Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B480373E0DCA11EFBC06284A017001B1.roa
File: B480373E0DCA11EFBC06284A017001B1.roa (raw, json)
Hash identifier: ylrt2NlYxs4aQkulizm/w4aqKa8KWimDe6VoIMhiixc=
Subject key identifier: 5E:51:1E:B1:F4:5D:E3:02:1B:9C:85:4A:71:74:F6:8F:FF:3C:27:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B61B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B480373E0DCA11EFBC06284A017001B1.roa
Signing time: Thu 09 May 2024 06:09:33 +0000
ROA not before: Thu 09 May 2024 06:09:30 +0000
ROA not after: Wed 29 May 2024 06:09:30 +0000
asID: 141883
IP address blocks: 154.218.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46619 (0xb61b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 06:09:30 2024 GMT
Not After : May 29 06:09:30 2024 GMT
Subject: CN=663c689d-058e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d0:98:20:42:fc:1c:0a:03:53:57:8c:09:82:
13:a5:94:52:6f:cb:68:9d:df:51:99:62:20:3c:76:
e7:47:9e:c6:44:44:28:1c:ef:47:7d:a7:38:52:c9:
7b:d2:20:8e:7a:3f:4f:cd:cd:c7:7b:a4:e1:9e:4b:
63:52:e4:cc:70:54:8d:ab:51:9f:89:2e:e3:63:db:
1d:15:d0:81:6a:c3:b4:9d:82:92:24:86:95:71:71:
27:e5:24:2d:8b:54:41:85:f1:ae:f0:5d:48:86:da:
29:f7:e6:ab:0d:bc:22:2a:57:56:36:b1:4a:8b:26:
86:8d:28:e8:84:50:cd:da:11:37:a8:08:b1:ca:28:
f8:01:fc:ea:30:f7:c9:63:2f:c5:00:de:3c:62:d5:
1f:6e:37:5f:03:7e:75:61:62:2b:ed:43:01:b5:03:
01:a9:97:73:e5:e9:c2:2d:58:13:aa:67:24:26:8c:
59:f5:35:6d:08:63:1f:15:63:de:c9:9b:5b:43:43:
2a:80:0e:e5:6f:99:ff:f9:b9:a2:55:0c:35:66:97:
c5:2e:d1:55:7f:e7:4a:11:0c:16:09:4b:a8:2b:d9:
94:39:e6:70:70:9f:f7:22:21:41:2d:a3:04:80:16:
de:bd:91:53:70:de:41:c0:cc:9d:b9:62:24:d3:2f:
a5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:51:1E:B1:F4:5D:E3:02:1B:9C:85:4A:71:74:F6:8F:FF:3C:27:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B480373E0DCA11EFBC06284A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.0.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c4:ca:3e:82:9c:77:4d:39:6d:ca:4a:5e:48:4f:e2:6a:29:
c4:f5:3e:3b:7d:d4:db:4b:ae:c2:fe:29:6c:fd:40:f9:a4:a5:
80:0d:a6:66:c3:26:9f:74:e9:f2:d7:dc:06:eb:7f:c9:d8:d9:
7c:58:b4:b8:52:75:ac:01:69:35:28:37:40:be:c2:88:e4:98:
0d:78:c3:dd:d9:08:ad:bf:49:48:3d:cc:c7:ad:e3:90:57:6b:
24:db:b5:7e:29:e1:2d:f5:21:27:73:90:12:09:7e:4e:41:49:
ab:58:12:f8:0c:26:de:d0:3d:03:2c:0e:23:44:ed:db:67:60:
94:93:4d:68:72:9b:89:4a:17:71:e1:a4:f9:94:cc:f1:4e:70:
d3:9c:50:04:6b:24:f9:b0:0f:9a:e5:53:65:f0:81:a4:dc:07:
f7:7e:9a:2e:ae:7a:a7:7c:41:07:7d:98:e7:4a:f3:7b:0a:f2:
5f:0a:aa:31:31:b1:f6:dd:48:a0:76:b3:7c:f3:33:b5:cc:a5:
5c:2b:0a:50:7a:da:c5:7b:b8:bb:f0:60:d2:ae:db:c2:7a:73:
67:a5:35:92:e2:dd:74:3a:52:ac:c5:e9:a4:9f:f5:0b:35:46:
44:90:ab:a3:8a:f0:e6:44:e2:25:07:b5:1c:fd:24:d7:f8:40:
27:bd:59:7e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALYbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA5MDYwOTMwWhcNMjQwNTI5MDYwOTMwWjAYMRYw
FAYDVQQDEw02NjNjNjg5ZC0wNThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2tCYIEL8HAoDU1eMCYITpZRSb8tond9RmWIgPHbnR57GREQoHO9Hfac4
Usl70iCOej9Pzc3He6ThnktjUuTMcFSNq1GfiS7jY9sdFdCBasO0nYKSJIaVcXEn
5SQti1RBhfGu8F1Ihtop9+arDbwiKldWNrFKiyaGjSjohFDN2hE3qAixyij4Afzq
MPfJYy/FAN48YtUfbjdfA351YWIr7UMBtQMBqZdz5enCLVgTqmckJoxZ9TVtCGMf
FWPeyZtbQ0MqgA7lb5n/+bmiVQw1ZpfFLtFVf+dKEQwWCUuoK9mUOeZwcJ/3IiFB
LaMEgBbevZFTcN5BwMyduWIk0y+lfQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF5R
HrH0XeMCG5yFSnF09o//PCcmMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNDgwMzczRTBEQ0ExMUVGQkMwNjI4NEEwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtoAMA0GCSqGSIb3DQEB
CwUAA4IBAQAwxMo+gpx3TTltykpeSE/iainE9T47fdTbS67C/ils/UD5pKWADaZm
wyafdOny19wG63/J2Nl8WLS4UnWsAWk1KDdAvsKI5JgNeMPd2Qitv0lIPczHreOQ
V2sk27V+KeEt9SEnc5ASCX5OQUmrWBL4DCbe0D0DLA4jRO3bZ2CUk01ocpuJShdx
4aT5lMzxTnDTnFAEayT5sA+a5VNl8IGk3Af3fpournqnfEEHfZjnSvN7CvJfCqox
MbH23UigdrN88zO1zKVcKwpQetrFe7i78GDSrtvCenNnpTWS4t10OlKsxemkn/UL
NUZEkKujivDmROIlB7Uc/STX+EAnvVl+
-----END CERTIFICATE-----
Generated at Wed May 29 12:51:22 2024 by rpki-client on console-ams.rpki-client.org