Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/41684DF0BF1411EDB870D0F7F1222468.roa
File: 41684DF0BF1411EDB870D0F7F1222468.roa (raw, json)
Hash identifier: +pHbNTk91Pej2pHK6TZKyyl4IE7dClBBptsE1Fd1Hm0=
Subject key identifier: 02:0F:DD:F2:00:92:AE:77:24:43:94:38:DD:54:DC:D6:23:F4:23:CA
Certificate issuer: /CN=F362AF02AR/serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
Certificate serial: 0590
Authority key identifier: 93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F
Authority info access: rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/41684DF0BF1411EDB870D0F7F1222468.roa
Signing time: Fri 10 Mar 2023 07:22:04 +0000
ROA not before: Fri 10 Mar 2023 07:21:51 +0000
ROA not after: Mon 08 Apr 2024 07:21:51 +0000
asID: 37520
IP address blocks: 146.231.0.0/16 maxlen: 16
192.42.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1424 (0x590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362AF02AR/serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
Validity
Not Before: Mar 10 07:21:51 2023 GMT
Not After : Apr 8 07:21:51 2024 GMT
Subject: CN=640ada9c-d192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9a:66:b0:e7:8f:5e:00:b0:37:44:a2:02:c1:
ff:40:d6:85:5e:43:b9:b8:8b:3c:3f:0a:9e:d4:04:
90:e6:8a:6d:c7:98:d2:07:95:4e:36:91:b3:ed:28:
b6:72:63:73:c7:2f:18:7b:26:bb:99:19:5e:f5:83:
61:f0:42:d4:7e:17:8e:1d:cb:a4:d1:f2:ea:26:45:
90:29:ef:d5:30:3e:53:73:67:58:d3:5b:0c:62:14:
05:fc:cc:65:33:02:34:84:5d:5e:38:d0:cd:ab:c2:
21:1f:21:fd:fc:30:c4:35:09:07:5f:da:ce:29:ca:
e0:46:91:20:c6:d3:5d:4c:f4:94:0c:e3:e3:6b:eb:
49:c7:ee:c0:40:89:66:57:7d:0f:4c:5f:6f:92:27:
08:8c:61:3c:06:4b:91:85:06:56:0a:35:77:5f:35:
c0:a1:de:c7:56:79:3f:e6:d8:fa:9a:16:2d:1e:47:
21:a2:42:4f:f5:a5:81:c5:97:7f:be:31:10:dd:f4:
b0:3f:0f:32:88:6f:7e:51:f2:1d:f0:70:50:85:0f:
d6:09:a0:bd:7c:d5:ed:24:b0:fa:43:a2:fa:63:9b:
a5:2c:75:bb:0d:c8:e6:b6:df:17:c4:d3:e7:81:9e:
1c:7d:00:a1:90:24:fa:c5:83:b6:69:7c:b0:29:f3:
8e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0F:DD:F2:00:92:AE:77:24:43:94:38:DD:54:DC:D6:23:F4:23:CA
X509v3 Authority Key Identifier:
keyid:93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/41684DF0BF1411EDB870D0F7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.231.0.0/16
192.42.99.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:5d:27:e9:33:12:1c:c3:3c:c7:f9:64:25:f0:7a:28:de:34:
e5:79:62:32:cc:af:f6:bf:87:6a:9b:d3:e8:1c:53:5c:1c:20:
78:cb:c1:2a:cd:e4:5a:a3:3d:11:6e:12:4d:25:36:70:90:6e:
9f:8d:81:90:b9:49:3e:63:85:4f:08:35:4b:51:6a:6d:b1:83:
03:64:d7:d4:df:77:e6:85:51:4a:52:fa:5c:3b:80:9c:32:31:
05:dd:89:de:ce:a6:2c:2f:ef:dd:27:9f:8f:49:fe:16:fb:1b:
cd:ff:d7:09:0d:dc:a3:c4:8c:35:0c:80:f7:1e:2f:ec:97:63:
44:c5:57:27:a8:f3:a8:40:ff:29:01:9c:e2:76:04:c4:1f:61:
9f:7e:39:7b:7e:b4:c8:b8:ff:0d:99:a6:66:fe:32:18:2c:c7:
34:56:90:e5:ea:7f:c9:39:7f:f0:61:d7:7a:e9:0b:90:2d:7f:
44:c1:d8:9e:5b:78:34:18:4c:f1:a3:16:df:9f:cb:70:df:47:
ad:37:10:47:f6:2f:f7:99:12:2f:2e:b7:f4:77:e2:48:d0:2b:
92:8d:b5:93:a8:a7:ab:32:9a:50:61:da:b3:ba:f3:b5:84:da:
ed:bb:ce:87:e5:59:7c:5b:95:1a:4e:f9:80:2f:8c:77:4f:7d:
2f:66:31:18
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICBZAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkFGMDJBUjExMC8GA1UEBRMoOTMzRTAyOTYxRTBBQkQ4MzVDQkM3RUUyODNGMTU3
MTk0NzQ2MzIzRjAeFw0yMzAzMTAwNzIxNTFaFw0yNDA0MDgwNzIxNTFaMBgxFjAU
BgNVBAMMDTY0MGFkYTljLWQxOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCummaw549eALA3RKICwf9A1oVeQ7m4izw/Cp7UBJDmim3HmNIHlU42kbPt
KLZyY3PHLxh7JruZGV71g2HwQtR+F44dy6TR8uomRZAp79UwPlNzZ1jTWwxiFAX8
zGUzAjSEXV440M2rwiEfIf38MMQ1CQdf2s4pyuBGkSDG011M9JQM4+Nr60nH7sBA
iWZXfQ9MX2+SJwiMYTwGS5GFBlYKNXdfNcCh3sdWeT/m2PqaFi0eRyGiQk/1pYHF
l3++MRDd9LA/DzKIb35R8h3wcFCFD9YJoL181e0ksPpDovpjm6UsdbsNyOa23xfE
0+eBnhx9AKGQJPrFg7ZpfLAp845XAgMBAAGjggKnMIICozAdBgNVHQ4EFgQUAg/d
8gCSrnckQ5Q43VTc1iP0I8owHwYDVR0jBBgwFoAUkz4Clh4KvYNcvH7ig/FXGUdG
Mj8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJBRjAyLzRGNkZEQTY2ODM4QzExRTlCMzY0RTkxMUY4QUVBMjI4L2t6NENs
aDRLdllOY3ZIN2lnX0ZYR1VkR01qOC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2t6NENsaDRLdllOY3ZIN2lnX0ZYR1VkR01qOC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjJBRjAyLzRGNkZEQTY2ODM4QzExRTlCMzY0RTkxMUY4QUVB
MjI4LzQxNjg0REYwQkYxNDExRURCODcwRDBGN0YxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
JAYIKwYBBQUHAQcBAf8EFTATMBEEAgABMAsDAwCS5wMEAMAqYzANBgkqhkiG9w0B
AQsFAAOCAQEADF0n6TMSHMM8x/lkJfB6KN405XliMsyv9r+HapvT6BxTXBwgeMvB
Ks3kWqM9EW4STSU2cJBun42BkLlJPmOFTwg1S1FqbbGDA2TX1N935oVRSlL6XDuA
nDIxBd2J3s6mLC/v3Sefj0n+Fvsbzf/XCQ3co8SMNQyA9x4v7JdjRMVXJ6jzqED/
KQGc4nYExB9hn345e360yLj/DZmmZv4yGCzHNFaQ5ep/yTl/8GHXeukLkC1/RMHY
nlt4NBhM8aMW35/LcN9HrTcQR/Yv95kSLy639HfiSNArko21k6inqzKaUGHas7rz
tYTa7bvOh+VZfFuVGk75gC+Md099L2YxGA==
-----END CERTIFICATE-----
Generated at Tue Apr 9 02:17:56 2024 by rpki-client on console-ams.rpki-client.org