Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07610F98FB9511EE8D36895B017001B1.roa
File: 07610F98FB9511EE8D36895B017001B1.roa (raw, json)
Hash identifier: kGiLcXBzhTqYm8McTwj1enF4rp/cagTwEWGte4M3dLU=
Subject key identifier: 48:A1:EC:04:52:00:1E:B6:7A:97:77:58:EB:55:E0:71:D4:8C:78:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 827B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07610F98FB9511EE8D36895B017001B1.roa
Signing time: Tue 16 Apr 2024 01:59:59 +0000
ROA not before: Tue 16 Apr 2024 01:59:55 +0000
ROA not after: Mon 29 Apr 2024 01:59:55 +0000
asID: 141883
IP address blocks: 156.242.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33403 (0x827b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 01:59:55 2024 GMT
Not After : Apr 29 01:59:55 2024 GMT
Subject: CN=661ddb9f-9619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b3:c4:66:b8:d1:16:77:9c:a9:04:9d:ec:20:
a6:d2:03:5e:47:bb:8f:2b:78:08:4f:f5:5b:53:f7:
6b:c5:a8:dd:9f:87:f1:69:40:33:da:4e:0c:56:28:
07:0a:3f:be:25:c1:94:c6:f1:a2:7f:6a:a6:75:12:
a2:10:31:6d:9a:37:da:1b:00:6c:c4:bb:9b:fb:3e:
2a:c4:7d:a1:17:be:5d:0b:47:8c:d6:e5:d2:76:a4:
78:7f:20:88:56:a3:62:63:41:6e:49:56:26:7a:3d:
db:bb:69:66:93:9c:6f:fc:75:66:af:dd:5c:95:d0:
57:01:5f:d5:8d:98:1e:f0:d9:fc:df:1b:9c:55:0c:
4f:72:57:25:70:bc:7f:58:aa:ae:5f:21:e8:d0:7b:
1c:b4:dc:c6:0c:b4:c9:b1:3d:d6:d6:11:a7:fc:26:
ce:ec:1a:89:fa:fa:eb:39:c6:e3:ac:69:cd:1b:81:
73:d6:60:2c:2b:32:cb:b6:39:e9:c8:48:44:5d:f4:
e4:fb:6e:d0:76:0a:19:66:f4:90:66:2c:23:43:63:
c0:71:63:1a:94:12:92:05:e7:ba:a2:c2:f4:d4:46:
a3:c0:27:2f:22:20:04:c5:b8:53:78:84:1c:96:98:
88:36:ad:1c:c5:a9:53:8e:60:20:f4:e9:01:16:a9:
60:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A1:EC:04:52:00:1E:B6:7A:97:77:58:EB:55:E0:71:D4:8C:78:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07610F98FB9511EE8D36895B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.12.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:08:b9:d9:99:03:83:a8:8a:ef:77:c2:34:32:53:a7:1d:ea:
a6:3c:ec:07:d3:f0:18:51:87:55:a3:d6:3a:85:c4:28:5f:4c:
a0:37:82:9c:e1:09:36:38:1a:00:5a:97:41:74:8f:4e:20:42:
ce:81:c3:32:c6:5b:1d:87:3a:4c:17:a6:06:c6:82:d0:ff:49:
9d:86:8a:ee:98:ff:98:f9:94:91:b7:a3:c9:ad:14:c9:c3:79:
55:3d:69:49:fb:ff:e9:ce:bf:f5:74:95:09:4f:c2:b5:89:66:
ac:50:12:a8:87:9d:27:bc:3c:7f:f0:9c:f8:dc:42:dd:b3:52:
43:26:4b:20:93:83:23:dd:8e:c5:9e:7f:fe:13:25:6b:0a:23:
26:3a:40:35:d3:90:f9:21:73:2a:bf:15:62:a7:d2:74:7d:a8:
09:f1:92:19:23:e8:f8:3f:3c:2c:38:ef:80:11:cb:59:b1:57:
e1:1e:54:e0:8e:97:87:cd:d7:2a:33:d6:c5:85:59:53:60:0d:
20:b7:0a:c1:2b:b8:50:af:e2:92:e6:e8:33:15:4b:b3:5f:de:
03:0e:f8:82:44:d8:1e:e3:1e:f8:f2:c8:56:20:d7:70:a8:85:
ee:12:e8:fa:51:f2:d2:a4:02:fc:d0:fb:57:19:58:b9:95:ab:
ef:bb:24:52
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIJ7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDE2MDE1OTU1WhcNMjQwNDI5MDE1OTU1WjAYMRYw
FAYDVQQDEw02NjFkZGI5Zi05NjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7rPEZrjRFnecqQSd7CCm0gNeR7uPK3gIT/VbU/drxajdn4fxaUAz2k4M
VigHCj++JcGUxvGif2qmdRKiEDFtmjfaGwBsxLub+z4qxH2hF75dC0eM1uXSdqR4
fyCIVqNiY0FuSVYmej3bu2lmk5xv/HVmr91cldBXAV/VjZge8Nn83xucVQxPclcl
cLx/WKquXyHo0HsctNzGDLTJsT3W1hGn/CbO7BqJ+vrrOcbjrGnNG4Fz1mAsKzLL
tjnpyEhEXfTk+27QdgoZZvSQZiwjQ2PAcWMalBKSBee6osL01EajwCcvIiAExbhT
eIQclpiINq0cxalTjmAg9OkBFqlgNQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEih
7ARSAB62epd3WOtV4HHUjHjMMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNzYxMEY5OEZCOTUxMUVFOEQzNjg5NUIwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPIMMA0GCSqGSIb3DQEBCwUA
A4IBAQANCLnZmQODqIrvd8I0MlOnHeqmPOwH0/AYUYdVo9Y6hcQoX0ygN4Kc4Qk2
OBoAWpdBdI9OIELOgcMyxlsdhzpMF6YGxoLQ/0mdhorumP+Y+ZSRt6PJrRTJw3lV
PWlJ+//pzr/1dJUJT8K1iWasUBKoh50nvDx/8Jz43ELds1JDJksgk4Mj3Y7Fnn/+
EyVrCiMmOkA105D5IXMqvxVip9J0fagJ8ZIZI+j4PzwsOO+AEctZsVfhHlTgjpeH
zdcqM9bFhVlTYA0gtwrBK7hQr+KS5ugzFUuzX94DDviCRNge4x748shWINdwqIXu
Euj6UfLSpAL80PtXGVi5lavvuyRS
-----END CERTIFICATE-----
Generated at Mon Apr 29 03:01:16 2024 by rpki-client on console-ams.rpki-client.org