Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66961DB00E5111EDAF9B24A9F1222468.roa
File: 66961DB00E5111EDAF9B24A9F1222468.roa (raw, json)
Hash identifier: DK/HYkCPMxLE6PiFgauS1YaEvNsFOt0/zK4LSQxayJM=
Subject key identifier: 9A:13:8D:4F:BC:7C:B9:0C:D4:6C:81:39:E0:EB:C5:54:0B:C7:33:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 17BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66961DB00E5111EDAF9B24A9F1222468.roa
Signing time: Thu 28 Jul 2022 08:43:49 +0000
ROA not before: Thu 28 Jul 2022 08:43:46 +0000
ROA not after: Mon 15 May 2023 08:43:46 +0000
asID: 397630
IP address blocks: 154.201.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6076 (0x17bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 28 08:43:46 2022 GMT
Not After : May 15 08:43:46 2023 GMT
Subject: CN=62e24c45-af28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2a:50:3d:40:9a:d0:ea:7f:44:d8:55:cc:8b:
a9:be:e1:33:50:21:72:e9:8e:8f:93:37:fe:a5:38:
cf:cf:55:d3:7e:a0:5f:89:62:c8:9e:49:f6:ae:c0:
89:67:ad:af:63:57:28:83:f2:ab:e3:7f:ba:27:de:
89:b6:da:ae:17:72:bb:bb:e8:c6:f2:24:ea:63:92:
35:bf:25:25:b4:c7:28:c1:bf:2a:8d:e2:b8:c6:66:
d4:e1:fa:59:93:e9:43:44:c8:cb:5b:64:5a:1b:14:
3b:6e:99:b9:c7:bf:1c:83:4b:0d:0e:e7:a8:f0:31:
3e:ba:bf:6f:8d:44:5c:cf:ec:97:11:ec:58:50:1a:
c0:a2:d1:89:d2:a5:69:b5:2d:36:51:64:86:59:93:
75:55:8b:e8:2c:7b:31:c8:1c:38:24:23:36:02:e2:
cc:f6:51:40:5d:04:bb:36:56:b4:3e:d1:6a:e0:1d:
ae:09:3e:b7:89:de:62:8f:22:76:57:e5:72:e4:ec:
f6:7b:ac:e4:4c:45:c8:0a:46:e9:1a:39:18:1b:cc:
a0:61:08:98:62:30:fd:8c:1f:5c:6b:af:26:b8:9b:
5b:2f:14:37:11:c7:81:9b:3c:6e:94:09:c4:c2:63:
cc:3c:b0:7e:63:8f:f0:34:4b:90:2c:8b:b9:9e:ef:
4c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:13:8D:4F:BC:7C:B9:0C:D4:6C:81:39:E0:EB:C5:54:0B:C7:33:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66961DB00E5111EDAF9B24A9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.58.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f0:ba:71:b4:3e:b8:25:a4:d8:d2:5a:ca:27:0e:20:bf:17:
39:43:98:83:44:77:fd:dc:85:1c:7d:11:01:a7:4f:f5:a1:58:
64:84:8e:93:32:ce:00:08:32:17:6c:b1:c7:f2:be:27:50:e9:
77:d5:ce:f3:53:d3:e0:06:f7:68:14:2a:23:a7:37:c6:7b:47:
58:2a:db:70:6c:da:89:e7:74:fe:4f:27:78:c5:9e:f5:90:dc:
6c:5a:9c:d1:d7:b6:43:df:a0:d8:73:7b:42:ba:b5:91:1f:08:
32:fd:52:f5:e5:d7:97:f2:ac:0c:88:96:ab:cc:cd:2d:02:1b:
13:59:09:b5:07:c0:cc:e3:9c:5c:96:7e:3d:ec:e6:3b:67:3a:
0a:2d:c9:a9:4f:fa:4f:29:5a:71:39:df:d2:d6:6b:f7:62:56:
ec:a7:63:2d:66:d0:ce:3c:e6:35:1d:ad:9c:6c:82:1d:9e:fd:
4d:c5:37:ef:03:01:c9:43:c7:7c:8f:14:d4:67:b7:01:04:61:
c7:3a:ad:24:5c:e8:1a:a9:42:32:aa:7a:90:f0:28:36:41:ca:
81:b3:37:d9:cb:3f:97:37:c6:1c:34:a2:bd:d9:1d:12:7c:d5:
23:06:e8:02:87:ac:1d:59:ee:c5:f4:fe:80:50:8e:52:f7:6a:
10:b9:53:be
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICF7wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA3MjgwODQzNDZaFw0yMzA1MTUwODQzNDZaMBgxFjAU
BgNVBAMMDTYyZTI0YzQ1LWFmMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDrKlA9QJrQ6n9E2FXMi6m+4TNQIXLpjo+TN/6lOM/PVdN+oF+JYsieSfau
wIlnra9jVyiD8qvjf7on3om22q4Xcru76MbyJOpjkjW/JSW0xyjBvyqN4rjGZtTh
+lmT6UNEyMtbZFobFDtumbnHvxyDSw0O56jwMT66v2+NRFzP7JcR7FhQGsCi0YnS
pWm1LTZRZIZZk3VVi+gsezHIHDgkIzYC4sz2UUBdBLs2VrQ+0WrgHa4JPreJ3mKP
InZX5XLk7PZ7rORMRcgKRukaORgbzKBhCJhiMP2MH1xrrya4m1svFDcRx4GbPG6U
CcTCY8w8sH5jj/A0S5Asi7me70zhAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUmhON
T7x8uQzUbIE54OvFVAvHM+swHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzY2OTYxREIwMEU1MTExRURBRjlCMjRBOUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACayTowDQYJKoZIhvcNAQEL
BQADggEBADLwunG0PrglpNjSWsonDiC/FzlDmINEd/3chRx9EQGnT/WhWGSEjpMy
zgAIMhdsscfyvidQ6XfVzvNT0+AG92gUKiOnN8Z7R1gq23Bs2onndP5PJ3jFnvWQ
3GxanNHXtkPfoNhze0K6tZEfCDL9UvXl15fyrAyIlqvMzS0CGxNZCbUHwMzjnFyW
fj3s5jtnOgotyalP+k8pWnE539LWa/diVuynYy1m0M485jUdrZxsgh2e/U3FN+8D
AclDx3yPFNRntwEEYcc6rSRc6BqpQjKqepDwKDZByoGzN9nLP5c3xhw0or3ZHRJ8
1SMG6AKHrB1Z7sX0/oBQjlL3ahC5U74=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-ams.rpki-client.org