Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4358C7C6018911EF92A57663017001B1.roa
File: 4358C7C6018911EF92A57663017001B1.roa (raw, json)
Hash identifier: 29eKgplVja8pBluvo3pDZSUBevBF7LkhWSCAQevM82o=
Subject key identifier: B1:55:69:2C:01:9D:1C:73:AF:D9:00:77:9C:31:BA:34:1C:CB:D2:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 84A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4358C7C6018911EF92A57663017001B1.roa
Signing time: Tue 23 Apr 2024 15:50:52 +0000
ROA not before: Tue 23 Apr 2024 15:50:48 +0000
ROA not after: Thu 02 May 2024 15:50:48 +0000
asID: 54467
IP address blocks: 156.239.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33953 (0x84a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 15:50:48 2024 GMT
Not After : May 2 15:50:48 2024 GMT
Subject: CN=6627d8dc-c017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:08:47:99:29:83:3f:50:c1:96:e1:5a:71:
a1:6b:d6:41:89:08:52:59:8a:a4:c3:e6:45:7c:bb:
51:7e:22:52:22:2b:71:52:16:70:ff:32:54:30:e8:
ed:d7:ac:8d:f3:32:bc:b4:59:16:75:14:8c:3b:71:
84:13:04:89:a1:c2:78:ee:09:dd:8c:c0:92:b1:c0:
ad:47:d8:01:39:01:5d:47:cf:15:e7:47:eb:f8:c7:
f3:10:4a:21:09:fe:69:2e:65:95:d3:ea:d2:97:ef:
39:94:da:e7:69:5c:32:ea:20:b2:88:17:c9:d8:35:
e3:11:65:09:31:8e:63:96:39:86:00:8e:bd:9a:d4:
da:42:8a:32:d6:ff:af:07:87:4c:76:8b:82:09:06:
7f:c1:d4:23:a7:7e:7e:80:40:db:b0:99:86:0e:1a:
02:79:66:13:db:d4:5c:6a:1d:a6:7c:7f:9e:ff:15:
71:cd:be:fe:28:81:ca:db:bd:42:4c:65:7a:f5:ed:
d9:ba:8b:75:4e:f3:84:49:32:7c:3c:b1:be:15:c7:
13:49:b4:a4:04:03:50:13:8d:36:0b:75:e5:74:d9:
8f:4c:e1:fb:47:e0:32:57:d7:d1:32:00:96:19:80:
08:6f:f5:1b:3b:55:e5:3c:07:e4:d9:9f:96:ed:00:
98:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:55:69:2C:01:9D:1C:73:AF:D9:00:77:9C:31:BA:34:1C:CB:D2:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4358C7C6018911EF92A57663017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.224.0/19
Signature Algorithm: sha256WithRSAEncryption
4c:e6:58:dd:13:e2:9f:11:fd:72:e4:6c:64:11:18:a5:66:46:
e1:c5:a5:4c:cf:f6:4d:32:c1:b0:53:fa:ad:96:9c:7b:3f:5e:
e3:eb:5d:b7:8a:5a:1f:1a:c3:08:fe:cc:3e:d8:c9:e5:d5:ba:
e7:fa:9e:21:17:7f:2b:62:17:d4:f3:f4:82:49:33:8d:51:74:
b0:56:6b:c2:aa:50:5c:27:93:d7:b9:02:d2:39:1d:42:39:a3:
1d:dc:d1:47:1e:25:d6:ac:86:25:e8:1f:2d:6d:ae:03:17:69:
9f:44:aa:15:0b:b9:f0:6c:30:46:2d:f8:ff:41:8a:d6:4d:2c:
c8:65:24:be:cc:54:ef:18:61:f7:eb:8f:7e:ce:fb:9e:d3:57:
8f:04:62:73:01:cc:21:f2:5b:15:88:09:28:c1:47:f8:03:fb:
ed:8b:59:cb:b7:30:4d:ab:34:93:28:76:a4:da:e3:7f:2c:09:
de:d4:67:bf:6a:86:0a:23:f0:2b:46:86:54:9a:53:c8:06:1a:
4d:f7:5f:60:1b:0c:34:2d:97:28:15:45:96:10:27:22:23:d5:
d9:51:5c:2d:fd:3d:36:1d:ad:3b:bd:07:83:57:12:4a:9a:2e:
99:82:18:71:4d:e4:96:da:a4:4b:63:85:c4:50:96:ba:3b:dd:
90:3b:3a:7e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIShMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDIzMTU1MDQ4WhcNMjQwNTAyMTU1MDQ4WjAYMRYw
FAYDVQQDEw02NjI3ZDhkYy1jMDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvDMIR5kpgz9QwZbhWnGha9ZBiQhSWYqkw+ZFfLtRfiJSIitxUhZw/zJU
MOjt16yN8zK8tFkWdRSMO3GEEwSJocJ47gndjMCSscCtR9gBOQFdR88V50fr+Mfz
EEohCf5pLmWV0+rSl+85lNrnaVwy6iCyiBfJ2DXjEWUJMY5jljmGAI69mtTaQooy
1v+vB4dMdouCCQZ/wdQjp35+gEDbsJmGDhoCeWYT29Rcah2mfH+e/xVxzb7+KIHK
271CTGV69e3Zuot1TvOESTJ8PLG+FccTSbSkBANQE402C3XldNmPTOH7R+AyV9fR
MgCWGYAIb/UbO1XlPAfk2Z+W7QCYkQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLFV
aSwBnRxzr9kAd5wxujQcy9LtMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MzU4QzdDNjAxODkxMUVGOTJBNTc2NjMwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnO/gMA0GCSqGSIb3DQEBCwUA
A4IBAQBM5ljdE+KfEf1y5GxkERilZkbhxaVMz/ZNMsGwU/qtlpx7P17j6123ilof
GsMI/sw+2Mnl1brn+p4hF38rYhfU8/SCSTONUXSwVmvCqlBcJ5PXuQLSOR1COaMd
3NFHHiXWrIYl6B8tba4DF2mfRKoVC7nwbDBGLfj/QYrWTSzIZSS+zFTvGGH3649+
zvue01ePBGJzAcwh8lsViAkowUf4A/vti1nLtzBNqzSTKHak2uN/LAne1Ge/aoYK
I/ArRoZUmlPIBhpN919gGww0LZcoFUWWECciI9XZUVwt/T02Ha07vQeDVxJKmi6Z
ghhxTeSW2qRLY4XEUJa6O92QOzp+
-----END CERTIFICATE-----
Generated at Fri May 3 03:52:32 2024 by rpki-client on console-fra.rpki-client.org