Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CD8363207A911EF848E8357017001B1.roa
File: 7CD8363207A911EF848E8357017001B1.roa (raw, json)
Hash identifier: m7AXYLNwquMUe/A28QyB8JIRh/fU2Ke5np1eEnaYxkg=
Subject key identifier: 83:B8:6F:58:65:28:32:45:84:93:B7:94:8D:D4:6B:07:5C:4E:A6:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B35E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CD8363207A911EF848E8357017001B1.roa
Signing time: Wed 01 May 2024 10:56:40 +0000
ROA not before: Wed 01 May 2024 10:56:36 +0000
ROA not after: Sat 11 May 2024 10:56:36 +0000
asID: 136933
IP address blocks: 154.213.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45918 (0xb35e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 10:56:36 2024 GMT
Not After : May 11 10:56:36 2024 GMT
Subject: CN=66321fe8-6862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1f:d0:99:32:fd:38:90:85:63:75:fb:9f:83:
54:d6:0e:e1:b9:5d:2e:b6:d8:4a:fd:91:59:fb:39:
91:10:78:2e:56:02:c5:61:7d:e9:ed:a0:eb:1a:b7:
fe:43:ef:0d:06:13:5a:9b:ea:24:5b:b0:ef:85:59:
8b:8a:f3:25:f2:0f:e9:6d:ae:52:56:fe:0b:4d:a2:
d1:0b:bf:41:22:e5:e6:01:9e:49:04:50:23:6b:f1:
c5:e6:bf:c8:92:85:3e:4e:ed:26:fa:47:d0:be:03:
cf:30:92:85:4d:64:cd:55:fc:f6:92:df:3a:d4:ab:
be:df:57:d9:ab:06:ef:17:96:b4:79:e8:16:13:bf:
5c:e2:45:24:db:8d:a1:87:87:c9:a8:a4:50:4c:57:
16:fd:96:23:17:a5:16:ec:e8:83:a6:db:d3:96:1c:
76:a9:49:31:16:55:ad:7e:f1:29:be:31:c8:44:e6:
4a:14:68:cf:75:75:72:df:f2:b2:ce:e1:e9:3e:40:
1c:4a:9b:db:ec:c7:62:ca:c3:33:75:2d:95:7c:e0:
98:d3:95:73:6e:15:04:b5:38:de:3b:b4:f0:07:77:
df:8e:38:bc:d7:d1:ae:81:df:1f:d0:e1:8a:ac:6c:
8d:8d:ec:ce:55:8e:55:0d:d5:4c:79:40:ff:ba:47:
9f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B8:6F:58:65:28:32:45:84:93:B7:94:8D:D4:6B:07:5C:4E:A6:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CD8363207A911EF848E8357017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.16.0/24
Signature Algorithm: sha256WithRSAEncryption
29:52:80:e2:31:08:ee:de:1f:3e:c4:d2:95:64:bd:5f:b3:53:
81:c5:dd:b4:3e:bf:9b:25:01:d7:30:79:25:08:13:83:27:41:
36:90:45:44:e5:4b:20:c1:81:98:69:c3:38:3d:bb:5c:28:94:
bb:10:ea:6b:23:32:b8:fe:2c:f1:7d:47:a8:a6:8c:d9:30:a1:
d4:60:43:4c:98:f2:6d:b6:3e:05:55:5b:00:a1:17:61:06:d2:
62:35:4b:20:c8:ec:ee:5e:f3:5f:f6:a6:ae:d8:d9:e9:cd:49:
12:7a:b5:71:fc:b9:46:09:4b:c8:35:a1:96:d3:ea:84:83:1d:
07:bf:37:a1:10:b6:37:75:d8:5e:cd:d6:b3:6a:12:ff:56:4b:
6d:de:27:9b:b0:66:99:2c:83:9a:19:2f:50:aa:34:06:16:a3:
69:16:b7:cf:5e:20:ee:04:7d:89:40:27:f6:b7:f8:94:5a:4d:
7e:d8:5a:56:38:bf:ca:46:bf:ba:8e:a7:69:42:01:79:50:57:
22:82:84:42:76:1a:5a:49:f9:65:26:ee:c7:5e:f7:f5:d7:e6:
16:13:f0:80:da:ab:e0:03:4b:9d:98:07:fe:a5:72:db:d4:eb:
4c:97:d9:60:89:69:c5:82:78:92:ec:f0:2c:eb:45:5c:3b:58:
d9:2f:14:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALNeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTAxMTA1NjM2WhcNMjQwNTExMTA1NjM2WjAYMRYw
FAYDVQQDEw02NjMyMWZlOC02ODYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4h/QmTL9OJCFY3X7n4NU1g7huV0utthK/ZFZ+zmREHguVgLFYX3p7aDr
Grf+Q+8NBhNam+okW7DvhVmLivMl8g/pba5SVv4LTaLRC79BIuXmAZ5JBFAja/HF
5r/IkoU+Tu0m+kfQvgPPMJKFTWTNVfz2kt861Ku+31fZqwbvF5a0eegWE79c4kUk
242hh4fJqKRQTFcW/ZYjF6UW7OiDptvTlhx2qUkxFlWtfvEpvjHIROZKFGjPdXVy
3/KyzuHpPkAcSpvb7MdiysMzdS2VfOCY05VzbhUEtTjeO7TwB3ffjji819Gugd8f
0OGKrGyNjezOVY5VDdVMeUD/ukef9QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIO4
b1hlKDJFhJO3lI3UawdcTqZUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83Q0Q4MzYzMjA3QTkxMUVGODQ4RTgzNTcwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtUQMA0GCSqGSIb3DQEB
CwUAA4IBAQApUoDiMQju3h8+xNKVZL1fs1OBxd20Pr+bJQHXMHklCBODJ0E2kEVE
5UsgwYGYacM4PbtcKJS7EOprIzK4/izxfUeopozZMKHUYENMmPJttj4FVVsAoRdh
BtJiNUsgyOzuXvNf9qau2NnpzUkSerVx/LlGCUvINaGW0+qEgx0HvzehELY3ddhe
zdazahL/Vktt3iebsGaZLIOaGS9QqjQGFqNpFrfPXiDuBH2JQCf2t/iUWk1+2FpW
OL/KRr+6jqdpQgF5UFcigoRCdhpaSfllJu7HXvf11+YWE/CA2qvgA0udmAf+pXLb
1OtMl9lgiWnFgniS7PAs60VcO1jZLxTq
-----END CERTIFICATE-----
Generated at Sun May 12 02:36:21 2024 by rpki-client on console-ams.rpki-client.org