Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/410772460DB011EFA25F8D70017001B1.roa
File: 410772460DB011EFA25F8D70017001B1.roa (raw, json)
Hash identifier: QEPBlCSw6A9QnRa4b3NLsZtnTwCTx5dgyoPLG/sN2LA=
Subject key identifier: 73:DD:67:F2:1D:B3:0B:2A:A3:47:CC:4B:AA:19:18:76:82:91:CD:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B597
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/410772460DB011EFA25F8D70017001B1.roa
Signing time: Thu 09 May 2024 03:00:13 +0000
ROA not before: Thu 09 May 2024 03:00:07 +0000
ROA not after: Thu 16 May 2024 03:00:07 +0000
asID: 147176
IP address blocks: 154.197.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46487 (0xb597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 03:00:07 2024 GMT
Not After : May 16 03:00:07 2024 GMT
Subject: CN=663c3c3d-23a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1f:57:95:ba:32:36:af:05:80:52:7f:17:9b:
d2:13:34:fe:4d:29:eb:82:2d:f4:68:46:43:93:f1:
b7:db:4f:18:c3:1a:67:b5:f0:cc:32:e0:3c:53:e6:
8b:9b:14:e1:1f:d7:cb:15:1e:73:d2:f0:31:a9:ca:
95:18:68:ea:e8:1c:af:30:5f:1f:b5:4c:91:72:b5:
c8:d0:1d:85:01:d6:a9:1e:3f:54:7d:e8:50:2e:97:
51:0b:48:74:40:d1:5e:3a:2c:ab:10:f8:2e:16:45:
75:d6:49:0f:8c:e8:89:55:ed:f2:96:f2:25:a8:27:
66:c9:e7:37:bd:e9:8d:59:2e:74:e2:b5:c3:26:5c:
d4:c7:8c:73:d0:77:42:03:c9:dc:ec:62:8b:6d:d2:
d3:8d:fd:82:60:01:98:49:fc:8e:dd:32:0b:5c:84:
d7:8b:0a:c8:de:11:a4:7c:d7:9b:42:71:66:23:a8:
9e:50:95:83:cb:e9:e8:74:55:6e:0c:f2:6b:ac:be:
7c:ba:0f:0a:4a:8c:fb:80:b8:32:a3:18:37:7a:62:
a9:ac:cf:4d:a8:a2:66:8a:bc:5a:49:a8:0a:5d:7b:
12:b5:10:c3:e4:25:d7:fd:a2:69:8b:87:69:e7:65:
56:63:62:45:16:f5:fe:a0:e5:8d:24:98:b4:1a:ba:
67:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DD:67:F2:1D:B3:0B:2A:A3:47:CC:4B:AA:19:18:76:82:91:CD:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/410772460DB011EFA25F8D70017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.124.0/24
Signature Algorithm: sha256WithRSAEncryption
04:8a:d5:7a:ef:8f:bc:8d:62:d9:76:66:c1:cf:02:bc:70:ac:
06:64:9f:0a:10:b8:47:a2:d2:02:90:9c:6d:08:3b:e7:57:21:
46:41:dc:7c:88:aa:bc:54:ac:6d:23:98:a5:24:59:52:98:89:
e1:5b:33:76:5a:09:c8:52:89:b5:eb:d9:0a:a1:5f:38:57:2d:
cd:3b:2a:06:99:5b:90:53:79:b4:9c:11:a1:8a:a8:00:4c:1d:
ee:e9:7a:17:8e:42:a6:57:70:15:73:33:b0:f7:40:b8:27:8c:
94:03:db:b1:02:73:73:33:f3:1b:63:31:c9:ce:a6:e0:6c:47:
6c:dc:5d:38:42:dd:78:66:86:4b:3c:ee:64:47:18:c9:84:1c:
5a:90:c5:32:d7:a0:7c:2e:b7:39:e9:e0:96:0e:ce:86:5a:8e:
51:14:4a:48:5f:83:6a:b7:9f:11:d8:a8:42:ee:67:5a:69:0b:
c9:a1:4f:50:0a:77:8f:ce:f5:f2:3a:fe:02:2b:d3:71:a6:27:
03:cc:d6:aa:f1:9b:30:0c:6a:02:04:d3:05:a8:12:98:eb:27:
ec:46:42:88:4c:f4:d3:85:06:73:1c:c1:26:15:d2:66:83:aa:
76:a1:ac:4d:53:74:85:c9:36:f1:c6:0e:c6:16:66:b0:44:12:
cf:9a:69:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALWXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA5MDMwMDA3WhcNMjQwNTE2MDMwMDA3WjAYMRYw
FAYDVQQDEw02NjNjM2MzZC0yM2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzh9XlboyNq8FgFJ/F5vSEzT+TSnrgi30aEZDk/G3208YwxpntfDMMuA8
U+aLmxThH9fLFR5z0vAxqcqVGGjq6ByvMF8ftUyRcrXI0B2FAdapHj9UfehQLpdR
C0h0QNFeOiyrEPguFkV11kkPjOiJVe3ylvIlqCdmyec3vemNWS504rXDJlzUx4xz
0HdCA8nc7GKLbdLTjf2CYAGYSfyO3TILXITXiwrI3hGkfNebQnFmI6ieUJWDy+no
dFVuDPJrrL58ug8KSoz7gLgyoxg3emKprM9NqKJmirxaSagKXXsStRDD5CXX/aJp
i4dp52VWY2JFFvX+oOWNJJi0GrpnbQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHPd
Z/Idswsqo0fMS6oZGHaCkc0YMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MTA3NzI0NjBEQjAxMUVGQTI1RjhENzAwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsV8MA0GCSqGSIb3DQEB
CwUAA4IBAQAEitV674+8jWLZdmbBzwK8cKwGZJ8KELhHotICkJxtCDvnVyFGQdx8
iKq8VKxtI5ilJFlSmInhWzN2WgnIUom169kKoV84Vy3NOyoGmVuQU3m0nBGhiqgA
TB3u6XoXjkKmV3AVczOw90C4J4yUA9uxAnNzM/MbYzHJzqbgbEds3F04Qt14ZoZL
PO5kRxjJhBxakMUy16B8Lrc56eCWDs6GWo5RFEpIX4Nqt58R2KhC7mdaaQvJoU9Q
CnePzvXyOv4CK9NxpicDzNaq8ZswDGoCBNMFqBKY6yfsRkKITPTThQZzHMEmFdJm
g6p2oaxNU3SFyTbxxg7GFmawRBLPmmk5
-----END CERTIFICATE-----
Generated at Thu May 16 07:46:20 2024 by rpki-client on console-ams.rpki-client.org