Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C35C8854018911EF9B805468017001B1.roa
File: C35C8854018911EF9B805468017001B1.roa (raw, json)
Hash identifier: ElMEigbvWjilJjgMfmnCvzC/R4foOvSe5MCUrWBh8yc=
Subject key identifier: 8B:A3:6C:EC:07:91:CF:75:A2:73:79:1C:0A:95:35:43:52:18:A9:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AF9E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C35C8854018911EF9B805468017001B1.roa
Signing time: Tue 23 Apr 2024 15:54:27 +0000
ROA not before: Tue 23 Apr 2024 15:54:24 +0000
ROA not after: Thu 02 May 2024 15:54:24 +0000
asID: 132325
IP address blocks: 154.212.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44958 (0xaf9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 15:54:24 2024 GMT
Not After : May 2 15:54:24 2024 GMT
Subject: CN=6627d9b3-04df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:54:72:aa:93:a5:dc:a3:41:f1:89:e4:fa:dd:
e4:8b:a4:2e:e2:85:9f:ce:df:7a:4a:7b:e5:07:0f:
d9:9a:3b:c2:71:c2:ab:bf:ef:6c:47:d8:f4:01:a4:
57:26:b7:30:02:6a:de:a2:a3:75:0e:ab:a4:99:b5:
8b:b0:65:7f:9d:90:20:ca:d4:bd:af:be:e3:d8:fd:
3f:a0:93:82:fe:7c:f5:fa:eb:65:d0:f4:4d:1d:e5:
0a:4a:2f:97:44:f4:17:0c:32:03:6d:f0:b5:b7:9c:
c6:52:af:67:6c:41:3a:90:bf:4c:76:fc:f4:af:4a:
4b:9f:85:90:93:c5:40:d6:6d:a4:bb:cb:d1:8b:c0:
eb:62:ff:ad:b7:5f:b3:15:5e:43:c9:0a:ae:fe:ed:
03:f3:ed:75:67:13:4c:50:a7:14:f4:85:64:f3:6e:
cc:cd:3a:4d:54:22:5c:5d:1f:15:13:52:a8:fd:20:
a8:e3:31:5d:8b:69:5a:80:d3:d7:73:6f:1d:18:57:
af:89:ab:f7:7e:51:57:96:5e:56:2c:9f:cb:20:e3:
1d:93:50:e3:d8:47:2f:8b:ff:c6:a0:01:b6:6e:c0:
a9:8e:36:68:21:0b:6a:77:3b:5d:e5:44:89:7a:c4:
13:1d:18:4d:52:49:2d:1e:b6:91:6a:46:bc:40:36:
15:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A3:6C:EC:07:91:CF:75:A2:73:79:1C:0A:95:35:43:52:18:A9:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C35C8854018911EF9B805468017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.148.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:4b:93:f2:ee:5a:66:4f:2e:38:06:d0:93:08:f2:e6:73:0d:
4d:1e:3b:ba:b5:2e:68:f3:97:1e:af:26:49:75:52:46:c9:e2:
42:74:ec:3f:81:82:d1:58:44:a6:79:be:4c:98:fb:18:89:8f:
a7:e2:14:7d:67:10:0e:38:f8:cf:76:ed:f0:c3:b3:a9:97:77:
b9:dc:ad:96:06:ea:23:2c:5d:c4:0d:f8:87:d5:6c:81:e2:4e:
76:1d:09:4b:16:1b:1c:95:6d:23:7f:25:44:32:2b:90:56:23:
4e:dc:e6:75:28:37:52:9e:b9:e4:a3:2f:b1:12:34:6c:11:04:
2e:02:53:08:24:7b:05:b6:2f:87:0e:c1:ef:6c:13:28:ef:7c:
cb:cb:95:a5:aa:3f:a4:f7:c5:a7:83:4e:83:86:d6:9e:ef:8f:
a3:a7:ce:eb:fa:10:49:9b:f4:c5:ca:6e:4c:45:81:75:e4:f7:
44:06:08:91:b7:54:cc:ff:4a:60:e7:bf:10:05:a4:11:50:22:
87:f0:d0:06:0e:dc:9b:4c:61:83:32:b6:4c:64:8d:8f:6c:c5:
16:6e:59:43:e8:51:e9:c5:bb:88:76:44:46:1f:ae:51:3a:15:
d7:23:31:9e:c5:55:6b:f3:cb:5d:75:77:03:74:3b:1f:4e:11:
09:8d:bc:61
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAK+eMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDIzMTU1NDI0WhcNMjQwNTAyMTU1NDI0WjAYMRYw
FAYDVQQDEw02NjI3ZDliMy0wNGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAl1RyqpOl3KNB8Ynk+t3ki6Qu4oWfzt96SnvlBw/ZmjvCccKrv+9sR9j0
AaRXJrcwAmreoqN1DqukmbWLsGV/nZAgytS9r77j2P0/oJOC/nz1+utl0PRNHeUK
Si+XRPQXDDIDbfC1t5zGUq9nbEE6kL9Mdvz0r0pLn4WQk8VA1m2ku8vRi8DrYv+t
t1+zFV5DyQqu/u0D8+11ZxNMUKcU9IVk827MzTpNVCJcXR8VE1Ko/SCo4zFdi2la
gNPXc28dGFeviav3flFXll5WLJ/LIOMdk1Dj2Ecvi//GoAG2bsCpjjZoIQtqdztd
5USJesQTHRhNUkktHraRaka8QDYVsQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIuj
bOwHkc91onN5HAqVNUNSGKmaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMzVDODg1NDAxODkxMUVGOUI4MDU0NjgwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtSUMA0GCSqGSIb3DQEB
CwUAA4IBAQCbS5Py7lpmTy44BtCTCPLmcw1NHju6tS5o85ceryZJdVJGyeJCdOw/
gYLRWESmeb5MmPsYiY+n4hR9ZxAOOPjPdu3ww7Opl3e53K2WBuojLF3EDfiH1WyB
4k52HQlLFhsclW0jfyVEMiuQViNO3OZ1KDdSnrnkoy+xEjRsEQQuAlMIJHsFti+H
DsHvbBMo73zLy5Wlqj+k98Wng06Dhtae74+jp87r+hBJm/TFym5MRYF15PdEBgiR
t1TM/0pg578QBaQRUCKH8NAGDtybTGGDMrZMZI2PbMUWbllD6FHpxbuIdkRGH65R
OhXXIzGexVVr88tddXcDdDsfThEJjbxh
-----END CERTIFICATE-----
Generated at Fri May 3 03:52:32 2024 by rpki-client on console-fra.rpki-client.org