Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9743320E066311ED8CB8A7F3F1222468.roa
File: 9743320E066311ED8CB8A7F3F1222468.roa (raw, json)
Hash identifier: fNo/yFJAz1sPHs1vI+xd2apcr2Fpe/7vfKjLb5r+nrY=
Subject key identifier: 66:1E:B7:0D:50:3F:59:27:D5:FD:94:08:15:5F:B8:B9:C2:49:39:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1573
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9743320E066311ED8CB8A7F3F1222468.roa
Signing time: Mon 18 Jul 2022 06:33:53 +0000
ROA not before: Mon 18 Jul 2022 06:33:49 +0000
ROA not after: Sun 15 Jan 2023 06:33:49 +0000
asID: 138456
IP address blocks: 45.194.124.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5491 (0x1573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 18 06:33:49 2022 GMT
Not After : Jan 15 06:33:49 2023 GMT
Subject: CN=62d4fed1-b66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d4:80:7b:81:b3:41:7e:63:27:8c:e8:87:88:
48:23:a0:db:74:76:e6:d8:98:6b:7d:56:4d:f2:19:
e7:9e:c3:66:26:a1:57:db:2b:e5:0e:08:21:b2:38:
9b:4e:1f:be:06:e6:cd:89:5e:51:fb:f3:87:70:64:
55:af:2f:30:bd:32:42:3d:2b:05:09:15:7d:59:5a:
e9:8f:20:17:6a:3b:cf:f7:9c:5c:e2:e7:07:78:d8:
ba:ae:ce:99:c9:94:05:ff:96:09:dc:e0:ed:03:8c:
78:e0:4b:7b:8d:70:80:4a:d0:b8:6b:78:83:07:3b:
6a:ce:c2:a0:2c:c4:cd:d6:77:0c:a6:6e:09:23:73:
2b:3f:32:e3:73:c0:9c:84:0a:41:08:fc:89:a2:3c:
1e:0f:a6:5b:2c:e9:71:3c:dc:ac:f5:61:d7:f7:dd:
39:5c:14:36:ce:fa:b2:eb:e6:13:b7:10:63:2f:a1:
9f:87:4d:2e:9d:6e:2a:86:42:f4:ad:8a:0c:09:85:
77:10:b2:a1:09:13:c5:1f:35:a2:f9:3f:5c:04:41:
3c:0c:0c:77:c8:53:08:30:c5:f5:dc:a9:f3:62:7f:
6b:8a:b8:96:04:4d:c3:d6:a0:49:c3:14:53:b4:8c:
29:09:40:a4:98:dd:dc:ed:e8:12:bd:fb:ab:50:3a:
c1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1E:B7:0D:50:3F:59:27:D5:FD:94:08:15:5F:B8:B9:C2:49:39:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9743320E066311ED8CB8A7F3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.124.0/22
Signature Algorithm: sha256WithRSAEncryption
38:00:e2:59:ec:7b:3c:6d:c1:48:ae:9e:22:77:a5:fe:f8:63:
81:f2:45:2f:3a:28:b4:24:ec:0d:e3:a8:48:85:67:fc:15:78:
4e:75:7c:d5:06:b1:03:da:c8:b5:d9:05:b1:ea:a8:64:01:9b:
b6:32:18:da:a5:ff:a2:14:34:ac:c0:f7:1b:c5:fa:69:eb:c3:
7d:2f:2e:63:75:c2:77:31:a6:92:01:34:06:2d:1f:d9:dc:e9:
38:96:32:b1:5d:44:bc:f4:17:34:6f:40:99:1d:a8:a8:08:57:
e7:76:1c:d5:83:ce:05:c1:34:1f:06:61:cc:17:18:70:25:4c:
ef:a2:a3:ff:e2:a5:0b:4c:a1:b4:2d:dd:0b:f5:74:11:3d:79:
16:51:87:b8:34:b9:c0:c1:83:71:c5:4d:1a:16:e2:80:ab:94:
93:bb:6c:a4:e1:f8:1b:42:90:46:dc:b4:f1:d3:45:81:09:67:
e5:4f:50:11:19:48:08:45:2e:c7:2e:bf:ca:38:2e:03:e5:e5:
20:19:52:c0:9b:90:71:c6:bb:26:1e:0f:4d:04:13:81:b5:16:
30:43:ba:53:7e:30:73:b1:d1:34:59:ff:a3:f3:8f:44:a4:7e:
3f:d5:45:07:00:5d:8a:3d:a7:56:4e:ac:6a:06:1f:f6:3d:1a:
14:21:a7:e4
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFXMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA3MTgwNjMzNDlaFw0yMzAxMTUwNjMzNDlaMBgxFjAU
BgNVBAMMDTYyZDRmZWQxLWI2NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCg1IB7gbNBfmMnjOiHiEgjoNt0dubYmGt9Vk3yGeeew2YmoVfbK+UOCCGy
OJtOH74G5s2JXlH784dwZFWvLzC9MkI9KwUJFX1ZWumPIBdqO8/3nFzi5wd42Lqu
zpnJlAX/lgnc4O0DjHjgS3uNcIBK0LhreIMHO2rOwqAsxM3Wdwymbgkjcys/MuNz
wJyECkEI/ImiPB4Pplss6XE83Kz1Ydf33TlcFDbO+rLr5hO3EGMvoZ+HTS6dbiqG
QvStigwJhXcQsqEJE8UfNaL5P1wEQTwMDHfIUwgwxfXcqfNif2uKuJYETcPWoEnD
FFO0jCkJQKSY3dzt6BK9+6tQOsHNAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUZh63
DVA/WSfV/ZQIFV+4ucJJOV4wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4Lzk3NDMzMjBFMDY2MzExRUQ4Q0I4QTdGM0YxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItwnwwDQYJKoZIhvcNAQELBQAD
ggEBADgA4lnsezxtwUiuniJ3pf74Y4HyRS86KLQk7A3jqEiFZ/wVeE51fNUGsQPa
yLXZBbHqqGQBm7YyGNql/6IUNKzA9xvF+mnrw30vLmN1wncxppIBNAYtH9nc6TiW
MrFdRLz0FzRvQJkdqKgIV+d2HNWDzgXBNB8GYcwXGHAlTO+io//ipQtMobQt3Qv1
dBE9eRZRh7g0ucDBg3HFTRoW4oCrlJO7bKTh+BtCkEbctPHTRYEJZ+VPUBEZSAhF
Lscuv8o4LgPl5SAZUsCbkHHGuyYeD00EE4G1FjBDulN+MHOx0TRZ/6Pzj0Skfj/V
RQcAXYo9p1ZOrGoGH/Y9GhQhp+Q=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:22 2023 by rpki-client on console-ams.rpki-client.org