Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CF5E65613D411EDBEF0D9AEF1222468.roa
File: 3CF5E65613D411EDBEF0D9AEF1222468.roa (raw, json)
Hash identifier: G+ZGid9yZzS7ZsDnJNRG7idron8WNDrX5o6+mzMhYNw=
Subject key identifier: E9:1D:0A:61:AE:98:0D:4B:5C:2F:69:12:64:DD:92:AE:DC:39:3E:3F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1668
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CF5E65613D411EDBEF0D9AEF1222468.roa
Signing time: Thu 04 Aug 2022 09:02:59 +0000
ROA not before: Thu 04 Aug 2022 09:02:56 +0000
ROA not after: Fri 10 Feb 2023 09:02:56 +0000
asID: 133861
IP address blocks: 45.207.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5736 (0x1668)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 4 09:02:56 2022 GMT
Not After : Feb 10 09:02:56 2023 GMT
Subject: CN=62eb8b43-d3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:c9:e9:92:36:f3:2b:f9:5e:21:18:64:89:
c5:cc:10:5b:46:f1:5e:55:4b:1e:9d:1e:a4:50:35:
22:51:8c:a0:2d:66:a7:30:a7:b2:5c:f8:df:b0:6d:
92:f0:be:9f:2f:51:3a:0d:e4:0f:ae:8c:f6:cb:b6:
08:bb:3a:3c:49:b9:81:41:f0:cb:04:d9:2d:90:9a:
f6:0f:cf:83:7c:73:97:78:17:52:54:4a:bf:90:91:
42:b8:ba:3f:ec:99:b4:6a:0e:c0:6d:a5:89:61:de:
ee:88:6a:59:ac:cc:b3:b4:9c:2f:8c:6d:17:1f:69:
7d:68:61:fd:3e:ad:87:96:59:77:3e:3a:8d:b3:d9:
9b:5c:da:df:36:a1:ef:cf:9f:ab:56:cc:5b:b5:72:
7a:a2:63:b2:83:25:83:26:e5:65:44:f3:6b:a6:f8:
ee:b9:d6:9c:f0:66:75:d4:ab:ea:ee:ca:08:6d:71:
36:32:28:e7:cb:e4:a2:80:d9:17:ae:80:bb:11:c5:
87:27:a8:3e:fe:d4:d6:e5:e5:63:da:75:20:fc:38:
3e:83:8b:c8:53:ef:be:b0:53:ea:c8:e0:0e:79:97:
b5:2c:a1:ce:53:92:64:d5:ed:a9:70:d3:47:3c:9f:
be:84:0f:89:07:55:5e:28:32:a9:e1:2e:50:1d:84:
7f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1D:0A:61:AE:98:0D:4B:5C:2F:69:12:64:DD:92:AE:DC:39:3E:3F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CF5E65613D411EDBEF0D9AEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.56.0/24
Signature Algorithm: sha256WithRSAEncryption
22:2a:ce:df:dd:52:71:3a:6b:0c:01:8f:bf:74:35:7d:4b:28:
35:bb:01:5d:8c:5e:47:c4:9e:58:a9:9d:17:b4:55:ce:a7:f6:
c1:28:5b:d5:16:12:d9:8d:1c:60:e6:f0:9f:3b:76:71:4a:be:
ab:d4:b6:5a:83:06:be:53:45:63:d9:de:be:a3:ba:fc:c4:af:
7e:0f:8f:05:4b:fe:e2:80:a6:3b:51:61:60:f6:98:6f:4e:c0:
99:f3:26:e4:b3:07:39:d9:68:c5:a8:09:5b:60:7a:b0:df:cb:
91:59:c4:3c:cb:d6:a3:41:26:ef:12:26:be:12:8c:aa:36:0d:
44:c8:64:8f:3c:41:91:4b:d4:fa:be:14:a9:8b:d0:63:ea:a9:
cb:2d:21:64:d5:02:53:e4:03:6c:ce:2b:04:6e:06:05:1d:34:
c6:69:fb:d6:49:b4:58:41:5c:fc:44:b1:a0:d0:c7:eb:6c:d3:
f5:ec:23:eb:bb:5e:f5:d5:a7:d3:9a:df:a6:88:2e:23:7f:dd:
54:18:89:fe:e9:72:4b:bf:12:1f:56:a0:b4:a0:be:b8:51:b5:
47:58:44:73:a7:f2:1a:29:3e:32:4f:31:e8:54:8f:b7:60:0d:
1d:d6:d6:4d:47:73:1a:6c:38:38:a8:6e:9e:1f:60:e3:92:2a:
d3:d1:24:be
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFmgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA4MDQwOTAyNTZaFw0yMzAyMTAwOTAyNTZaMBgxFjAU
BgNVBAMMDTYyZWI4YjQzLWQzZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7Q8npkjbzK/leIRhkicXMEFtG8V5VSx6dHqRQNSJRjKAtZqcwp7Jc+N+w
bZLwvp8vUToN5A+ujPbLtgi7OjxJuYFB8MsE2S2QmvYPz4N8c5d4F1JUSr+QkUK4
uj/smbRqDsBtpYlh3u6IalmszLO0nC+MbRcfaX1oYf0+rYeWWXc+Oo2z2Ztc2t82
oe/Pn6tWzFu1cnqiY7KDJYMm5WVE82um+O651pzwZnXUq+ruyghtcTYyKOfL5KKA
2ReugLsRxYcnqD7+1Nbl5WPadSD8OD6Di8hT776wU+rI4A55l7Usoc5TkmTV7alw
00c8n76ED4kHVV4oMqnhLlAdhH+VAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU6R0K
Ya6YDUtcL2kSZN2Srtw5Pj8wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzNDRjVFNjU2MTNENDExRURCRUYwRDlBRUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzzgwDQYJKoZIhvcNAQELBQAD
ggEBACIqzt/dUnE6awwBj790NX1LKDW7AV2MXkfEnlipnRe0Vc6n9sEoW9UWEtmN
HGDm8J87dnFKvqvUtlqDBr5TRWPZ3r6juvzEr34PjwVL/uKApjtRYWD2mG9OwJnz
JuSzBznZaMWoCVtgerDfy5FZxDzL1qNBJu8SJr4SjKo2DUTIZI88QZFL1Pq+FKmL
0GPqqcstIWTVAlPkA2zOKwRuBgUdNMZp+9ZJtFhBXPxEsaDQx+ts0/XsI+u7XvXV
p9Oa36aILiN/3VQYif7pcku/Eh9WoLSgvrhRtUdYRHOn8hopPjJPMehUj7dgDR3W
1k1HcxpsODiobp4fYOOSKtPRJL4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org