Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7398CE920CB511EDA437258CF1222468.roa
File: 7398CE920CB511EDA437258CF1222468.roa (raw, json)
Hash identifier: tMlgiVnXRz8ZRj1feujiw0ihdB7JdzMtW4LYYQs3XMM=
Subject key identifier: 00:AE:79:CF:71:E0:99:4E:00:85:95:6F:94:54:09:08:1B:6A:F2:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 15B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7398CE920CB511EDA437258CF1222468.roa
Signing time: Tue 26 Jul 2022 07:34:59 +0000
ROA not before: Tue 26 Jul 2022 07:34:53 +0000
ROA not after: Sun 15 Jan 2023 07:34:53 +0000
asID: 149981
IP address blocks: 156.225.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5556 (0x15b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:34:53 2022 GMT
Not After : Jan 15 07:34:53 2023 GMT
Subject: CN=62df9923-f7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:e4:96:12:7a:3f:47:1e:5e:28:4e:41:73:
f9:ec:f1:58:80:98:d6:6c:8b:da:64:12:e9:c5:94:
2c:c0:d2:93:7b:da:10:f2:ec:e8:82:52:71:87:d9:
2e:39:ce:99:ff:b4:70:f2:08:40:b8:c7:c8:20:d7:
7c:ab:21:ab:33:f8:42:dd:54:a6:4f:a5:c6:20:01:
e7:94:0c:d5:0b:9c:2d:d5:9b:cf:ce:2d:f7:29:ac:
5f:e4:fc:3c:8a:c6:93:5d:c5:d0:77:5c:0e:b8:c2:
5d:b8:53:63:ac:b2:34:d0:96:5e:d3:bc:af:c8:3e:
18:ed:2e:99:9b:18:ff:a7:0e:6b:30:a2:37:2a:cb:
de:80:37:d9:d6:89:c2:e6:45:bd:fa:ee:bc:61:25:
7b:12:0d:5c:04:04:b6:bc:53:3d:6f:f5:f4:b6:aa:
04:eb:0b:0a:a2:5e:16:42:52:53:cf:13:1e:3c:9f:
ed:f2:e4:93:b1:3a:e0:ce:be:20:1a:8d:5c:98:39:
a5:f6:d8:a2:91:2c:b8:27:0f:63:47:35:c4:62:1c:
72:40:6a:76:95:fc:4b:d5:ca:b3:84:41:bc:4f:a6:
18:73:96:f5:b1:ba:eb:50:c2:35:5b:d4:99:1f:f2:
36:3f:95:d7:83:98:b0:a3:21:64:f6:d5:96:87:f8:
aa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AE:79:CF:71:E0:99:4E:00:85:95:6F:94:54:09:08:1B:6A:F2:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7398CE920CB511EDA437258CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.100.0/24
Signature Algorithm: sha256WithRSAEncryption
45:03:e7:d1:32:3c:b8:61:13:05:d1:6b:12:52:39:2d:ba:b2:
f8:50:e4:58:a0:c7:18:f5:de:4c:a0:5e:57:20:1b:6f:89:40:
c7:ca:90:d2:72:17:7b:de:26:ed:68:dd:d9:34:59:17:8e:9b:
ea:83:f2:1d:f2:9c:b9:e0:ad:c7:21:bb:51:81:bc:67:28:cb:
7e:e1:19:ce:22:5b:dc:09:be:70:71:b4:90:ed:c0:25:98:8e:
64:f1:f6:ab:df:df:30:b1:f7:c3:f7:33:96:02:c0:10:8b:7f:
70:22:20:1f:d9:6f:d3:46:c2:51:26:c6:48:32:c7:0f:11:dc:
21:e6:64:04:c6:7d:9e:26:5d:de:aa:c2:fa:dc:fb:d5:89:19:
a8:86:de:22:12:0a:3c:0d:e9:16:29:6c:4c:5d:2e:5f:f4:c1:
7a:12:5c:b7:04:47:da:e4:1d:07:fe:cc:03:e2:7a:f1:27:16:
ca:c9:7f:51:dd:da:ea:48:29:98:23:bb:e1:83:f8:25:7d:0b:
cb:13:df:ba:65:8e:95:b1:b3:2d:ba:96:63:f9:7c:98:10:f6:
4f:bb:ee:f9:91:f0:78:9c:15:2e:f7:58:64:80:e6:a2:e9:28:
c5:a9:02:d9:4c:a5:db:36:7b:83:c7:17:47:e2:51:00:82:6f:
1c:36:9d:f2
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFbQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA3MjYwNzM0NTNaFw0yMzAxMTUwNzM0NTNaMBgxFjAU
BgNVBAMMDTYyZGY5OTIzLWY3ZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+3eSWEno/Rx5eKE5Bc/ns8ViAmNZsi9pkEunFlCzA0pN72hDy7OiCUnGH
2S45zpn/tHDyCEC4x8gg13yrIasz+ELdVKZPpcYgAeeUDNULnC3Vm8/OLfcprF/k
/DyKxpNdxdB3XA64wl24U2OssjTQll7TvK/IPhjtLpmbGP+nDmswojcqy96AN9nW
icLmRb367rxhJXsSDVwEBLa8Uz1v9fS2qgTrCwqiXhZCUlPPEx48n+3y5JOxOuDO
viAajVyYOaX22KKRLLgnD2NHNcRiHHJAanaV/EvVyrOEQbxPphhzlvWxuutQwjVb
1Jkf8jY/ldeDmLCjIWT21ZaH+KqXAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUAK55
z3HgmU4AhZVvlFQJCBtq8lcwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzczOThDRTkyMENCNTExRURBNDM3MjU4Q0YxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc4WQwDQYJKoZIhvcNAQELBQAD
ggEBAEUD59EyPLhhEwXRaxJSOS26svhQ5Figxxj13kygXlcgG2+JQMfKkNJyF3ve
Ju1o3dk0WReOm+qD8h3ynLngrcchu1GBvGcoy37hGc4iW9wJvnBxtJDtwCWYjmTx
9qvf3zCx98P3M5YCwBCLf3AiIB/Zb9NGwlEmxkgyxw8R3CHmZATGfZ4mXd6qwvrc
+9WJGaiG3iISCjwN6RYpbExdLl/0wXoSXLcER9rkHQf+zAPievEnFsrJf1Hd2upI
KZgju+GD+CV9C8sT37pljpWxsy26lmP5fJgQ9k+77vmR8HicFS73WGSA5qLpKMWp
AtlMpds2e4PHF0fiUQCCbxw2nfI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-fra.rpki-client.org