Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/714B4FA60E5011ED8107EDA5F1222468.roa
File: 714B4FA60E5011ED8107EDA5F1222468.roa (raw, json)
Hash identifier: oHdKP3JZ/zzkn8FbNgIAvXVwHCdKjgexV1oAPrSFurQ=
Subject key identifier: 6E:77:44:C1:20:D7:4D:30:00:64:AC:6A:FE:8B:17:0E:4F:E4:74:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 17A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/714B4FA60E5011ED8107EDA5F1222468.roa
Signing time: Thu 28 Jul 2022 08:36:58 +0000
ROA not before: Thu 28 Jul 2022 08:36:54 +0000
ROA not after: Mon 15 May 2023 08:36:54 +0000
asID: 397630
IP address blocks: 154.201.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6048 (0x17a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 28 08:36:54 2022 GMT
Not After : May 15 08:36:54 2023 GMT
Subject: CN=62e24aaa-0dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8d:13:33:1d:fe:08:05:95:6c:dc:2a:52:5f:
d9:15:7a:3d:c9:2f:13:91:e4:ea:69:04:01:f0:26:
a6:6f:e8:f0:62:53:80:9c:52:46:7a:14:9c:dd:b4:
12:4c:3e:ce:1e:c6:46:3a:4d:69:94:9b:e1:2f:ff:
05:79:a2:dd:26:05:74:93:1f:76:02:88:1c:68:56:
ed:2c:53:64:e3:46:e7:8d:6b:64:18:6c:cc:67:10:
f4:6b:04:dd:04:39:a1:c2:a8:fc:29:fb:33:1b:3d:
ee:a2:b7:70:f5:65:c3:23:4e:2a:f5:d5:9f:16:f7:
2c:1e:51:a2:12:23:a6:e9:ee:b1:d8:05:81:41:0b:
c4:88:0e:a4:8f:4c:ba:bf:7e:be:de:20:9e:44:de:
7f:9e:f5:82:05:bd:ff:35:4e:06:75:cb:37:eb:e9:
a6:c2:cb:ad:2c:fb:90:45:37:53:9b:31:7a:a7:0a:
34:5c:d3:1f:d6:08:9d:b6:48:9c:3b:40:7d:db:63:
a6:f4:81:98:87:4f:b0:14:cf:4f:06:99:7f:6d:25:
4b:a1:bf:d9:d6:ac:a4:ad:48:32:7d:9a:41:2b:de:
7a:1b:67:91:de:25:89:eb:e7:f6:19:2f:df:e7:de:
33:15:0b:ca:14:c6:57:3e:7d:dc:f8:2c:d0:25:4b:
1a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:77:44:C1:20:D7:4D:30:00:64:AC:6A:FE:8B:17:0E:4F:E4:74:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/714B4FA60E5011ED8107EDA5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.36.0/24
Signature Algorithm: sha256WithRSAEncryption
24:26:98:9e:f8:d9:33:91:63:ab:91:57:3b:6e:48:9e:a7:d3:
c8:ba:02:e4:f6:59:81:af:7c:02:f3:86:e7:4a:09:d3:28:98:
ad:d5:56:3f:cc:79:3f:20:06:14:e3:f7:5a:70:c9:e5:0c:65:
cb:a7:4a:fe:d3:2e:ea:d5:47:0d:c3:05:6e:04:db:39:37:35:
83:fa:32:da:f8:7c:28:a9:58:6b:88:62:ec:04:d0:94:d8:3f:
26:dd:42:00:18:04:3d:11:fa:6a:30:f4:13:70:a4:13:c0:ab:
15:19:ff:fa:f5:5f:c6:f2:db:88:e1:45:88:ab:a8:d4:a0:e9:
4c:47:3b:bd:34:41:ae:ae:d8:c5:c0:f6:18:b2:36:34:41:25:
c9:e7:99:17:74:0d:15:b0:6f:e4:63:c8:0d:63:9e:42:6c:c5:
7d:78:f1:7a:8a:77:e2:4f:37:74:20:e1:92:3e:c5:58:8e:76:
5a:43:44:b3:67:c7:fa:a8:4b:ac:69:e5:26:87:91:6d:96:38:
66:1a:1d:21:39:bf:b5:a2:44:5c:cd:58:54:c0:24:ef:ea:40:
79:17:16:f4:a0:42:f0:3c:94:63:ef:68:f1:ec:d3:76:e2:fc:
da:12:2d:b7:32:c0:5c:ab:62:b4:5c:76:4f:3e:62:85:d1:99:
db:00:95:de
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICF6AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA3MjgwODM2NTRaFw0yMzA1MTUwODM2NTRaMBgxFjAU
BgNVBAMMDTYyZTI0YWFhLTBkZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDjRMzHf4IBZVs3CpSX9kVej3JLxOR5OppBAHwJqZv6PBiU4CcUkZ6FJzd
tBJMPs4exkY6TWmUm+Ev/wV5ot0mBXSTH3YCiBxoVu0sU2TjRueNa2QYbMxnEPRr
BN0EOaHCqPwp+zMbPe6it3D1ZcMjTir11Z8W9yweUaISI6bp7rHYBYFBC8SIDqSP
TLq/fr7eIJ5E3n+e9YIFvf81TgZ1yzfr6abCy60s+5BFN1ObMXqnCjRc0x/WCJ22
SJw7QH3bY6b0gZiHT7AUz08GmX9tJUuhv9nWrKStSDJ9mkEr3nobZ5HeJYnr5/YZ
L9/n3jMVC8oUxlc+fdz4LNAlSxrTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUbndE
wSDXTTAAZKxq/osXDk/kdDcwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzcxNEI0RkE2MEU1MDExRUQ4MTA3RURBNUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaySQwDQYJKoZIhvcNAQEL
BQADggEBACQmmJ742TORY6uRVztuSJ6n08i6AuT2WYGvfALzhudKCdMomK3VVj/M
eT8gBhTj91pwyeUMZcunSv7TLurVRw3DBW4E2zk3NYP6Mtr4fCipWGuIYuwE0JTY
PybdQgAYBD0R+mow9BNwpBPAqxUZ//r1X8by24jhRYirqNSg6UxHO700Qa6u2MXA
9hiyNjRBJcnnmRd0DRWwb+RjyA1jnkJsxX148XqKd+JPN3Qg4ZI+xViOdlpDRLNn
x/qoS6xp5SaHkW2WOGYaHSE5v7WiRFzNWFTAJO/qQHkXFvSgQvA8lGPvaPHs03bi
/NoSLbcywFyrYrRcdk8+YoXRmdsAld4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-fra.rpki-client.org