Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBF90F505BB611ECB76CB1C45A40D577.roa
File: FBF90F505BB611ECB76CB1C45A40D577.roa (raw, json)
Hash identifier: dg/llEOWPTp74PRLfER90Mj/WndvACNxzS4dxVZI8+g=
Subject key identifier: F4:4E:F5:99:AE:C9:12:C2:9C:9C:A5:E2:D1:FF:42:55:2C:0E:30:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 13BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBF90F505BB611ECB76CB1C45A40D577.roa
Signing time: Mon 13 Dec 2021 01:50:01 +0000
ROA not before: Mon 13 Dec 2021 01:49:58 +0000
ROA not after: Fri 30 Dec 2022 01:49:58 +0000
asID: 135097
IP address blocks: 154.204.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5053 (0x13bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 13 01:49:58 2021 GMT
Not After : Dec 30 01:49:58 2022 GMT
Subject: CN=61b6a6c9-87a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:cc:81:96:9b:f3:df:e6:9e:91:d6:9a:fc:
8f:62:d2:ac:34:f7:0c:06:fa:1e:34:0c:90:6e:a0:
40:c1:64:a2:a7:9d:18:64:49:b0:39:59:ae:b9:31:
66:e6:a7:fa:be:dd:a7:c1:83:29:7a:9b:74:8d:bd:
37:62:b4:e5:5f:98:d0:d4:80:a6:12:30:61:4b:a4:
0d:64:30:1f:6e:08:1a:3b:fa:24:62:90:da:d0:69:
fd:3b:fb:e6:09:14:be:30:a5:60:d3:20:9b:8a:05:
3d:9b:57:02:cf:71:14:14:e9:4a:e2:06:fc:2a:8b:
31:4e:e4:94:96:c4:24:63:0b:b5:0e:5c:30:49:b2:
f9:52:0b:62:3c:ad:22:ed:2a:3a:f7:8b:8b:82:d9:
c7:04:a3:75:f8:dc:aa:77:b2:21:0c:56:97:45:6f:
9b:84:bc:ff:9c:6b:88:26:e3:2e:59:67:f4:fd:c5:
e2:8e:b3:b3:c7:90:d9:a0:54:ad:b9:cb:0f:3f:51:
52:1d:44:fe:9e:ed:ea:c0:19:26:9b:74:06:b0:47:
2d:fa:d4:de:9e:c7:76:1a:10:c8:33:fc:55:72:d0:
66:8b:10:ea:46:58:28:6b:ec:47:bb:b2:dd:a8:11:
3f:7a:ab:92:70:06:e2:f1:09:0d:b7:4d:55:6d:76:
69:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4E:F5:99:AE:C9:12:C2:9C:9C:A5:E2:D1:FF:42:55:2C:0E:30:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBF90F505BB611ECB76CB1C45A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.74.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:b3:93:a2:1f:2e:5a:3d:23:2a:5d:d8:7d:ed:82:e1:b7:47:
87:10:22:e7:8b:56:07:4f:60:4c:3c:8e:a3:0c:da:4e:a5:f8:
f3:b7:1e:0c:8f:11:8c:f7:82:6e:83:ec:61:ed:bf:58:fc:49:
4e:e2:7e:43:ae:50:74:05:fe:1a:9e:ef:9e:3e:50:36:be:52:
c0:93:46:8c:20:c2:17:be:79:ac:e0:94:99:9c:04:5b:80:59:
49:31:e8:02:40:8d:a0:30:7e:4c:74:08:72:e1:3a:83:42:7a:
ce:25:37:12:6d:d7:fd:12:44:dc:96:1d:eb:bf:61:bb:f9:30:
13:8c:73:c9:aa:63:fd:ad:bc:4d:b7:f3:4f:1e:a3:34:65:3e:
d6:30:6b:d8:96:5f:29:36:0d:6c:d3:b8:28:cf:a9:4f:99:ff:
ad:ff:84:7d:1e:e2:0b:e6:ad:0c:23:69:8c:d4:36:bc:5f:0d:
a1:90:0b:48:bb:49:b4:39:8e:45:15:d0:8d:ef:a9:fa:6d:0c:
61:28:27:b0:73:d4:a7:32:84:67:a6:00:a4:85:9e:8a:6e:ad:
85:ca:a9:21:35:3a:99:b2:72:80:6f:d8:0a:22:11:c6:7a:98:
e2:d5:d2:22:1a:91:9f:08:9a:fa:f2:f6:26:44:18:8c:6a:42:
a0:58:30:94
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICE70wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTEyMTMwMTQ5NThaFw0yMjEyMzAwMTQ5NThaMBgxFjAU
BgNVBAMMDTYxYjZhNmM5LTg3YTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCkIcyBlpvz3+aekdaa/I9i0qw09wwG+h40DJBuoEDBZKKnnRhkSbA5Wa65
MWbmp/q+3afBgyl6m3SNvTditOVfmNDUgKYSMGFLpA1kMB9uCBo7+iRikNrQaf07
++YJFL4wpWDTIJuKBT2bVwLPcRQU6UriBvwqizFO5JSWxCRjC7UOXDBJsvlSC2I8
rSLtKjr3i4uC2ccEo3X43Kp3siEMVpdFb5uEvP+ca4gm4y5ZZ/T9xeKOs7PHkNmg
VK25yw8/UVIdRP6e7erAGSabdAawRy361N6ex3YaEMgz/FVy0GaLEOpGWChr7Ee7
st2oET96q5JwBuLxCQ23TVVtdmlHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU9E71
ma7JEsKcnKXi0f9CVSwOMK8wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0ZCRjkwRjUwNUJCNjExRUNCNzZDQjFDNDVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACazEowDQYJKoZIhvcNAQEL
BQADggEBANazk6IfLlo9Iypd2H3tguG3R4cQIueLVgdPYEw8jqMM2k6l+PO3HgyP
EYz3gm6D7GHtv1j8SU7ifkOuUHQF/hqe754+UDa+UsCTRowgwhe+eazglJmcBFuA
WUkx6AJAjaAwfkx0CHLhOoNCes4lNxJt1/0SRNyWHeu/Ybv5MBOMc8mqY/2tvE23
808eozRlPtYwa9iWXyk2DWzTuCjPqU+Z/63/hH0e4gvmrQwjaYzUNrxfDaGQC0i7
SbQ5jkUV0I3vqfptDGEoJ7Bz1KcyhGemAKSFnopurYXKqSE1OpmycoBv2AoiEcZ6
mOLV0iIakZ8Imvry9iZEGIxqQqBYMJQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:13 2023 by rpki-client on console-ams.rpki-client.org