJaavLSsGY6qtiAj6v2AXoAfJr
RH5sel3e2vs78sPcpIMNm5xDlb/i5zQBJiDWmYkBLL6ZU4SW3REOzKcEl7u4VGiK
HelVQzwSv6WukO6XSVJZUM8uX7AxuzsrEpD+vyF7NmKR+vc3OZOqmO1gMbXXTQep
u5OhwkRnzmoFh/1Roa6lfyRWQHExn3iBzyLjB/DAh2+mEVChBKqJcKpTA0Sh1Ccx
Xe07rVd+UXbc7CUgIRe9OJgpSFmatE5mf2QSIZI9X60ACdOrwh13TlINP5LbT40f
XiRfRGyUwyKsw6v1cDYirbo2jgAUYQ+c
-----END CERTIFICATE-----
Generated at Mon May 13 02:12:05 2024 by rpki-client on console-fra.rpki-client.org