Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07176854018811EFB54E9E58017001B1.roa
File: 07176854018811EFB54E9E58017001B1.roa (raw, json)
Hash identifier: my5fHouhaThYi4U78p00AiF7PiX5FszeB3vDA716aZY=
Subject key identifier: A6:42:49:D5:84:0E:33:52:75:74:44:E7:A0:8B:46:B8:C9:D9:DF:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8493
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07176854018811EFB54E9E58017001B1.roa
Signing time: Tue 23 Apr 2024 15:42:02 +0000
ROA not before: Tue 23 Apr 2024 15:41:58 +0000
ROA not after: Wed 01 May 2024 15:41:58 +0000
asID: 136933
IP address blocks: 45.195.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33939 (0x8493)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 15:41:58 2024 GMT
Not After : May 1 15:41:58 2024 GMT
Subject: CN=6627d6ca-8809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:78:2e:88:d7:e7:3c:ca:e8:ea:be:24:b9:
96:0b:b5:02:f9:49:25:98:3a:52:6e:1e:91:b5:a1:
0d:34:b8:7c:e3:8d:8a:5f:a8:a7:f5:f1:ff:b1:91:
d6:23:0b:cf:72:2b:b6:74:6d:37:03:44:2d:a4:2e:
65:c7:cf:13:3d:64:6e:55:51:76:e7:3b:b2:a2:1e:
d6:1f:6a:bc:6f:63:80:d2:b2:b0:97:c5:9f:64:fe:
1a:28:a2:a7:ad:d5:dd:1d:8e:3a:4d:9e:f5:e8:fc:
3e:db:56:ed:65:c3:3f:71:08:7c:43:18:fe:d2:92:
55:43:d0:3a:19:60:d2:32:4d:6c:e3:ca:e7:6f:cf:
91:d1:fb:46:7c:c8:9b:60:6a:e5:ac:18:c9:29:fd:
a9:e8:9b:c5:1e:48:81:4f:df:20:9c:3e:9c:30:49:
57:85:33:8b:c1:05:48:0d:05:cc:bc:03:dd:17:8e:
e5:57:56:db:e4:db:61:a8:4b:d0:bc:d0:52:9b:90:
d2:b0:46:8b:4f:d6:28:e5:77:37:48:23:25:60:f8:
af:c6:01:37:4a:93:d0:12:37:ae:7d:5a:cd:4e:82:
fe:d8:47:3f:6d:fa:0b:70:68:7b:d5:bd:b3:72:76:
3e:a7:62:68:f7:65:5f:82:ab:e3:d5:45:0a:1f:d2:
46:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:42:49:D5:84:0E:33:52:75:74:44:E7:A0:8B:46:B8:C9:D9:DF:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07176854018811EFB54E9E58017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.149.0/24
Signature Algorithm: sha256WithRSAEncryption
88:16:b1:01:73:4f:67:13:fb:1f:1e:c9:4d:93:c7:fd:55:9c:
b1:8c:ff:16:52:98:34:b7:f1:31:25:04:ed:22:8b:dd:a6:25:
3c:3c:12:0e:be:fd:3a:ee:b7:99:85:7f:7b:63:9f:88:d6:52:
04:a9:00:d9:f6:a5:da:89:5d:d8:f3:bd:17:48:ee:ae:a8:76:
c9:c2:81:f4:d9:c2:d1:b6:db:6e:36:5c:32:40:dd:41:9e:2d:
d0:f7:5b:58:89:c1:c6:e4:d4:d4:a1:fe:67:4c:bd:41:12:2c:
85:08:ac:2d:48:ac:8a:8a:dd:9a:81:39:e6:ce:56:bc:b1:7b:
fe:ad:5a:e5:a4:9b:60:dc:03:59:53:e1:d4:9a:ed:cc:3d:7f:
3d:00:0d:84:1b:e0:83:75:79:82:a2:82:08:8a:89:59:aa:c4:
20:56:d0:68:44:ed:3f:61:b9:3f:42:57:ad:57:13:5f:19:c7:
b6:a7:52:73:00:1c:69:cb:53:9a:9a:f8:92:7e:ed:19:62:b9:
18:5a:62:c7:2e:eb:ff:53:22:a6:49:48:d7:ee:50:f2:75:4e:
f1:a4:38:0c:e6:aa:4f:14:ff:34:bf:5d:b7:8d:57:33:bb:c4:
08:d8:74:64:99:62:b2:bc:54:ae:6d:5a:46:c7:70:73:10:04:
48:75:7e:2d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAISTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDIzMTU0MTU4WhcNMjQwNTAxMTU0MTU4WjAYMRYw
FAYDVQQDEw02NjI3ZDZjYS04ODA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxiR4LojX5zzK6Oq+JLmWC7UC+UklmDpSbh6RtaENNLh8442KX6in9fH/
sZHWIwvPciu2dG03A0QtpC5lx88TPWRuVVF25zuyoh7WH2q8b2OA0rKwl8WfZP4a
KKKnrdXdHY46TZ716Pw+21btZcM/cQh8Qxj+0pJVQ9A6GWDSMk1s48rnb8+R0ftG
fMibYGrlrBjJKf2p6JvFHkiBT98gnD6cMElXhTOLwQVIDQXMvAPdF47lV1bb5Nth
qEvQvNBSm5DSsEaLT9Yo5Xc3SCMlYPivxgE3SpPQEjeufVrNToL+2Ec/bfoLcGh7
1b2zcnY+p2Jo92Vfgqvj1UUKH9JGJwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKZC
SdWEDjNSdXRE56CLRrjJ2d/4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNzE3Njg1NDAxODgxMUVGQjU0RTlFNTgwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcOVMA0GCSqGSIb3DQEBCwUA
A4IBAQCIFrEBc09nE/sfHslNk8f9VZyxjP8WUpg0t/ExJQTtIovdpiU8PBIOvv06
7reZhX97Y5+I1lIEqQDZ9qXaiV3Y870XSO6uqHbJwoH02cLRtttuNlwyQN1Bni3Q
91tYicHG5NTUof5nTL1BEiyFCKwtSKyKit2agTnmzla8sXv+rVrlpJtg3ANZU+HU
mu3MPX89AA2EG+CDdXmCooIIiolZqsQgVtBoRO0/Ybk/QletVxNfGce2p1JzABxp
y1OamviSfu0ZYrkYWmLHLuv/UyKmSUjX7lDydU7xpDgM5qpPFP80v123jVczu8QI
2HRkmWKyvFSubVpGx3BzEARIdX4t
-----END CERTIFICATE-----
Generated at Thu May 2 04:47:49 2024 by rpki-client on console-fra.rpki-client.org