Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61ADB614125711ED823637EFF1222468.roa
File: 61ADB614125711ED823637EFF1222468.roa (raw, json)
Hash identifier: jAzMegTccclvWq1CwEbMsWexK4VJlGEiQ1tiRPSfUJk=
Subject key identifier: 24:0A:D5:FF:E5:2F:3C:02:82:9B:72:82:46:0E:83:A9:B9:EC:6E:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 15F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61ADB614125711ED823637EFF1222468.roa
Signing time: Tue 02 Aug 2022 11:36:43 +0000
ROA not before: Tue 02 Aug 2022 11:36:39 +0000
ROA not after: Tue 06 Jun 2023 11:36:39 +0000
asID: 133861
IP address blocks: 156.224.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5616 (0x15f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 11:36:39 2022 GMT
Not After : Jun 6 11:36:39 2023 GMT
Subject: CN=62e90c4b-76f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:d1:23:6c:17:6b:3b:df:c6:5f:86:d4:87:
37:c9:b8:bd:fd:f5:3c:5d:4c:58:09:aa:95:c1:9f:
f7:6e:04:7c:d7:b6:9b:e5:d2:66:95:c9:46:fe:df:
26:d1:c0:a7:08:06:6b:be:5d:55:cd:ec:f6:83:9a:
85:48:96:3c:0e:e1:d8:6b:66:08:d4:f4:59:c7:ef:
17:35:d6:bb:5a:e1:f6:0e:a3:06:f1:c5:8a:21:60:
c3:9a:3c:ac:93:54:3f:ff:bb:5e:c2:38:19:8c:d3:
f2:b9:ca:4b:32:4c:e1:0b:52:2b:d5:6e:ec:9d:b3:
54:ae:8e:f0:9f:a9:68:8c:21:79:66:d2:0a:c3:32:
79:bc:13:43:4a:a3:c9:fd:1f:51:15:45:14:6a:e2:
f5:48:ad:dc:6f:09:01:c2:f0:45:62:f7:74:40:a0:
8d:c6:3f:00:da:c8:7e:3c:f2:4c:cf:3e:89:be:44:
6d:11:ba:f6:0a:6b:ed:10:cd:bf:c1:7b:0d:6a:73:
10:63:ce:4d:a0:9f:ba:c0:d6:8d:d3:89:ab:68:41:
b5:8d:e9:f6:85:0f:06:55:c7:22:cd:32:65:d5:91:
7b:cf:2d:07:c0:09:0f:53:4e:b7:09:72:e1:29:18:
83:50:62:03:aa:09:a3:1a:5c:dc:e9:d9:fe:79:8a:
55:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0A:D5:FF:E5:2F:3C:02:82:9B:72:82:46:0E:83:A9:B9:EC:6E:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61ADB614125711ED823637EFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.2.0/24
Signature Algorithm: sha256WithRSAEncryption
52:cd:45:d7:f9:10:5d:09:40:43:0c:83:e0:26:53:fe:92:2a:
be:33:03:7c:96:ca:b5:0d:3d:4f:f2:61:fe:d5:f8:c9:09:f6:
ae:63:95:12:c2:ba:d9:38:77:02:e4:01:be:b7:c9:1e:f9:ec:
c4:a5:86:27:6e:09:8e:0a:0b:48:5f:3e:8f:14:87:6f:d7:52:
dc:61:e7:47:94:1b:47:71:c1:74:ba:ca:05:eb:8b:6a:3d:64:
87:2c:92:d0:70:4b:93:22:26:71:bf:fe:9a:68:82:ee:2e:f2:
e5:73:45:ff:64:40:d6:d7:73:16:4d:88:f5:d5:0b:d3:06:c5:
ea:4b:8b:b0:59:ef:04:93:4c:1e:07:ce:2d:95:37:c5:a8:13:
dc:85:7f:da:82:68:8c:55:40:18:18:ef:23:26:94:64:4e:8d:
0c:0e:b0:ce:73:ec:9b:fb:52:b8:e6:d0:b6:c0:64:2c:49:42:
50:5a:ee:60:3a:48:43:2c:2b:e1:48:5c:00:13:6e:ef:2d:34:
03:04:07:7e:19:57:65:b0:bd:68:5b:1c:30:39:2f:a7:a7:70:
22:61:be:73:a0:d6:79:9c:e8:4b:6c:61:7a:2e:b1:02:9f:c3:
ea:12:c7:40:1b:12:33:45:d7:79:f5:bb:37:b3:66:12:86:cc:
c0:91:5c:21
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFfAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA4MDIxMTM2MzlaFw0yMzA2MDYxMTM2MzlaMBgxFjAU
BgNVBAMMDTYyZTkwYzRiLTc2ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDISdEjbBdrO9/GX4bUhzfJuL399TxdTFgJqpXBn/duBHzXtpvl0maVyUb+
3ybRwKcIBmu+XVXN7PaDmoVIljwO4dhrZgjU9FnH7xc11rta4fYOowbxxYohYMOa
PKyTVD//u17COBmM0/K5yksyTOELUivVbuyds1SujvCfqWiMIXlm0grDMnm8E0NK
o8n9H1EVRRRq4vVIrdxvCQHC8EVi93RAoI3GPwDayH488kzPPom+RG0RuvYKa+0Q
zb/Bew1qcxBjzk2gn7rA1o3TiatoQbWN6faFDwZVxyLNMmXVkXvPLQfACQ9TTrcJ
cuEpGINQYgOqCaMaXNzp2f55ilUNAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUJArV
/+UvPAKCm3KCRg6Dqbnsbg8wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzYxQURCNjE0MTI1NzExRUQ4MjM2MzdFRkYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc4AIwDQYJKoZIhvcNAQELBQAD
ggEBAFLNRdf5EF0JQEMMg+AmU/6SKr4zA3yWyrUNPU/yYf7V+MkJ9q5jlRLCutk4
dwLkAb63yR757MSlhiduCY4KC0hfPo8Uh2/XUtxh50eUG0dxwXS6ygXri2o9ZIcs
ktBwS5MiJnG//ppogu4u8uVzRf9kQNbXcxZNiPXVC9MGxepLi7BZ7wSTTB4Hzi2V
N8WoE9yFf9qCaIxVQBgY7yMmlGROjQwOsM5z7Jv7Urjm0LbAZCxJQlBa7mA6SEMs
K+FIXAATbu8tNAMEB34ZV2WwvWhbHDA5L6encCJhvnOg1nmc6EtsYXousQKfw+oS
x0AbEjNF13n1uzezZhKGzMCRXCE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-ams.rpki-client.org