Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D41FA6AECA811EEAB565D68775412E6.roa
File: 8D41FA6AECA811EEAB565D68775412E6.roa (raw, json)
Hash identifier: olwSO55rPHQh/XiYtBRXWOmrunHb01p/kdVVvxsOT1w=
Subject key identifier: F4:C2:00:9D:3C:86:FB:F6:31:D3:7D:37:86:16:BD:61:5E:D3:18:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 80D3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D41FA6AECA811EEAB565D68775412E6.roa
Signing time: Thu 28 Mar 2024 02:11:56 +0000
ROA not before: Thu 28 Mar 2024 02:11:53 +0000
ROA not after: Mon 29 Apr 2024 02:11:53 +0000
asID: 141718
IP address blocks: 156.237.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32979 (0x80d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 02:11:53 2024 GMT
Not After : Apr 29 02:11:53 2024 GMT
Subject: CN=6604d1ec-005f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9e:fd:d5:f5:ae:68:c8:af:ae:85:7d:f6:4c:
73:b2:92:93:b2:a0:55:ca:28:08:f2:bf:dd:40:b4:
57:2f:21:f7:70:b3:37:2c:64:8f:cb:ba:20:6c:3c:
98:42:98:9a:ca:5c:73:ba:0a:d7:89:53:80:84:3c:
d1:b6:7c:cb:b4:80:46:ae:e5:de:08:ed:91:6a:15:
0c:c2:e2:68:9b:ec:7f:29:02:cd:b5:f3:6f:3c:a0:
7b:55:7f:47:30:ca:6b:c6:3e:e0:14:b5:70:10:57:
21:09:91:d3:a1:fd:19:8d:c1:3a:db:e9:a7:3f:5e:
0f:d3:ec:99:2d:bf:c9:d6:01:a6:e1:39:80:74:7c:
42:42:89:c5:a7:70:d6:67:f7:46:90:6c:72:92:65:
2e:ca:27:51:c4:93:35:a4:0d:ed:ba:6b:1b:f7:e5:
f6:09:17:c9:0d:5c:a8:4c:7a:1e:f9:49:a1:05:ed:
cd:81:bd:90:d5:41:4f:e6:65:b6:c2:6a:07:b3:37:
80:8e:35:27:59:20:85:51:7e:4e:9a:fe:6f:f9:26:
4b:a5:61:9e:5a:db:74:60:ab:be:b3:88:0f:3c:65:
5b:33:df:56:73:e4:b6:e8:8e:2b:f1:3a:25:e2:2d:
ad:3b:5f:82:45:90:f2:ae:56:a6:69:06:75:21:8d:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C2:00:9D:3C:86:FB:F6:31:D3:7D:37:86:16:BD:61:5E:D3:18:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D41FA6AECA811EEAB565D68775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.1.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:51:d6:4c:a1:25:9c:31:29:ba:fe:41:67:a6:63:36:8a:90:
08:d8:25:5d:67:8b:c7:c0:ff:d2:c4:31:91:e1:20:4d:83:1e:
4d:a6:98:c3:64:8c:e9:45:ca:8a:96:cd:55:f8:7f:19:a9:d3:
44:ee:0f:72:e7:ca:e4:44:e1:6d:05:27:13:15:71:1e:7f:f0:
76:58:2a:51:c0:21:8b:ce:fb:bc:7d:f1:f1:7c:d6:56:47:5d:
33:76:ac:a1:d0:07:5a:1b:52:ac:10:5b:32:99:8a:94:59:b5:
69:aa:18:59:55:be:3d:95:e5:d9:3b:d8:ef:eb:1d:a8:45:ff:
74:a9:53:20:2a:17:eb:28:b3:0d:89:5e:08:92:dd:e5:da:2a:
a4:8c:ac:c4:20:23:a4:e1:71:cb:57:12:b7:87:f4:3b:32:06:
c4:b1:05:1e:d7:2b:a1:ed:62:8d:3c:39:fd:ea:e6:8a:1c:99:
76:cf:ec:80:86:0a:0e:d1:89:02:ba:53:97:f8:72:2d:40:d0:
a1:2c:39:43:e3:76:6f:ce:23:64:cb:c3:08:d2:f6:22:c3:b0:
e3:95:80:3d:a9:bc:ee:e3:48:85:aa:7e:12:74:e8:7f:11:5a:
4b:98:6f:16:c5:13:71:b0:01:c9:79:0a:1f:cc:8e:f7:bf:ab:
fe:01:47:ce
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIDTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwMzI4MDIxMTUzWhcNMjQwNDI5MDIxMTUzWjAYMRYw
FAYDVQQDEw02NjA0ZDFlYy0wMDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuZ791fWuaMivroV99kxzspKTsqBVyigI8r/dQLRXLyH3cLM3LGSPy7og
bDyYQpiaylxzugrXiVOAhDzRtnzLtIBGruXeCO2RahUMwuJom+x/KQLNtfNvPKB7
VX9HMMprxj7gFLVwEFchCZHTof0ZjcE62+mnP14P0+yZLb/J1gGm4TmAdHxCQonF
p3DWZ/dGkGxykmUuyidRxJM1pA3tumsb9+X2CRfJDVyoTHoe+UmhBe3Ngb2Q1UFP
5mW2wmoHszeAjjUnWSCFUX5Omv5v+SZLpWGeWtt0YKu+s4gPPGVbM99Wc+S26I4r
8Tol4i2tO1+CRZDyrlamaQZ1IY38cQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPTC
AJ08hvv2MdN9N4YWvWFe0xj7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84RDQxRkE2QUVDQTgxMUVFQUI1NjVENjg3NzU0MTJFNi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO0BMA0GCSqGSIb3DQEBCwUA
A4IBAQBOUdZMoSWcMSm6/kFnpmM2ipAI2CVdZ4vHwP/SxDGR4SBNgx5NppjDZIzp
RcqKls1V+H8ZqdNE7g9y58rkROFtBScTFXEef/B2WCpRwCGLzvu8ffHxfNZWR10z
dqyh0AdaG1KsEFsymYqUWbVpqhhZVb49leXZO9jv6x2oRf90qVMgKhfrKLMNiV4I
kt3l2iqkjKzEICOk4XHLVxK3h/Q7MgbEsQUe1yuh7WKNPDn96uaKHJl2z+yAhgoO
0YkCulOX+HItQNChLDlD43ZvziNky8MI0vYiw7DjlYA9qbzu40iFqn4SdOh/EVpL
mG8WxRNxsAHJeQofzI73v6v+AUfO
-----END CERTIFICATE-----
Generated at Mon Apr 29 03:01:25 2024 by rpki-client on console-ams.rpki-client.org