Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2846D7D2395F11EDB9631FACF1222468.roa
File: 2846D7D2395F11EDB9631FACF1222468.roa (raw, json)
Hash identifier: MQtBypvksYi66ZCOXoCDS6IR6raY5tXLZBtuTJvNcuI=
Subject key identifier: E0:56:BB:DE:3E:FD:9A:BC:5C:AD:92:D3:0C:A7:72:2F:99:95:D8:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1823
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2846D7D2395F11EDB9631FACF1222468.roa
Signing time: Wed 21 Sep 2022 03:40:38 +0000
ROA not before: Wed 21 Sep 2022 03:40:34 +0000
ROA not after: Fri 30 Dec 2022 03:40:34 +0000
asID: 35916
IP address blocks: 45.200.184.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6179 (0x1823)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 21 03:40:34 2022 GMT
Not After : Dec 30 03:40:34 2022 GMT
Subject: CN=632a87b6-8e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:4a:3f:5d:50:13:c8:10:4e:fa:46:a7:0c:
6a:9f:ae:05:a2:01:a2:c7:77:45:be:99:5a:59:0a:
6e:22:de:7e:b6:fc:81:49:e9:a3:97:37:e3:71:2e:
14:78:20:57:11:b6:e5:93:6f:2b:17:dc:33:60:1a:
da:ab:b8:4e:43:8d:62:1b:32:0b:a4:46:ea:f4:5a:
30:c2:6b:1f:b6:42:03:6f:b9:5a:18:2b:cf:20:ed:
54:51:78:37:62:82:dd:26:35:7e:27:28:7b:48:35:
a9:20:83:32:45:eb:1f:3d:50:4b:f1:34:2b:ac:c5:
c9:52:69:af:52:83:3e:66:c4:35:63:e1:4d:5d:84:
ea:4b:7d:0f:89:65:53:4e:4f:f6:e9:8c:7a:66:6d:
42:83:c9:69:0c:79:a7:1c:f0:31:10:39:1a:c3:e3:
a2:75:f6:4c:17:b9:7f:4d:c9:2d:3c:c8:c6:d2:6f:
13:02:26:94:20:fa:45:32:6a:c1:ca:4b:24:9a:3b:
49:6e:6a:32:fa:85:91:f6:9b:62:1d:5d:fa:59:0b:
7f:a6:fe:f7:fa:10:3e:5b:a5:5f:78:2e:f7:c3:8e:
52:7c:e6:ac:7c:dd:66:79:24:56:10:04:a4:b4:4f:
a5:d3:b6:6e:36:6d:e0:a5:63:9b:7d:55:4b:34:73:
db:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:56:BB:DE:3E:FD:9A:BC:5C:AD:92:D3:0C:A7:72:2F:99:95:D8:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2846D7D2395F11EDB9631FACF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.184.0/22
Signature Algorithm: sha256WithRSAEncryption
26:04:01:f7:6e:9a:a6:0d:67:4b:df:8b:1e:5e:bb:45:28:d5:
08:53:c4:10:1c:78:69:7b:c8:f1:e0:f5:e8:01:d1:17:bd:e0:
ab:fd:4f:92:ca:4f:8a:05:d5:82:bd:25:82:b1:39:0c:dd:70:
db:05:15:2b:c2:97:64:c4:06:35:e2:34:90:11:ff:0a:72:7e:
17:c6:74:a3:a3:03:e7:8b:38:70:36:2e:83:ab:0e:38:01:f4:
17:ea:9b:f9:fd:93:05:39:67:08:33:cd:24:9d:69:90:e9:a4:
16:9c:00:0f:ae:c2:55:73:26:3c:83:c3:f4:73:73:fc:68:04:
2f:d1:90:bd:eb:c9:93:39:fe:49:a8:84:a3:9b:45:45:ea:5d:
e9:6a:be:8a:1a:c5:17:d8:63:ee:b4:dc:5c:cb:e2:8a:a9:ea:
20:bb:72:6e:85:30:3a:6e:b1:80:44:e6:ed:21:47:48:f3:ba:
40:45:f1:df:da:0d:6f:1c:e9:1c:09:02:e4:ec:f2:cd:81:03:
2a:06:5b:0b:5d:c9:03:8d:a2:eb:76:90:3d:b8:d8:e9:1b:09:
f7:a8:9d:fc:72:40:99:62:5f:1f:3d:46:79:60:b8:d1:57:62:
f6:f5:91:01:75:89:e2:dd:1e:4c:e4:9b:e0:de:2c:0e:6d:4c:
a2:ba:2f:a7
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICGCMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA5MjEwMzQwMzRaFw0yMjEyMzAwMzQwMzRaMBgxFjAU
BgNVBAMMDTYzMmE4N2I2LThlMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC44Uo/XVATyBBO+kanDGqfrgWiAaLHd0W+mVpZCm4i3n62/IFJ6aOXN+Nx
LhR4IFcRtuWTbysX3DNgGtqruE5DjWIbMgukRur0WjDCax+2QgNvuVoYK88g7VRR
eDdigt0mNX4nKHtINakggzJF6x89UEvxNCusxclSaa9Sgz5mxDVj4U1dhOpLfQ+J
ZVNOT/bpjHpmbUKDyWkMeacc8DEQORrD46J19kwXuX9NyS08yMbSbxMCJpQg+kUy
asHKSySaO0luajL6hZH2m2IdXfpZC3+m/vf6ED5bpV94LvfDjlJ85qx83WZ5JFYQ
BKS0T6XTtm42beClY5t9VUs0c9s1AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU4Fa7
3j79mrxcrZLTDKdyL5mV2IIwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzI4NDZEN0QyMzk1RjExRURCOTYzMUZBQ0YxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItyLgwDQYJKoZIhvcNAQELBQAD
ggEBACYEAfdumqYNZ0vfix5eu0Uo1QhTxBAceGl7yPHg9egB0Re94Kv9T5LKT4oF
1YK9JYKxOQzdcNsFFSvCl2TEBjXiNJAR/wpyfhfGdKOjA+eLOHA2LoOrDjgB9Bfq
m/n9kwU5ZwgzzSSdaZDppBacAA+uwlVzJjyDw/Rzc/xoBC/RkL3ryZM5/kmohKOb
RUXqXelqvooaxRfYY+603FzL4oqp6iC7cm6FMDpusYBE5u0hR0jzukBF8d/aDW8c
6RwJAuTs8s2BAyoGWwtdyQONout2kD242OkbCfeonfxyQJliXx89RnlguNFXYvb1
kQF1ieLdHkzkm+DeLA5tTKK6L6c=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-fra.rpki-client.org