Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/654D18EE3B1711ED9F265EBFF1222468.roa
File: 654D18EE3B1711ED9F265EBFF1222468.roa (raw, json)
Hash identifier: KlM78avgiKzr04Qbh2sCuJ9aXXkpid/81lWskbYlw2Q=
Subject key identifier: EE:45:3C:FD:28:17:91:23:6A:14:ED:8F:68:22:C8:41:9D:B1:A3:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1905
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/654D18EE3B1711ED9F265EBFF1222468.roa
Signing time: Fri 23 Sep 2022 08:11:59 +0000
ROA not before: Fri 23 Sep 2022 08:11:55 +0000
ROA not after: Fri 30 Dec 2022 08:11:55 +0000
asID: 328608
IP address blocks: 154.207.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6405 (0x1905)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 23 08:11:55 2022 GMT
Not After : Dec 30 08:11:55 2022 GMT
Subject: CN=632d6a4f-6f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bb:85:59:de:55:10:0a:d1:d7:d3:5e:02:e7:
df:20:a9:b1:b1:07:9b:bd:f9:c0:fe:18:6c:4f:43:
ff:0d:f1:45:54:1a:59:c5:0b:ff:7e:e5:77:08:ee:
66:72:6b:2f:d5:3f:bc:89:66:6f:d4:a7:dc:f9:11:
32:a2:6b:30:8f:5c:32:f8:24:99:0b:13:98:d0:07:
2e:d2:49:ae:0e:55:32:86:af:29:e2:2c:f6:90:8c:
00:05:f5:a7:56:80:26:fa:df:02:19:8e:a6:fb:cb:
94:ed:1a:44:d8:5d:e3:a2:23:ce:d7:52:67:e4:18:
d3:7a:f2:44:a7:33:f9:07:80:08:6a:d1:31:87:f6:
9b:65:e5:d1:d0:a1:25:d8:2d:68:9b:07:ec:ff:c4:
74:80:bc:a5:4e:86:46:7e:af:e3:66:19:45:15:ae:
13:c7:ba:b1:f0:1f:a9:67:69:31:00:f5:e9:9b:8b:
01:6a:32:37:48:f5:28:bb:30:d5:a0:ea:04:1c:de:
62:b1:5b:5a:b9:9d:8b:7e:69:28:9c:25:51:3a:96:
5f:83:75:2b:ff:48:df:d6:b5:c0:d8:74:9d:35:81:
19:aa:2c:11:6d:f8:2c:1c:c1:fd:5c:70:1e:d5:14:
23:b2:73:a6:d4:77:40:4c:53:d6:ac:5a:f7:83:4d:
2c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:45:3C:FD:28:17:91:23:6A:14:ED:8F:68:22:C8:41:9D:B1:A3:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/654D18EE3B1711ED9F265EBFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.0.0/19
Signature Algorithm: sha256WithRSAEncryption
02:40:c8:87:60:2c:ba:45:a3:61:ea:06:a0:3e:76:5d:bb:c9:
4c:8c:3d:4d:94:1e:be:56:37:d7:d9:58:59:4a:08:7d:f4:d3:
cc:34:b3:fd:f6:9e:56:f8:46:18:7e:0d:46:c5:e9:4d:79:4b:
3a:ad:d9:d9:1c:01:f2:b9:9c:12:b3:e6:58:98:f1:20:3c:ac:
c3:40:48:d4:5f:63:80:d6:67:7e:1c:a3:67:2a:a7:0e:af:db:
a5:47:37:37:70:55:8b:3d:2e:b8:01:96:53:e2:1c:71:04:0e:
6e:b7:ec:fb:8c:12:43:84:12:3d:e5:83:b5:1a:a4:9c:b5:a6:
59:83:44:74:5f:67:f2:1a:7a:c9:be:98:dd:48:2d:e2:6b:49:
41:5b:69:e4:0f:08:51:26:4c:46:cd:58:6a:d8:50:ba:2b:7d:
5d:49:fc:fc:3d:c0:75:fc:a8:79:69:f6:c5:f0:ae:bc:53:39:
af:84:6b:6f:fc:3c:9d:70:aa:b1:97:9c:40:be:ef:6d:3d:6c:
6b:91:24:97:81:5b:d5:c1:9b:22:0d:66:58:0b:db:41:13:20:
a9:4c:14:96:56:90:7f:53:95:28:0b:8d:2b:e3:54:35:9d:de:
31:02:ea:87:e2:68:c7:9b:33:78:05:b5:bb:5e:70:ca:57:a2:
d8:1a:4b:91
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGQUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA5MjMwODExNTVaFw0yMjEyMzAwODExNTVaMBgxFjAU
BgNVBAMMDTYzMmQ2YTRmLTZmNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXu4VZ3lUQCtHX014C598gqbGxB5u9+cD+GGxPQ/8N8UVUGlnFC/9+5XcI
7mZyay/VP7yJZm/Up9z5ETKiazCPXDL4JJkLE5jQBy7SSa4OVTKGryniLPaQjAAF
9adWgCb63wIZjqb7y5TtGkTYXeOiI87XUmfkGNN68kSnM/kHgAhq0TGH9ptl5dHQ
oSXYLWibB+z/xHSAvKVOhkZ+r+NmGUUVrhPHurHwH6lnaTEA9embiwFqMjdI9Si7
MNWg6gQc3mKxW1q5nYt+aSicJVE6ll+DdSv/SN/WtcDYdJ01gRmqLBFt+Cwcwf1c
cB7VFCOyc6bUd0BMU9asWveDTSzrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU7kU8
/SgXkSNqFO2PaCLIQZ2xo+EwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzY1NEQxOEVFM0IxNzExRUQ5RjI2NUVCRkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAWazwAwDQYJKoZIhvcNAQEL
BQADggEBAAJAyIdgLLpFo2HqBqA+dl27yUyMPU2UHr5WN9fZWFlKCH3008w0s/32
nlb4Rhh+DUbF6U15Szqt2dkcAfK5nBKz5liY8SA8rMNASNRfY4DWZ34co2cqpw6v
26VHNzdwVYs9LrgBllPiHHEEDm637PuMEkOEEj3lg7UapJy1plmDRHRfZ/Iaesm+
mN1ILeJrSUFbaeQPCFEmTEbNWGrYULorfV1J/Pw9wHX8qHlp9sXwrrxTOa+Ea2/8
PJ1wqrGXnEC+7209bGuRJJeBW9XBmyINZlgL20ETIKlMFJZWkH9TlSgLjSvjVDWd
3jEC6ofiaMebM3gFtbtecMpXotgaS5E=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-fra.rpki-client.org