Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D8CC83E125811EDAAE182F1F1222468.roa
File: 1D8CC83E125811EDAAE182F1F1222468.roa (raw, json)
Hash identifier: TV3jaUf9naWcPda5jSkNicoAsYxVaYS+P3MXGDjUFCE=
Subject key identifier: 37:A3:7C:BD:68:56:D6:21:DD:E8:30:39:76:74:E2:FC:67:50:59:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 15FA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D8CC83E125811EDAAE182F1F1222468.roa
Signing time: Tue 02 Aug 2022 11:41:58 +0000
ROA not before: Tue 02 Aug 2022 11:41:55 +0000
ROA not after: Wed 26 Oct 2022 11:41:55 +0000
asID: 133861
IP address blocks: 156.245.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5626 (0x15fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 11:41:55 2022 GMT
Not After : Oct 26 11:41:55 2022 GMT
Subject: CN=62e90d86-6553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5c:1e:9f:f5:c6:d3:c0:57:ee:10:24:cf:44:
d7:1f:2e:fa:f6:c4:26:c1:df:c2:08:5b:51:33:81:
f5:c7:56:81:cf:b4:f3:20:0c:73:22:ea:e5:db:c3:
f7:38:ee:1d:a8:4d:b4:de:b2:98:30:99:68:4e:3d:
e2:10:73:11:62:42:0c:3c:ee:96:d8:d2:fa:d6:cb:
92:a0:f2:c9:db:b2:be:71:c1:79:0b:a1:9c:42:9c:
0f:23:a3:d0:5f:bc:3b:85:2f:4a:64:f5:2d:b3:62:
37:57:b2:b5:82:fd:5a:39:f7:7d:b2:f2:13:d5:d5:
7d:a0:69:86:ee:6d:a2:0f:77:75:d3:dd:61:1b:16:
ec:0f:d4:29:14:b5:8b:ec:a2:1b:a8:d6:05:f1:f7:
e0:53:fd:d8:63:b5:a0:65:8e:f2:17:ee:9f:67:0d:
84:dd:84:c7:58:c3:73:8c:74:13:e2:71:5d:65:4e:
ed:dc:a3:d1:1f:62:04:f4:e1:6a:7f:56:df:a7:6f:
45:7e:9c:de:8c:c6:cf:8a:9c:08:22:15:77:4c:e2:
d6:cd:61:95:10:ae:80:82:9d:87:a9:64:a8:3e:45:
17:b4:86:6a:d3:11:0e:a1:f6:4c:4b:69:4b:a1:df:
11:d0:c4:ff:bd:a3:77:4d:2e:25:f2:30:d3:79:11:
2e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A3:7C:BD:68:56:D6:21:DD:E8:30:39:76:74:E2:FC:67:50:59:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D8CC83E125811EDAAE182F1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.12.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:fb:ea:04:4d:52:cb:36:9b:07:d5:67:60:f1:e0:93:14:1a:
99:8a:66:e1:81:d2:6d:86:5a:e4:ba:10:b2:11:e4:4b:ff:c0:
57:08:f2:1d:01:5f:7c:ba:bd:5c:82:b0:01:5d:e7:7f:25:ce:
24:4e:ea:58:22:78:93:2f:05:76:ca:ae:e4:30:4d:e9:e2:e5:
67:d3:f3:2a:1b:e6:d6:e1:72:77:a2:e6:5b:5b:c8:69:5a:fd:
9e:82:0f:27:35:19:08:39:4c:4a:3c:9a:c1:6a:fd:0d:82:1e:
3b:8d:7d:93:a3:c3:38:1f:08:8d:a2:a4:d9:25:5d:d8:98:56:
2a:09:b1:2e:91:7a:cb:cf:94:c9:51:e9:b5:23:49:27:e9:d8:
d3:dc:1f:90:8b:27:ef:ff:34:d2:18:28:03:44:28:a1:fc:82:
45:b6:b6:c8:12:cd:de:e3:53:d3:2a:53:de:95:45:77:ab:b0:
45:c8:c8:fa:ce:80:61:e5:91:b9:93:a3:0f:6b:62:33:03:4b:
da:85:4a:4d:92:e0:91:59:b1:be:1f:9d:b4:77:e6:92:52:d6:
23:65:24:7f:18:3f:9b:a4:66:5f:58:41:1d:1f:8c:31:15:e7:
59:f1:5e:d7:09:df:d6:bb:49:f6:d4:04:1c:33:01:4f:de:9e:
19:b0:11:38
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFfowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA4MDIxMTQxNTVaFw0yMjEwMjYxMTQxNTVaMBgxFjAU
BgNVBAMMDTYyZTkwZDg2LTY1NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRXB6f9cbTwFfuECTPRNcfLvr2xCbB38IIW1EzgfXHVoHPtPMgDHMi6uXb
w/c47h2oTbTespgwmWhOPeIQcxFiQgw87pbY0vrWy5Kg8snbsr5xwXkLoZxCnA8j
o9BfvDuFL0pk9S2zYjdXsrWC/Vo5932y8hPV1X2gaYbubaIPd3XT3WEbFuwP1CkU
tYvsohuo1gXx9+BT/dhjtaBljvIX7p9nDYTdhMdYw3OMdBPicV1lTu3co9EfYgT0
4Wp/Vt+nb0V+nN6Mxs+KnAgiFXdM4tbNYZUQroCCnYepZKg+RRe0hmrTEQ6h9kxL
aUuh3xHQxP+9o3dNLiXyMNN5ES5LAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUN6N8
vWhW1iHd6DA5dnTi/GdQWa4wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzFEOENDODNFMTI1ODExRURBQUUxODJGMUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc9QwwDQYJKoZIhvcNAQELBQAD
ggEBAKP76gRNUss2mwfVZ2Dx4JMUGpmKZuGB0m2GWuS6ELIR5Ev/wFcI8h0BX3y6
vVyCsAFd538lziRO6lgieJMvBXbKruQwTeni5WfT8yob5tbhcnei5ltbyGla/Z6C
Dyc1GQg5TEo8msFq/Q2CHjuNfZOjwzgfCI2ipNklXdiYVioJsS6ResvPlMlR6bUj
SSfp2NPcH5CLJ+//NNIYKANEKKH8gkW2tsgSzd7jU9MqU96VRXersEXIyPrOgGHl
kbmTow9rYjMDS9qFSk2S4JFZsb4fnbR35pJS1iNlJH8YP5ukZl9YQR0fjDEV51nx
XtcJ39a7SfbUBBwzAU/enhmwETg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org