Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4610F38441511EFA117C04B762E951A.roa
File: E4610F38441511EFA117C04B762E951A.roa (raw, json)
Hash identifier: tuMGDvjB7DpU4H2t8b+nbiYnpr1HLW9fUzy/cuWMHWY=
Subject key identifier: 6F:A8:EE:9F:62:BD:1C:67:09:38:9E:0D:64:F2:E9:EF:62:70:A2:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D325
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4610F38441511EFA117C04B762E951A.roa
Signing time: Wed 17 Jul 2024 08:23:49 +0000
ROA not before: Wed 17 Jul 2024 08:23:45 +0000
ROA not after: Sat 27 Jul 2024 08:23:45 +0000
asID: 22773
IP address blocks: 154.84.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54053 (0xd325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 08:23:45 2024 GMT
Not After : Jul 27 08:23:45 2024 GMT
Subject: CN=66977f95-efbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:8b:0d:ef:25:e2:c3:5f:4a:89:12:91:ac:
1f:9c:f3:fe:5b:eb:87:f2:18:0e:bf:cd:81:99:6b:
93:49:bd:40:46:ca:63:69:44:4e:91:1a:5e:0d:ed:
1c:41:9c:eb:8d:9e:ac:69:27:c5:35:a7:2b:b5:b3:
11:89:96:4d:91:01:ce:9b:93:aa:e5:a9:0f:70:0a:
ba:a4:eb:23:d8:bc:ca:bf:82:41:a9:9c:14:c0:e9:
3d:4f:33:5e:4b:eb:af:4b:ca:af:7c:a4:2b:29:bb:
d3:cf:e8:57:36:1e:57:ff:68:d3:7f:d6:11:ff:00:
a9:0c:f9:26:cb:5a:0d:9f:c6:a8:87:10:1e:04:c7:
d6:f0:f4:71:db:e3:7c:75:54:a0:5b:65:94:5a:e4:
c5:d9:0d:94:1f:44:04:29:ba:d5:51:46:a8:1a:4c:
11:31:23:c5:56:e3:00:1f:35:a5:13:c0:59:cd:28:
20:86:cb:1d:e7:61:90:10:23:3f:e3:0c:84:b8:fa:
0a:6a:bd:e3:58:31:07:e5:62:e2:7b:e7:d6:2f:0d:
f8:83:51:1e:a1:bc:6c:cf:6e:65:07:c3:a9:44:9a:
62:73:1d:fb:b8:bb:67:8b:9a:9e:1e:3e:6a:57:7b:
c7:c7:ae:c9:29:2f:23:0c:b9:a1:20:98:97:59:d4:
60:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A8:EE:9F:62:BD:1C:67:09:38:9E:0D:64:F2:E9:EF:62:70:A2:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4610F38441511EFA117C04B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.176.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:04:91:18:86:e4:7b:8a:20:8d:a5:ea:03:bd:20:22:5a:a7:
eb:72:f2:ba:70:ea:a3:0f:dd:31:90:f3:0b:67:6e:e8:6c:07:
40:ba:5d:2d:80:be:8f:92:3b:17:b5:d1:a0:a7:ed:2c:fc:bc:
ff:75:8a:10:a8:60:1b:d0:ef:e9:35:12:fd:1a:a1:0c:5f:46:
57:de:91:0e:7e:40:c8:dd:48:5b:5b:d4:ad:49:f8:b3:7a:d4:
c3:8d:5f:fb:2f:82:95:cb:09:31:e1:9f:0f:44:c2:3b:bf:b7:
a0:c4:bb:16:b4:9f:90:9c:5b:e8:23:a8:a3:06:19:15:d3:ba:
03:19:dc:6e:cd:41:f7:32:ba:e1:35:31:ce:4a:3e:29:5a:38:
50:38:ef:48:c2:cb:13:5e:7e:98:96:72:de:b8:60:47:81:e2:
24:a5:19:70:8b:9d:05:86:1f:d1:ca:0c:bc:d6:42:16:d1:25:
93:4b:b8:e1:c2:2b:b7:24:ff:80:c2:64:46:a6:75:c1:64:69:
1d:02:af:1a:94:6e:5e:0a:fd:45:32:fb:51:63:0d:7c:59:11:
19:86:bc:aa:e3:76:1e:8a:9b:f9:4a:19:0e:e7:62:a3:e3:57:
7a:99:d3:f8:83:3b:2b:81:fd:f4:bc:b0:bb:73:60:cf:db:3d:
64:58:e7:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDANMlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNzE3MDgyMzQ1WhcNMjQwNzI3MDgyMzQ1WjAYMRYw
FAYDVQQDEw02Njk3N2Y5NS1lZmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzQ+LDe8l4sNfSokSkawfnPP+W+uH8hgOv82BmWuTSb1ARspjaUROkRpe
De0cQZzrjZ6saSfFNacrtbMRiZZNkQHOm5Oq5akPcAq6pOsj2LzKv4JBqZwUwOk9
TzNeS+uvS8qvfKQrKbvTz+hXNh5X/2jTf9YR/wCpDPkmy1oNn8aohxAeBMfW8PRx
2+N8dVSgW2WUWuTF2Q2UH0QEKbrVUUaoGkwRMSPFVuMAHzWlE8BZzSgghssd52GQ
ECM/4wyEuPoKar3jWDEH5WLie+fWLw34g1Eeobxsz25lB8OpRJpicx37uLtni5qe
Hj5qV3vHx67JKS8jDLmhIJiXWdRgcQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFG+o
7p9ivRxnCTieDWTy6e9icKL+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNDYxMEYzODQ0MTUxMUVGQTExN0MwNEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlSwMA0GCSqGSIb3DQEB
CwUAA4IBAQC5BJEYhuR7iiCNpeoDvSAiWqfrcvK6cOqjD90xkPMLZ27obAdAul0t
gL6PkjsXtdGgp+0s/Lz/dYoQqGAb0O/pNRL9GqEMX0ZX3pEOfkDI3UhbW9StSfiz
etTDjV/7L4KVywkx4Z8PRMI7v7egxLsWtJ+QnFvoI6ijBhkV07oDGdxuzUH3Mrrh
NTHOSj4pWjhQOO9IwssTXn6YlnLeuGBHgeIkpRlwi50Fhh/Rygy81kIW0SWTS7jh
wiu3JP+AwmRGpnXBZGkdAq8alG5eCv1FMvtRYw18WREZhryq43Yeipv5ShkO52Kj
41d6mdP4gzsrgf30vLC7c2DP2z1kWOdn
-----END CERTIFICATE-----
Generated at Sun Jul 28 03:03:26 2024 by rpki-client on console-ams.rpki-client.org