Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33B9F460E1A711EC972434C6F1222468.roa
File: 33B9F460E1A711EC972434C6F1222468.roa (raw, json)
Hash identifier: Z4ZinZEYMcD4ygvgPk7CUZ7qybGhjrG/sOQm6Wx7KE8=
Subject key identifier: DB:5C:B6:46:3B:D9:D6:ED:0C:DF:5B:6E:CC:68:61:29:70:90:62:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 168B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33B9F460E1A711EC972434C6F1222468.roa
Signing time: Wed 01 Jun 2022 12:34:39 +0000
ROA not before: Wed 01 Jun 2022 12:34:34 +0000
ROA not after: Fri 30 Jun 2023 12:34:34 +0000
asID: 3491
IP address blocks: 154.208.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5771 (0x168b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 1 12:34:34 2022 GMT
Not After : Jun 30 12:34:34 2023 GMT
Subject: CN=62975cde-0072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:fb:1d:ce:af:8e:52:de:b8:fe:5c:df:0f:
ab:64:be:60:b8:2f:63:fa:28:59:1c:7b:13:5c:d9:
df:24:3d:f8:99:a4:97:91:1d:15:bc:c1:d1:d3:d8:
f4:c8:49:78:93:b6:2b:24:2f:a1:c3:6f:91:92:1a:
f9:19:7e:49:71:31:81:30:17:88:b3:19:40:90:25:
9b:e3:74:9f:58:b1:5f:1c:8e:c5:19:2f:9a:f4:1b:
e0:bb:0b:c1:39:59:08:bf:2f:b9:da:42:b8:4c:2f:
c3:51:98:64:2f:6a:3f:c2:53:e1:49:b4:1d:47:db:
69:ad:84:2d:6e:59:34:46:ff:eb:42:cf:3e:01:c3:
73:a8:0c:f5:62:5d:2a:c9:f3:73:82:10:23:e1:b4:
cc:3e:e8:d3:2f:aa:0c:68:28:84:da:91:cf:9d:ba:
a0:42:45:6f:87:00:f2:13:9e:e7:5e:02:66:f3:0d:
70:a7:1b:1e:79:39:a7:d4:4d:29:65:a5:f6:66:68:
e6:38:57:22:0a:74:a9:32:83:06:bc:f7:0e:66:70:
b9:de:ad:3d:7e:8d:e5:5b:67:43:48:90:21:93:66:
af:56:3c:ba:56:50:ea:dc:1d:5e:19:2d:40:3f:eb:
fb:af:b9:2d:92:64:b8:6e:12:fb:53:6c:ea:73:59:
dc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5C:B6:46:3B:D9:D6:ED:0C:DF:5B:6E:CC:68:61:29:70:90:62:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33B9F460E1A711EC972434C6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.136.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:19:42:91:88:08:4a:ee:c5:09:3e:45:77:bd:37:44:af:7d:
fb:62:66:f8:97:52:a4:bb:19:69:4d:b0:24:72:f6:32:80:62:
2f:63:75:f7:25:4d:0b:bf:0e:af:1d:7b:4c:f6:fd:a3:88:ed:
ce:85:2c:15:e4:59:27:3d:ed:8d:5c:ef:f6:ec:c7:b4:1c:be:
4e:18:a2:fe:da:69:33:24:5b:3e:2f:14:df:e1:16:0a:8b:3d:
a0:d1:ae:dc:01:72:0b:18:5f:94:35:34:94:e5:18:28:3e:18:
ec:c0:00:5b:7c:fa:a0:ce:61:c0:b7:5e:df:c8:24:a7:ba:e9:
dc:dc:15:03:63:70:3d:4e:39:df:43:18:b0:d1:17:57:50:a1:
97:f8:49:b0:1e:92:db:9f:17:2e:97:79:89:be:47:e3:95:22:
9f:43:db:b9:52:a9:9d:f3:02:31:6a:5c:8d:06:38:31:6f:a3:
5d:ea:93:47:97:9f:50:4f:0f:5f:04:99:c3:5a:7b:fe:4b:94:
74:7c:eb:b9:1c:a2:73:49:73:38:0e:49:35:78:bd:ab:87:cf:
4a:f9:a4:b1:0b:01:1c:e6:22:64:e1:da:ff:21:f1:d7:55:d2:
d8:a6:03:24:90:9a:32:e7:29:07:0b:de:20:86:b8:d7:17:ae:
b7:f9:0d:93
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFoswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA2MDExMjM0MzRaFw0yMzA2MzAxMjM0MzRaMBgxFjAU
BgNVBAMMDTYyOTc1Y2RlLTAwNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsrPsdzq+OUt64/lzfD6tkvmC4L2P6KFkcexNc2d8kPfiZpJeRHRW8wdHT
2PTISXiTtiskL6HDb5GSGvkZfklxMYEwF4izGUCQJZvjdJ9YsV8cjsUZL5r0G+C7
C8E5WQi/L7naQrhML8NRmGQvaj/CU+FJtB1H22mthC1uWTRG/+tCzz4Bw3OoDPVi
XSrJ83OCECPhtMw+6NMvqgxoKITakc+duqBCRW+HAPITnudeAmbzDXCnGx55OafU
TSllpfZmaOY4VyIKdKkygwa89w5mcLnerT1+jeVbZ0NIkCGTZq9WPLpWUOrcHV4Z
LUA/6/uvuS2SZLhuEvtTbOpzWdwHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU21y2
RjvZ1u0M31tuzGhhKXCQYmAwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzMzQjlGNDYwRTFBNzExRUM5NzI0MzRDNkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa0IgwDQYJKoZIhvcNAQEL
BQADggEBAGsZQpGICEruxQk+RXe9N0SvfftiZviXUqS7GWlNsCRy9jKAYi9jdfcl
TQu/Dq8de0z2/aOI7c6FLBXkWSc97Y1c7/bsx7Qcvk4Yov7aaTMkWz4vFN/hFgqL
PaDRrtwBcgsYX5Q1NJTlGCg+GOzAAFt8+qDOYcC3Xt/IJKe66dzcFQNjcD1OOd9D
GLDRF1dQoZf4SbAektufFy6XeYm+R+OVIp9D27lSqZ3zAjFqXI0GODFvo13qk0eX
n1BPD18EmcNae/5LlHR867kconNJczgOSTV4vauHz0r5pLELARzmImTh2v8h8ddV
0timAySQmjLnKQcL3iCGuNcXrrf5DZM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-fra.rpki-client.org