Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/920FC08607A611EFACA49240017001B1.roa
File: 920FC08607A611EFACA49240017001B1.roa (raw, json)
Hash identifier: Ot1O0adMQTspf0DzhE4p6Yk3vsY4G402JD7wL89wAEk=
Subject key identifier: 9E:A1:32:AA:ED:3B:10:3E:E4:49:64:41:24:66:5F:6E:E2:09:1A:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B33C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/920FC08607A611EFACA49240017001B1.roa
Signing time: Wed 01 May 2024 10:35:47 +0000
ROA not before: Wed 01 May 2024 10:35:42 +0000
ROA not after: Sat 11 May 2024 10:35:42 +0000
asID: 142062
IP address blocks: 154.206.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45884 (0xb33c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 10:35:42 2024 GMT
Not After : May 11 10:35:42 2024 GMT
Subject: CN=66321b03-cfc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:e8:e9:90:cc:6d:58:fc:6f:61:73:c1:94:
d1:10:4d:c5:74:1b:53:89:86:11:6f:e7:4d:9f:17:
d2:b6:04:45:a3:58:6c:43:6a:ad:df:83:69:43:3f:
cc:c2:f5:ef:f8:12:9b:e0:dd:92:38:03:63:bb:99:
00:f6:3a:a8:ba:ba:22:03:d0:4e:d0:e8:a7:4b:a2:
6e:42:6c:54:2a:85:fa:85:42:b3:8c:aa:35:f5:3d:
23:16:22:27:46:24:3f:00:73:c3:89:f2:68:fe:0a:
83:21:0c:1d:ed:88:53:0d:13:8e:12:ff:fd:36:9b:
87:d3:0b:f0:70:84:43:b1:a4:ca:71:f8:55:a2:28:
1f:c0:41:63:c8:4b:0f:3d:7d:f5:83:80:ce:2b:82:
d7:2b:1b:b0:d6:47:96:5e:16:bc:38:b5:2b:d3:44:
76:d1:d6:b9:55:d1:9e:03:d9:1f:42:48:52:58:dd:
c6:e4:14:36:04:6d:b7:92:b4:fd:56:64:75:80:ca:
4d:18:a9:9e:6e:58:27:74:8e:87:ff:6a:35:b7:7e:
3f:f9:9d:1c:4a:bc:a8:d3:a5:4d:3e:fa:44:be:e0:
a1:d7:e9:da:fd:a3:ae:3a:5e:fe:85:a5:ba:4a:8f:
1c:f2:b8:32:20:92:ce:1d:ca:10:f3:11:b8:9e:81:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A1:32:AA:ED:3B:10:3E:E4:49:64:41:24:66:5F:6E:E2:09:1A:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/920FC08607A611EFACA49240017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.229.0/24
Signature Algorithm: sha256WithRSAEncryption
28:77:41:b2:1a:fb:82:10:da:16:75:d5:1b:e0:79:d6:d8:27:
f2:fc:0d:10:d0:91:ec:77:a5:1a:01:ec:e6:01:54:6e:e3:1e:
5f:91:7c:f0:55:ec:0c:5f:41:71:4a:df:8b:8d:65:0f:b3:b2:
0b:72:e3:ed:0d:94:8c:a5:26:65:1b:35:0c:9b:af:a0:71:49:
df:a0:62:bd:64:66:15:82:ae:0d:81:21:6d:4b:3c:25:da:dd:
a6:56:43:d7:89:a0:ba:ab:fc:90:c0:06:cd:eb:dc:d2:ff:28:
ce:e6:91:3c:6c:c8:a8:13:86:a3:65:9a:c3:eb:5c:e5:bd:9e:
89:f7:69:43:f0:fc:bb:31:d2:b0:38:24:e2:a5:f6:76:9a:43:
b3:db:08:cd:d0:76:a6:41:52:15:f7:c0:5b:a2:98:ba:69:f4:
52:02:e4:74:88:b2:fc:bf:d2:2c:43:45:0e:e9:cf:e9:e5:71:
bf:3a:50:04:55:f3:09:02:ce:c2:dd:cc:41:22:36:ab:0d:5e:
d0:0a:84:a8:75:0d:89:21:ce:e5:e3:2b:8a:5e:49:d8:02:ef:
90:51:b0:c1:e4:7e:d9:2c:52:52:ee:4c:f8:ca:b5:e3:82:fa:
56:a1:81:6e:7e:2a:ef:26:36:1f:69:d6:56:2d:0c:89:40:2b:
5a:0f:d0:a9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALM8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTAxMTAzNTQyWhcNMjQwNTExMTAzNTQyWjAYMRYw
FAYDVQQDEw02NjMyMWIwMy1jZmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqzTo6ZDMbVj8b2FzwZTREE3FdBtTiYYRb+dNnxfStgRFo1hsQ2qt34Np
Qz/MwvXv+BKb4N2SOANju5kA9jqouroiA9BO0OinS6JuQmxUKoX6hUKzjKo19T0j
FiInRiQ/AHPDifJo/gqDIQwd7YhTDROOEv/9NpuH0wvwcIRDsaTKcfhVoigfwEFj
yEsPPX31g4DOK4LXKxuw1keWXha8OLUr00R20da5VdGeA9kfQkhSWN3G5BQ2BG23
krT9VmR1gMpNGKmeblgndI6H/2o1t34/+Z0cSryo06VNPvpEvuCh1+na/aOuOl7+
haW6So8c8rgyIJLOHcoQ8xG4noHTuwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJ6h
MqrtOxA+5ElkQSRmX27iCRrTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MjBGQzA4NjA3QTYxMUVGQUNBNDkyNDAwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms7lMA0GCSqGSIb3DQEB
CwUAA4IBAQAod0GyGvuCENoWddUb4HnW2Cfy/A0Q0JHsd6UaAezmAVRu4x5fkXzw
VewMX0FxSt+LjWUPs7ILcuPtDZSMpSZlGzUMm6+gcUnfoGK9ZGYVgq4NgSFtSzwl
2t2mVkPXiaC6q/yQwAbN69zS/yjO5pE8bMioE4ajZZrD61zlvZ6J92lD8Py7MdKw
OCTipfZ2mkOz2wjN0HamQVIV98Bbopi6afRSAuR0iLL8v9IsQ0UO6c/p5XG/OlAE
VfMJAs7C3cxBIjarDV7QCoSodQ2JIc7l4yuKXknYAu+QUbDB5H7ZLFJS7kz4yrXj
gvpWoYFufirvJjYfadZWLQyJQCtaD9Cp
-----END CERTIFICATE-----
Generated at Sun May 12 02:36:21 2024 by rpki-client on console-ams.rpki-client.org