Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/217766A857D111ECBE0370B95A40D577.roa
File: 217766A857D111ECBE0370B95A40D577.roa (raw, json)
Hash identifier: OkzAAd1/HL9vjfqjYyf8fEFhCn082Y/F5dVhZu3sP1U=
Subject key identifier: C4:E4:24:61:51:35:60:A3:B0:CE:D6:15:7D:96:01:80:D7:51:9F:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1333
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/217766A857D111ECBE0370B95A40D577.roa
Signing time: Wed 08 Dec 2021 02:47:06 +0000
ROA not before: Wed 08 Dec 2021 02:47:03 +0000
ROA not after: Fri 30 Dec 2022 02:47:03 +0000
asID: 9009
IP address blocks: 154.92.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4915 (0x1333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 8 02:47:03 2021 GMT
Not After : Dec 30 02:47:03 2022 GMT
Subject: CN=61b01caa-cc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:7f:23:b6:3d:77:0f:f2:09:0f:97:7c:31:
b1:32:66:3d:f4:4e:9f:1d:7b:68:e6:48:70:a1:fb:
a5:45:29:82:f5:e6:dd:1a:d8:73:00:fc:e0:12:f5:
df:00:e3:cf:f6:cc:4a:8c:40:f5:9b:d1:1a:64:b5:
9d:89:62:b2:00:93:c4:93:98:5f:4d:1a:98:90:f3:
1c:38:02:aa:ea:2a:45:8c:e8:c6:fd:d1:16:20:bc:
24:d5:5c:9e:5c:24:d3:a9:27:a0:f7:8c:ab:e3:f3:
ca:3f:fe:cc:75:00:b1:c6:d7:02:f1:2c:3e:39:cf:
62:b3:83:d6:80:29:85:b1:68:61:93:4a:6c:5b:ce:
46:5e:bf:bd:d6:3b:83:65:79:6d:a6:4f:31:3b:42:
56:94:73:04:f5:3d:a1:0f:b5:a2:3d:2a:d0:b1:fd:
b4:4f:64:db:ec:29:ef:f0:54:c5:b1:a8:01:42:9a:
2b:9b:a7:4a:c8:b6:57:20:6d:ba:e4:53:4a:ff:4a:
bc:3a:ec:81:1c:ea:0f:90:1c:8c:0e:f2:63:9e:4c:
47:1a:08:70:9b:5b:88:d1:b7:e9:0f:4d:1f:bb:d7:
0a:af:be:f5:3d:59:2a:86:8e:1e:70:e4:5f:47:db:
12:65:8d:c0:3c:04:74:2b:a6:a3:fc:99:1e:ea:1b:
d4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E4:24:61:51:35:60:A3:B0:CE:D6:15:7D:96:01:80:D7:51:9F:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/217766A857D111ECBE0370B95A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.127.0/24
Signature Algorithm: sha256WithRSAEncryption
79:8b:c2:a7:20:48:d5:dd:8f:0b:ba:1a:02:ab:85:e7:ed:63:
e0:e1:af:d6:74:b0:f5:c1:98:d3:d8:66:b4:59:e3:8e:66:91:
4a:90:84:60:5e:bb:a8:33:b4:8f:c6:12:d6:8e:46:67:fc:5f:
30:d7:0b:f8:51:99:0a:29:6b:a0:b9:5c:ef:d5:97:c6:ff:3e:
9f:d5:7a:79:cf:f9:8b:b0:cc:f7:40:03:2e:ad:a2:b3:f6:b1:
20:15:7e:01:3d:cf:be:6a:cd:b1:be:49:1d:8b:aa:be:ba:31:
e9:cf:b4:23:e2:de:81:a6:f9:8d:f0:b0:b8:c5:98:33:34:47:
55:de:75:cb:52:38:e7:74:84:88:b3:2c:7c:50:7f:74:93:ba:
96:57:f3:33:4b:48:1e:9c:6b:1b:61:d5:33:9b:db:78:14:7a:
27:75:ec:61:90:8f:d8:8d:0c:a8:d9:a3:6f:77:eb:93:ae:3a:
27:7e:56:98:c0:a6:ce:89:75:c1:8a:19:8e:b7:0c:d2:6a:01:
3d:a4:74:d4:bb:d8:93:65:cd:b1:3d:79:fd:22:3c:f2:56:fc:
5a:8b:fd:b5:79:fe:7e:9a:7d:81:40:8d:82:33:f4:b1:b4:0e:
16:23:81:2b:39:51:5f:8a:e2:f0:5c:a9:08:70:e4:f3:87:a1:
7f:27:b8:2e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEzMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTEyMDgwMjQ3MDNaFw0yMjEyMzAwMjQ3MDNaMBgxFjAU
BgNVBAMMDTYxYjAxY2FhLWNjMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/7n8jtj13D/IJD5d8MbEyZj30Tp8de2jmSHCh+6VFKYL15t0a2HMA/OAS
9d8A48/2zEqMQPWb0RpktZ2JYrIAk8STmF9NGpiQ8xw4AqrqKkWM6Mb90RYgvCTV
XJ5cJNOpJ6D3jKvj88o//sx1ALHG1wLxLD45z2Kzg9aAKYWxaGGTSmxbzkZev73W
O4NleW2mTzE7QlaUcwT1PaEPtaI9KtCx/bRPZNvsKe/wVMWxqAFCmiubp0rItlcg
bbrkU0r/Srw67IEc6g+QHIwO8mOeTEcaCHCbW4jRt+kPTR+71wqvvvU9WSqGjh5w
5F9H2xJljcA8BHQrpqP8mR7qG9RVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUxOQk
YVE1YKOwztYVfZYBgNdRnwswHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzIxNzc2NkE4NTdEMTExRUNCRTAzNzBCOTVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaXH8wDQYJKoZIhvcNAQEL
BQADggEBAHmLwqcgSNXdjwu6GgKrheftY+Dhr9Z0sPXBmNPYZrRZ445mkUqQhGBe
u6gztI/GEtaORmf8XzDXC/hRmQopa6C5XO/Vl8b/Pp/VennP+YuwzPdAAy6torP2
sSAVfgE9z75qzbG+SR2Lqr66MenPtCPi3oGm+Y3wsLjFmDM0R1XedctSOOd0hIiz
LHxQf3STupZX8zNLSB6caxth1TOb23gUeid17GGQj9iNDKjZo29365OuOid+VpjA
ps6JdcGKGY63DNJqAT2kdNS72JNlzbE9ef0iPPJW/FqL/bV5/n6afYFAjYIz9LG0
DhYjgSs5UV+K4vBcqQhw5POHoX8nuC4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-fra.rpki-client.org