Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94D506B8125311ED9DB26BE3F1222468.roa
File: 94D506B8125311ED9DB26BE3F1222468.roa (raw, json)
Hash identifier: cVO4ALosGlYyy7fKezRvep0Il4vIwQ9MNC/jy+m6DYk=
Subject key identifier: 31:B8:CC:9F:B7:75:17:C8:B6:6A:9D:24:22:38:A7:FF:23:BC:25:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 17EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94D506B8125311ED9DB26BE3F1222468.roa
Signing time: Tue 02 Aug 2022 11:09:31 +0000
ROA not before: Tue 02 Aug 2022 11:09:25 +0000
ROA not after: Thu 10 Aug 2023 11:09:25 +0000
asID: 133861
IP address blocks: 154.204.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6122 (0x17ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 11:09:25 2022 GMT
Not After : Aug 10 11:09:25 2023 GMT
Subject: CN=62e905eb-9edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:5a:3d:94:8d:24:f6:7a:1a:69:f0:3e:78:
4a:f3:1c:40:f8:f3:31:e2:be:13:b5:79:9b:b3:30:
07:9d:ef:ea:36:3c:f2:ad:d7:f2:ff:91:2f:e7:aa:
00:65:c5:21:85:ae:ae:97:dc:ef:63:fc:26:fc:3a:
c9:1e:21:8c:8e:f2:63:f3:db:2b:3d:55:c2:a2:e6:
9f:e7:7e:80:e7:9c:95:af:b0:aa:b5:b1:37:82:c0:
cc:91:b0:25:b8:4a:b3:58:af:6b:39:5c:04:75:83:
04:60:74:77:74:91:52:71:30:7e:75:df:79:4f:bb:
d4:0b:5b:09:42:5f:a5:96:51:6e:e3:e1:30:8a:30:
5f:3f:a9:d4:c2:79:7e:a8:ef:c2:1d:c2:f0:81:5f:
96:6f:0d:d3:41:06:10:75:d8:c5:39:9f:f5:9c:8d:
be:d7:0e:96:13:39:2c:48:cc:87:27:7f:f0:cd:2c:
74:85:8a:1b:53:85:d1:62:51:9a:d1:11:96:68:d9:
cf:75:d2:57:23:4f:38:c2:4a:7a:5d:db:4b:82:3b:
b1:bf:38:63:36:ac:28:00:4b:ad:71:3d:d2:58:1e:
d9:ea:99:24:10:a2:f8:5d:f2:9f:74:9e:e3:16:46:
6a:1d:07:57:52:bf:17:f9:9b:e6:04:f8:28:5c:4c:
ef:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B8:CC:9F:B7:75:17:C8:B6:6A:9D:24:22:38:A7:FF:23:BC:25:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94D506B8125311ED9DB26BE3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.33.0/24
Signature Algorithm: sha256WithRSAEncryption
81:11:f0:df:aa:8c:33:7b:a6:88:e4:c3:de:8c:f2:52:35:49:
a5:ba:e7:76:8e:45:8d:22:15:48:37:b7:b5:92:5f:0e:94:3d:
d1:02:7a:14:43:9e:a5:f8:2f:ad:3d:d3:00:db:a6:b7:6f:9f:
70:ab:05:d6:c5:9c:ad:6d:50:0d:08:eb:62:3c:64:b4:b7:f1:
9b:86:a5:64:b4:26:ed:e6:67:94:8e:83:33:08:df:9e:e1:f3:
e2:0a:58:3d:7a:9f:a5:5a:c7:c6:2a:6b:de:16:8f:60:ba:46:
1f:60:75:98:7a:a0:8f:e9:6a:b6:03:15:77:8d:9e:90:61:c7:
cb:e9:dc:9d:4f:e8:42:36:e2:cd:7c:5b:e1:1a:2f:76:35:9b:
b8:6b:75:d7:60:a4:bc:40:b4:ae:3c:5a:ff:af:13:e1:fc:06:
e0:5d:74:d4:08:ed:6b:54:3b:60:13:97:c3:3e:9e:89:5f:7c:
40:4c:e4:67:5a:9c:fd:56:99:83:1c:9b:6b:61:c9:a1:a5:36:
a1:74:e8:4a:80:20:ad:63:66:ec:08:03:9f:1f:68:2b:70:c0:
6e:c5:e1:c5:2d:4a:82:09:30:15:13:a9:f4:b3:f3:8d:49:81:
48:ff:34:c5:d6:3b:1f:bb:c2:a3:61:f3:30:e7:e0:5e:9d:ca:
1d:b1:e4:ef
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICF+owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA4MDIxMTA5MjVaFw0yMzA4MTAxMTA5MjVaMBgxFjAU
BgNVBAMMDTYyZTkwNWViLTllZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9BFo9lI0k9noaafA+eErzHED48zHivhO1eZuzMAed7+o2PPKt1/L/kS/n
qgBlxSGFrq6X3O9j/Cb8OskeIYyO8mPz2ys9VcKi5p/nfoDnnJWvsKq1sTeCwMyR
sCW4SrNYr2s5XAR1gwRgdHd0kVJxMH5133lPu9QLWwlCX6WWUW7j4TCKMF8/qdTC
eX6o78IdwvCBX5ZvDdNBBhB12MU5n/Wcjb7XDpYTOSxIzIcnf/DNLHSFihtThdFi
UZrREZZo2c910lcjTzjCSnpd20uCO7G/OGM2rCgAS61xPdJYHtnqmSQQovhd8p90
nuMWRmodB1dSvxf5m+YE+ChcTO8JAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUMbjM
n7d1F8i2ap0kIjin/yO8JYkwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4Lzk0RDUwNkI4MTI1MzExRUQ5REIyNkJFM0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACazCEwDQYJKoZIhvcNAQEL
BQADggEBAIER8N+qjDN7pojkw96M8lI1SaW653aORY0iFUg3t7WSXw6UPdECehRD
nqX4L6090wDbprdvn3CrBdbFnK1tUA0I62I8ZLS38ZuGpWS0Ju3mZ5SOgzMI357h
8+IKWD16n6Vax8Yqa94Wj2C6Rh9gdZh6oI/parYDFXeNnpBhx8vp3J1P6EI24s18
W+EaL3Y1m7hrdddgpLxAtK48Wv+vE+H8BuBddNQI7WtUO2ATl8M+nolffEBM5Gda
nP1WmYMcm2thyaGlNqF06EqAIK1jZuwIA58faCtwwG7F4cUtSoIJMBUTqfSz841J
gUj/NMXWOx+7wqNh8zDn4F6dyh2x5O8=
-----END CERTIFICATE-----
Generated at Fri Aug 11 01:22:42 2023 by rpki-client on console-fra.rpki-client.org