Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/151B781AB21711EF83CC2C97762E951A.roa
File: 151B781AB21711EF83CC2C97762E951A.roa (raw, json)
Hash identifier: G91vfJTLOF0o10ifSiaMutoKFJ1FkUnXfRromvHfzbQ=
Subject key identifier: 66:48:F3:EB:9A:E9:96:59:93:9F:39:4D:B3:79:E7:6E:33:98:EA:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DF56
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/151B781AB21711EF83CC2C97762E951A.roa
Signing time: Wed 04 Dec 2024 08:09:28 +0000
ROA not before: Wed 04 Dec 2024 08:09:24 +0000
ROA not after: Thu 23 Jan 2025 08:09:24 +0000
asID: 63139
IP address blocks: 156.227.200.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57174 (0xdf56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 4 08:09:24 2024 GMT
Not After : Jan 23 08:09:24 2025 GMT
Subject: CN=67500e38-1bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:c8:a6:2c:9b:55:e4:82:00:19:56:48:02:
62:09:04:2c:89:5d:4b:a8:9d:4e:b2:87:ef:02:ec:
d6:8f:5b:b2:37:9e:d7:21:4c:6a:54:46:0f:d4:3c:
f4:b1:26:f9:5b:98:b0:d3:d2:65:09:8b:be:ab:ad:
2b:51:7c:47:4a:bd:77:fc:9b:71:ad:1b:97:7f:7c:
be:2d:3c:94:b0:1f:c2:56:de:33:20:a9:13:29:a6:
a2:fd:32:e9:3e:7c:c3:ec:0b:67:b8:13:b0:5e:23:
84:45:6e:28:b4:3b:21:7e:84:f1:23:4b:40:3e:9e:
c9:3c:9c:18:87:f2:33:2e:3b:59:12:b4:e3:94:bc:
14:e1:4f:a2:32:00:1d:45:8b:f8:1d:f4:90:96:89:
81:32:8a:80:96:1f:5a:7e:32:94:69:01:d6:45:09:
ea:a7:05:ae:87:12:88:43:4e:37:32:10:7d:98:00:
59:6b:cc:5b:61:4c:80:c1:cf:55:d7:bc:1c:68:1c:
58:8d:c6:c0:5f:2a:5c:27:65:f5:de:db:c5:19:13:
53:69:34:d4:2a:e8:ec:1e:78:ea:c4:db:dc:ad:5b:
5a:97:ab:f9:0a:bd:df:af:e4:cc:ac:eb:4e:00:43:
de:dd:45:a1:f5:ba:38:79:83:fb:e5:6d:a2:f8:bc:
d4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:48:F3:EB:9A:E9:96:59:93:9F:39:4D:B3:79:E7:6E:33:98:EA:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/151B781AB21711EF83CC2C97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.200.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:43:67:9c:4b:f0:9a:1c:19:8e:df:ee:02:80:b3:a0:b9:c3:
c5:35:d8:00:1b:c5:e0:15:aa:17:39:11:22:a6:bd:5d:e7:30:
66:e2:9e:8c:c4:28:59:22:1a:c6:3f:7f:b0:de:31:3e:72:e0:
5b:89:c7:89:62:5f:8d:43:c3:ca:e5:8f:d5:10:7c:4c:96:a6:
e4:64:c0:ec:f2:2f:0f:44:f4:2c:0d:63:86:b9:22:2e:91:53:
09:de:38:79:57:3a:14:36:7f:c5:3e:4c:47:ad:2e:bf:77:dc:
52:b5:74:d9:1f:ef:06:12:8f:75:e4:b8:4c:15:b5:f4:05:eb:
ad:67:b0:2d:27:fb:70:de:fc:9b:3d:15:24:21:7c:c0:ef:b7:
be:47:59:e4:7f:3d:d1:d5:ad:29:9c:6b:cd:2a:23:40:35:dd:
f8:4a:cd:cf:e8:48:11:e9:5d:79:b1:01:54:52:3f:fc:c5:73:
b2:3d:67:81:f5:b3:52:af:55:42:62:19:50:94:b6:61:23:92:
8a:50:74:1b:2c:b4:63:8e:c6:bf:a1:2a:79:fd:ec:2a:5b:bf:
46:7d:1f:bd:37:cd:94:b3:49:75:40:b1:da:8c:52:1f:b3:fd:
72:7c:2b:3f:ae:8c:96:74:8e:1c:c5:44:4d:ae:a5:d8:d5:5e:
cd:69:1e:44
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAN9WMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjA0MDgwOTI0WhcNMjUwMTIzMDgwOTI0WjAYMRYw
FAYDVQQDEw02NzUwMGUzOC0xYmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtx3IpiybVeSCABlWSAJiCQQsiV1LqJ1OsofvAuzWj1uyN57XIUxqVEYP
1Dz0sSb5W5iw09JlCYu+q60rUXxHSr13/JtxrRuXf3y+LTyUsB/CVt4zIKkTKaai
/TLpPnzD7AtnuBOwXiOERW4otDshfoTxI0tAPp7JPJwYh/IzLjtZErTjlLwU4U+i
MgAdRYv4HfSQlomBMoqAlh9afjKUaQHWRQnqpwWuhxKIQ043MhB9mABZa8xbYUyA
wc9V17wcaBxYjcbAXypcJ2X13tvFGRNTaTTUKujsHnjqxNvcrVtal6v5Cr3fr+TM
rOtOAEPe3UWh9bo4eYP75W2i+LzUuQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGZI
8+ua6ZZZk585TbN5524zmOrBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNTFCNzgxQUIyMTcxMUVGODNDQzJDOTc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOPIMA0GCSqGSIb3DQEBCwUA
A4IBAQB7Q2ecS/CaHBmO3+4CgLOgucPFNdgAG8XgFaoXOREipr1d5zBm4p6MxChZ
IhrGP3+w3jE+cuBbiceJYl+NQ8PK5Y/VEHxMlqbkZMDs8i8PRPQsDWOGuSIukVMJ
3jh5VzoUNn/FPkxHrS6/d9xStXTZH+8GEo915LhMFbX0BeutZ7AtJ/tw3vybPRUk
IXzA77e+R1nkfz3R1a0pnGvNKiNANd34Ss3P6EgR6V15sQFUUj/8xXOyPWeB9bNS
r1VCYhlQlLZhI5KKUHQbLLRjjsa/oSp5/ewqW79GfR+9N82Us0l1QLHajFIfs/1y
fCs/royWdI4cxURNrqXY1V7NaR5E
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:43 2025 by rpki-client