Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D600BE1607B111EF9543471D017001B1.roa
File: D600BE1607B111EF9543471D017001B1.roa (raw, json)
Hash identifier: wTa+IML4x0KVw2rzgYJ2M91KUV3hzpb1T0SJwyMVzxE=
Subject key identifier: 23:D0:DE:0D:D6:41:89:08:A8:0F:92:A2:EB:3A:02:37:0D:B2:9A:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8743
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D600BE1607B111EF9543471D017001B1.roa
Signing time: Wed 01 May 2024 11:56:25 +0000
ROA not before: Wed 01 May 2024 11:56:22 +0000
ROA not after: Sat 11 May 2024 11:56:22 +0000
asID: 44559
IP address blocks: 156.233.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34627 (0x8743)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 11:56:22 2024 GMT
Not After : May 11 11:56:22 2024 GMT
Subject: CN=66322de9-55ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:c2:c3:92:be:51:3e:96:78:bc:54:33:f1:
25:e0:cb:9f:95:27:d3:98:90:f7:bd:05:cd:4d:8b:
47:94:b0:fa:13:4e:f8:b5:62:a0:f6:41:9a:38:b2:
66:20:d2:8c:00:f7:f2:f1:0e:1f:cc:42:0a:d6:5a:
7a:06:14:cf:4a:40:65:51:f0:d7:d8:17:46:b1:ad:
45:f5:5c:70:96:dd:4b:8e:e6:c1:41:32:24:ba:bc:
ae:94:14:a2:73:4d:54:5f:5e:13:e1:f8:3e:4d:e4:
fc:71:68:79:14:e0:00:21:06:9d:d2:2b:27:87:8b:
ec:59:d3:46:40:65:ac:86:f9:ca:f2:36:b1:f9:40:
f7:94:07:c0:47:fd:a3:00:06:19:8f:41:e1:6e:13:
ac:f7:6c:c1:ea:3c:4d:a7:73:6a:cf:4e:c4:65:2c:
df:8a:87:30:69:6d:c3:79:3d:a2:13:ca:dc:55:32:
93:68:bd:1c:5d:88:e8:c8:35:8b:d5:b9:77:fa:a3:
81:ca:b6:ec:e5:9a:c7:26:d0:c3:1a:17:52:39:e0:
f5:21:86:13:02:c5:ea:9b:a3:be:c6:c0:f9:da:cd:
2a:18:7e:99:9a:74:91:1b:0b:34:83:15:59:b3:59:
77:96:f1:ff:b1:43:86:9f:a9:37:93:c6:8e:a2:f3:
40:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D0:DE:0D:D6:41:89:08:A8:0F:92:A2:EB:3A:02:37:0D:B2:9A:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D600BE1607B111EF9543471D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.128.0/17
Signature Algorithm: sha256WithRSAEncryption
09:43:c3:96:10:dd:f4:73:01:4a:9a:5b:96:de:c8:69:7c:83:
ff:1c:6a:3e:f7:53:00:6d:81:c4:ee:d8:2f:4e:ec:50:44:2d:
9d:7a:82:a8:47:a8:22:f2:16:1b:d6:65:77:e0:da:7a:ca:67:
90:2d:90:6a:d8:4d:d5:18:da:3c:eb:27:2e:17:4d:16:6d:1d:
bc:a7:c4:e0:e1:5d:41:a5:b7:b4:3b:7a:60:80:99:39:ad:37:
89:6c:68:a0:27:c8:59:bf:89:6a:2b:f1:4e:63:f4:af:ef:3a:
6e:d2:ab:3b:ac:a3:ba:40:be:ce:ff:94:43:e8:f2:53:1d:ba:
2f:cc:93:60:8e:a4:0e:ba:70:8c:22:2a:1c:6c:50:64:ce:21:
0f:39:9b:8d:f9:82:67:53:f1:fc:6b:9f:85:22:f1:2f:0b:53:
c5:0d:52:a5:d0:a1:51:01:d6:63:3b:14:03:55:fc:4c:7d:9d:
df:82:b6:97:8a:2a:ef:97:ae:cf:d5:19:1f:a0:b0:d6:db:a6:
f8:ba:64:a0:16:55:de:f2:2c:d7:51:4f:bb:69:15:05:34:39:
ec:6d:49:4e:ce:d5:cd:47:70:0f:16:14:7a:b6:ae:dc:1e:e8:
40:69:60:27:ab:db:18:6c:35:2f:6d:06:49:9a:f6:08:b2:32:
33:bf:44:0a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIdDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNTAxMTE1NjIyWhcNMjQwNTExMTE1NjIyWjAYMRYw
FAYDVQQDEw02NjMyMmRlOS01NWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu6XCw5K+UT6WeLxUM/El4MuflSfTmJD3vQXNTYtHlLD6E074tWKg9kGa
OLJmINKMAPfy8Q4fzEIK1lp6BhTPSkBlUfDX2BdGsa1F9Vxwlt1LjubBQTIkuryu
lBSic01UX14T4fg+TeT8cWh5FOAAIQad0isnh4vsWdNGQGWshvnK8jax+UD3lAfA
R/2jAAYZj0HhbhOs92zB6jxNp3Nqz07EZSzfiocwaW3DeT2iE8rcVTKTaL0cXYjo
yDWL1bl3+qOByrbs5ZrHJtDDGhdSOeD1IYYTAsXqm6O+xsD52s0qGH6ZmnSRGws0
gxVZs1l3lvH/sUOGn6k3k8aOovNAWQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCPQ
3g3WQYkIqA+Sous6AjcNsprXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENjAwQkUxNjA3QjExMUVGOTU0MzQ3MUQwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHnOmAMA0GCSqGSIb3DQEBCwUA
A4IBAQAJQ8OWEN30cwFKmluW3shpfIP/HGo+91MAbYHE7tgvTuxQRC2deoKoR6gi
8hYb1mV34Np6ymeQLZBq2E3VGNo86ycuF00WbR28p8Tg4V1Bpbe0O3pggJk5rTeJ
bGigJ8hZv4lqK/FOY/Sv7zpu0qs7rKO6QL7O/5RD6PJTHbovzJNgjqQOunCMIioc
bFBkziEPOZuN+YJnU/H8a5+FIvEvC1PFDVKl0KFRAdZjOxQDVfxMfZ3fgraXiirv
l67P1RkfoLDW26b4umSgFlXe8izXUU+7aRUFNDnsbUlOztXNR3APFhR6tq7cHuhA
aWAnq9sYbDUvbQZJmvYIsjIzv0QK
-----END CERTIFICATE-----
Generated at Sun May 12 02:36:23 2024 by rpki-client on console-ams.rpki-client.org