Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F5FDF7E0E4F11EDB62AB6A1F1222468.roa
File: 0F5FDF7E0E4F11EDB62AB6A1F1222468.roa (raw, json)
Hash identifier: 07EumKQsx2/fN1dVQSrtLO9QeEquLx+3+/7ME0icAks=
Subject key identifier: 2D:A9:DE:76:B8:58:72:AA:8F:B7:33:43:03:89:61:CA:07:9E:A0:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 15E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F5FDF7E0E4F11EDB62AB6A1F1222468.roa
Signing time: Thu 28 Jul 2022 08:27:04 +0000
ROA not before: Thu 28 Jul 2022 08:27:01 +0000
ROA not after: Mon 15 May 2023 08:27:01 +0000
asID: 397630
IP address blocks: 156.225.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5600 (0x15e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 08:27:01 2022 GMT
Not After : May 15 08:27:01 2023 GMT
Subject: CN=62e24858-74b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2a:3b:9e:4b:d8:41:2d:86:e6:af:bf:d7:03:
e1:04:2d:cc:e9:72:49:ec:2b:a1:c1:80:69:6d:c7:
25:fa:81:2b:87:58:a8:fa:0a:ac:d3:bb:27:a1:61:
92:50:86:e1:b0:ea:3b:25:32:ef:d4:16:99:c9:ea:
15:00:ca:52:9f:b3:04:b4:ef:f2:e8:c8:59:09:2d:
b0:a7:fc:a6:a1:56:cb:3e:c2:b7:d5:87:b4:4c:b4:
51:d7:d3:f1:eb:0b:da:05:4b:44:27:eb:62:19:0a:
78:6f:e1:96:e1:a3:1c:a4:17:fa:c6:4b:be:95:73:
d7:79:f8:96:28:f5:ff:c2:6c:0b:92:a3:80:d9:00:
7b:66:0b:48:15:43:69:3d:d9:e9:72:91:e1:23:be:
f9:a7:7b:24:73:a8:cd:f8:a7:a2:b8:4e:3d:26:98:
e0:23:23:dd:9b:bf:66:a1:57:1d:6a:f8:85:65:37:
c5:8c:8a:7e:e0:55:29:f3:84:ae:48:b3:d4:38:93:
ff:fe:a6:1b:32:02:5d:21:43:78:e6:1f:d7:20:b0:
7d:6b:2b:42:c0:0f:54:46:29:a5:e8:65:1e:24:ca:
67:f5:27:de:03:22:90:be:a9:f6:c3:08:c4:65:35:
21:e0:e3:7d:2d:36:e1:81:8c:db:fb:b7:fa:47:4f:
24:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A9:DE:76:B8:58:72:AA:8F:B7:33:43:03:89:61:CA:07:9E:A0:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F5FDF7E0E4F11EDB62AB6A1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.10.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ba:1a:08:b3:e0:b3:2d:1b:fb:c0:20:80:f2:ca:32:16:6b:
13:10:e9:5a:5d:77:a1:f5:1f:37:0e:93:20:f3:26:67:60:d1:
43:54:af:fe:9e:f2:77:5f:8a:13:c8:1b:89:93:1c:31:31:9c:
22:5d:6f:b9:25:25:97:70:83:c9:7c:23:09:1a:b1:6a:be:5f:
3b:27:b8:88:a8:1d:57:33:0e:e8:21:5e:d5:10:d9:e5:bd:77:
ff:aa:72:9d:95:26:1b:de:9a:38:c1:73:8f:5e:c4:a0:c5:e9:
dc:d2:f4:2a:52:6b:c8:ac:30:15:f0:2f:ea:55:2e:f5:4d:6e:
fd:d8:cb:0d:5e:58:9c:7a:c4:21:cb:f9:b0:0e:36:72:34:c1:
f1:39:32:eb:3b:51:55:b2:42:7a:93:f4:88:68:de:32:15:4c:
8b:f1:6d:b7:1d:c4:57:94:3c:11:df:55:4b:6d:ca:73:2e:c8:
88:ce:39:67:1b:6a:30:fd:94:03:da:aa:61:39:a6:fb:db:0c:
e5:6f:29:b5:09:ed:61:20:4b:d0:36:46:46:2e:1b:48:e6:ef:
91:4a:eb:a3:69:84:4c:a9:32:f6:ab:12:03:48:2c:ad:c2:fd:
b5:e1:31:39:6a:37:7a:59:08:3e:11:15:f2:82:06:cf:c2:82:
af:af:f4:92
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFeAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA3MjgwODI3MDFaFw0yMzA1MTUwODI3MDFaMBgxFjAU
BgNVBAMMDTYyZTI0ODU4LTc0YjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDbKjueS9hBLYbmr7/XA+EELczpcknsK6HBgGltxyX6gSuHWKj6CqzTuyeh
YZJQhuGw6jslMu/UFpnJ6hUAylKfswS07/LoyFkJLbCn/KahVss+wrfVh7RMtFHX
0/HrC9oFS0Qn62IZCnhv4ZbhoxykF/rGS76Vc9d5+JYo9f/CbAuSo4DZAHtmC0gV
Q2k92elykeEjvvmneyRzqM34p6K4Tj0mmOAjI92bv2ahVx1q+IVlN8WMin7gVSnz
hK5Is9Q4k//+phsyAl0hQ3jmH9cgsH1rK0LAD1RGKaXoZR4kymf1J94DIpC+qfbD
CMRlNSHg430tNuGBjNv7t/pHTySRAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQULane
drhYcqqPtzNDA4lhygeeoOAwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzBGNUZERjdFMEU0RjExRURCNjJBQjZBMUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc4QowDQYJKoZIhvcNAQELBQAD
ggEBACy6Ggiz4LMtG/vAIIDyyjIWaxMQ6Vpdd6H1HzcOkyDzJmdg0UNUr/6e8ndf
ihPIG4mTHDExnCJdb7klJZdwg8l8IwkasWq+XzsnuIioHVczDughXtUQ2eW9d/+q
cp2VJhvemjjBc49exKDF6dzS9CpSa8isMBXwL+pVLvVNbv3Yyw1eWJx6xCHL+bAO
NnI0wfE5Mus7UVWyQnqT9Iho3jIVTIvxbbcdxFeUPBHfVUttynMuyIjOOWcbajD9
lAPaqmE5pvvbDOVvKbUJ7WEgS9A2RkYuG0jm75FK66NphEypMvarEgNILK3C/bXh
MTlqN3pZCD4RFfKCBs/Cgq+v9JI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org