Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63215D62DC0A11EC9C0EC79FF1222468.roa
File: 63215D62DC0A11EC9C0EC79FF1222468.roa (raw, json)
Hash identifier: TLQvrUJS0aGakIXBnFLm1QgXv7084e+oP/lEdP1zec8=
Subject key identifier: 6F:65:A3:A7:0F:3A:43:4D:3B:98:8F:2D:93:E7:FF:F9:31:BD:83:DE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1407
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63215D62DC0A11EC9C0EC79FF1222468.roa
Signing time: Wed 25 May 2022 09:09:31 +0000
ROA not before: Wed 25 May 2022 09:09:28 +0000
ROA not after: Fri 30 Jun 2023 09:09:28 +0000
asID: 132698
IP address blocks: 45.207.26.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5127 (0x1407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 25 09:09:28 2022 GMT
Not After : Jun 30 09:09:28 2023 GMT
Subject: CN=628df24b-27e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f2:46:af:9c:3a:8b:fc:96:81:38:f1:e1:8c:
ef:62:00:63:d0:4c:9d:10:79:a3:5f:a6:ec:e0:2b:
0f:a8:a2:2a:6d:f6:3f:7e:a9:ab:18:57:80:6f:05:
d3:7e:29:b8:83:ce:74:e1:ff:e7:d0:3b:45:6f:24:
34:f9:2f:00:d5:36:0c:62:ea:57:73:7f:8d:a4:e9:
7d:e5:92:5e:3f:c9:f2:39:33:b7:c1:e1:df:b5:de:
c6:a8:77:0e:c0:44:71:73:bf:64:18:c8:7b:ef:5f:
6f:5a:c6:a5:75:10:3d:ff:5a:1a:a2:99:cf:16:31:
d9:67:31:10:fe:92:82:6a:65:b0:6e:87:87:6e:af:
67:91:48:31:e0:82:9c:e9:59:49:45:63:22:b6:c2:
4b:3f:dd:49:c5:d4:11:80:ce:01:3b:8c:31:80:93:
f4:a5:ae:8a:fd:86:82:24:fe:a3:f9:36:a7:bb:a7:
00:d3:99:f7:d4:65:8a:40:10:dc:f2:e6:b8:bc:3c:
af:b6:e0:66:ae:e0:02:3c:0f:89:63:57:eb:51:52:
f4:49:f1:79:97:e8:bd:c2:c4:6c:a4:72:9f:c5:37:
16:99:37:01:ce:f5:f9:e5:ab:b1:67:cb:71:04:d7:
39:bc:d6:a1:0d:26:8c:53:e5:11:dc:18:2f:3b:69:
41:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:65:A3:A7:0F:3A:43:4D:3B:98:8F:2D:93:E7:FF:F9:31:BD:83:DE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63215D62DC0A11EC9C0EC79FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.26.0/23
Signature Algorithm: sha256WithRSAEncryption
28:3a:c3:6f:69:4e:27:67:2a:be:3b:b0:d2:a6:e1:ff:d9:91:
59:4f:10:41:96:a4:d6:66:43:53:15:4c:58:6a:1f:4a:23:02:
f5:a3:20:72:77:ab:84:28:91:50:9e:9b:4d:d4:17:48:62:20:
f2:52:e0:fd:ae:59:3b:2f:a8:22:25:8e:31:83:3e:66:e7:df:
53:01:c2:33:65:2b:c0:fd:9f:8b:5b:0c:61:aa:77:68:8e:1c:
7c:4a:a5:7d:25:92:3f:60:ca:e2:9e:72:b5:8a:a0:f9:37:80:
df:66:7b:2d:6c:4e:1f:b6:90:97:8b:cc:8a:1c:75:08:c2:a0:
12:28:03:7f:df:4e:63:94:e0:55:a9:e3:9a:39:db:4b:ce:84:
d1:ee:f6:a1:cb:58:3a:be:9c:54:35:6f:63:f3:33:48:fe:27:
ed:1f:c1:8e:ff:4a:5f:08:f9:ea:84:a6:fc:6a:3f:93:1a:2d:
3f:18:cf:b9:1f:64:5b:c6:50:eb:ab:99:4b:21:06:a7:2b:8f:
e5:5b:d2:9b:d7:79:5c:79:2a:79:44:1c:70:eb:32:99:12:c8:
65:9c:74:37:53:d7:2d:db:8b:c7:d9:12:9b:08:79:e4:c4:93:
fb:f6:84:a9:70:07:f0:d3:14:3c:43:e1:33:15:27:a8:ff:61:
80:58:75:9b
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFAcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA1MjUwOTA5MjhaFw0yMzA2MzAwOTA5MjhaMBgxFjAU
BgNVBAMMDTYyOGRmMjRiLTI3ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDK8kavnDqL/JaBOPHhjO9iAGPQTJ0QeaNfpuzgKw+ooipt9j9+qasYV4Bv
BdN+KbiDznTh/+fQO0VvJDT5LwDVNgxi6ldzf42k6X3lkl4/yfI5M7fB4d+13sao
dw7ARHFzv2QYyHvvX29axqV1ED3/Whqimc8WMdlnMRD+koJqZbBuh4dur2eRSDHg
gpzpWUlFYyK2wks/3UnF1BGAzgE7jDGAk/Slror9hoIk/qP5Nqe7pwDTmffUZYpA
ENzy5ri8PK+24Gau4AI8D4ljV+tRUvRJ8XmX6L3CxGykcp/FNxaZNwHO9fnlq7Fn
y3EE1zm81qENJoxT5RHcGC87aUE1AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUb2Wj
pw86Q007mI8tk+f/+TG9g94wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzYzMjE1RDYyREMwQTExRUM5QzBFQzc5RkYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEtzxowDQYJKoZIhvcNAQELBQAD
ggEBACg6w29pTidnKr47sNKm4f/ZkVlPEEGWpNZmQ1MVTFhqH0ojAvWjIHJ3q4Qo
kVCem03UF0hiIPJS4P2uWTsvqCIljjGDPmbn31MBwjNlK8D9n4tbDGGqd2iOHHxK
pX0lkj9gyuKecrWKoPk3gN9mey1sTh+2kJeLzIocdQjCoBIoA3/fTmOU4FWp45o5
20vOhNHu9qHLWDq+nFQ1b2PzM0j+J+0fwY7/Sl8I+eqEpvxqP5MaLT8Yz7kfZFvG
UOurmUshBqcrj+Vb0pvXeVx5KnlEHHDrMpkSyGWcdDdT1y3bi8fZEpsIeeTEk/v2
hKlwB/DTFDxD4TMVJ6j/YYBYdZs=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-ams.rpki-client.org