Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BEF88860039311EFB1E3700E017001B1.roa
File: BEF88860039311EFB1E3700E017001B1.roa (raw, json)
Hash identifier: FrZEugEQ7zXo8iBdV74Zo6agKha6wRuEqhgHk7LMv5Q=
Subject key identifier: 6C:F2:7C:5C:3E:6D:18:87:0C:09:1C:97:EF:06:4A:35:0A:E8:37:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8644
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BEF88860039311EFB1E3700E017001B1.roa
Signing time: Fri 26 Apr 2024 06:10:57 +0000
ROA not before: Fri 26 Apr 2024 06:10:53 +0000
ROA not after: Sun 05 May 2024 06:10:53 +0000
asID: 139646
IP address blocks: 45.201.228.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34372 (0x8644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 06:10:53 2024 GMT
Not After : May 5 06:10:53 2024 GMT
Subject: CN=662b4571-72d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:59:fd:98:5b:47:d0:3b:ed:38:d7:eb:56:
2d:b8:47:85:4d:d7:0c:e9:47:d7:fc:45:53:f6:6e:
3e:de:db:4d:35:02:15:7d:cf:fb:dc:27:78:c1:0b:
ba:43:fa:56:65:aa:8e:00:1d:82:a8:30:aa:2f:10:
cf:b7:cb:bb:36:9d:35:60:41:cb:6a:de:f0:00:26:
9a:20:13:c6:88:65:1f:c2:1b:a2:a7:61:62:81:f3:
cb:76:10:71:cd:b4:ad:3e:ac:d0:1d:89:f4:c4:e2:
a3:e3:f2:0a:ca:5c:5e:d3:f5:37:df:57:16:16:87:
7a:62:ae:3d:b8:28:55:09:36:84:8d:5d:c4:3c:9a:
dc:a3:08:2a:90:a1:e7:95:7c:07:39:31:af:b7:aa:
ad:d6:ec:ec:e8:10:61:82:d0:bc:bf:6f:10:90:6c:
20:ac:35:e3:75:1c:09:d1:08:65:7a:3c:4d:c9:26:
53:48:eb:73:b5:f2:3d:92:1e:c3:74:4c:d4:de:8e:
6c:79:84:13:19:fa:8c:ca:c4:17:e9:ab:4e:30:b4:
9e:96:72:3b:9c:94:f2:00:bd:2c:6c:a8:2b:1f:9a:
4b:3f:61:8f:a4:68:3d:a5:9f:6c:ea:1a:f4:6f:22:
27:9d:34:76:ca:91:8b:d4:f7:ce:d8:99:bd:4d:e1:
d1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F2:7C:5C:3E:6D:18:87:0C:09:1C:97:EF:06:4A:35:0A:E8:37:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BEF88860039311EFB1E3700E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.228.0/23
Signature Algorithm: sha256WithRSAEncryption
84:46:a8:d2:cb:9c:29:43:1a:2d:1e:ad:9a:4f:ed:00:b0:39:
b7:d0:1b:88:db:96:0d:e3:09:1c:9e:31:9c:fc:f4:bc:c3:44:
a9:a9:32:19:0b:a2:3c:e5:f2:c7:01:52:38:f7:02:e8:b2:da:
b9:3b:e3:60:6e:0f:3a:a0:71:f2:96:df:37:18:cd:a8:5f:1c:
e8:6f:6c:8b:a3:d5:45:2a:89:e1:b2:43:26:b2:ae:4d:e5:3b:
0e:3a:6c:3e:f7:71:0d:46:ca:02:3b:9a:7b:35:cb:40:a0:a5:
e7:c2:a4:85:09:d2:d4:fa:8d:7b:33:4a:3b:46:f9:ff:2b:c6:
5f:15:b6:86:32:64:52:99:8a:44:83:7b:2b:27:b2:12:93:7f:
99:84:a3:8a:1f:56:b9:ff:c0:1e:ec:6c:41:1b:da:22:fa:0f:
a3:98:a9:35:77:fe:e9:ae:33:e3:9b:73:78:84:11:dd:6c:d6:
c2:c3:26:59:0e:7e:35:7d:5b:80:24:e5:f3:77:ef:60:03:c3:
15:06:9c:2f:63:d9:2d:d3:6c:5e:29:f7:89:51:0f:4c:cf:5e:
69:50:22:04:f2:d4:31:73:75:a0:b6:ed:79:54:90:14:7b:c2:
5c:92:c7:4d:45:68:e3:11:52:b6:46:80:9f:94:92:ef:db:0a:
05:7c:0d:2c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIZEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDI2MDYxMDUzWhcNMjQwNTA1MDYxMDUzWjAYMRYw
FAYDVQQDEw02NjJiNDU3MS03MmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq5hZ/ZhbR9A77TjX61YtuEeFTdcM6UfX/EVT9m4+3ttNNQIVfc/73Cd4
wQu6Q/pWZaqOAB2CqDCqLxDPt8u7Np01YEHLat7wACaaIBPGiGUfwhuip2FigfPL
dhBxzbStPqzQHYn0xOKj4/IKylxe0/U331cWFod6Yq49uChVCTaEjV3EPJrcowgq
kKHnlXwHOTGvt6qt1uzs6BBhgtC8v28QkGwgrDXjdRwJ0QhlejxNySZTSOtztfI9
kh7DdEzU3o5seYQTGfqMysQX6atOMLSelnI7nJTyAL0sbKgrH5pLP2GPpGg9pZ9s
6hr0byInnTR2ypGL1PfO2Jm9TeHRYQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGzy
fFw+bRiHDAkcl+8GSjUK6DfpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CRUY4ODg2MDAzOTMxMUVGQjFFMzcwMEUwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcnkMA0GCSqGSIb3DQEBCwUA
A4IBAQCERqjSy5wpQxotHq2aT+0AsDm30BuI25YN4wkcnjGc/PS8w0SpqTIZC6I8
5fLHAVI49wLostq5O+Ngbg86oHHylt83GM2oXxzob2yLo9VFKonhskMmsq5N5TsO
Omw+93ENRsoCO5p7NctAoKXnwqSFCdLU+o17M0o7Rvn/K8ZfFbaGMmRSmYpEg3sr
J7ISk3+ZhKOKH1a5/8Ae7GxBG9oi+g+jmKk1d/7prjPjm3N4hBHdbNbCwyZZDn41
fVuAJOXzd+9gA8MVBpwvY9kt02xeKfeJUQ9Mz15pUCIE8tQxc3Wgtu15VJAUe8Jc
ksdNRWjjEVK2RoCflJLv2woFfA0s
-----END CERTIFICATE-----
Generated at Mon May 6 02:29:26 2024 by rpki-client on console-fra.rpki-client.org