Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAA8939AEDE311EC8130199EF1222468.roa
File: AAA8939AEDE311EC8130199EF1222468.roa (raw, json)
Hash identifier: pXYQUcsURf+E0KGv7CKoct3heL1xQ5o4zKp5U6NeXfU=
Subject key identifier: 2E:72:F3:6C:7D:5B:57:16:8F:A8:15:A0:7C:56:B0:6F:6E:8C:21:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 14EC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAA8939AEDE311EC8130199EF1222468.roa
Signing time: Fri 17 Jun 2022 02:17:42 +0000
ROA not before: Fri 17 Jun 2022 02:17:38 +0000
ROA not after: Fri 30 Dec 2022 02:17:38 +0000
asID: 328608
IP address blocks: 45.194.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5356 (0x14ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 02:17:38 2022 GMT
Not After : Dec 30 02:17:38 2022 GMT
Subject: CN=62abe446-0ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:82:a3:da:e0:1b:e6:cf:79:49:23:23:14:
c7:96:27:19:0c:f4:02:11:a0:19:ea:07:a2:3e:72:
52:52:ec:93:bc:de:26:61:82:98:ab:76:93:da:19:
6f:b7:51:10:a7:f9:fa:f6:89:94:b0:fe:62:eb:a3:
df:99:cb:54:60:8a:38:4a:c9:aa:9f:1f:46:e9:9a:
10:72:ae:05:6b:8e:13:36:b3:54:c6:51:48:0b:e2:
0c:52:24:16:84:d4:b3:e0:af:41:d3:2e:00:15:2b:
9a:78:80:7b:b4:93:c1:ca:c9:fb:d0:de:e8:b7:2e:
67:7c:ad:f8:bc:69:70:cf:35:72:8c:4a:a2:ae:17:
8e:2e:37:11:ea:62:c4:a9:c8:21:da:3e:04:12:7b:
74:93:35:0a:f5:24:18:61:c7:7c:3b:b9:54:60:d6:
4d:ad:fe:e6:6d:e6:0a:80:09:af:a3:e2:a1:92:48:
d4:94:2f:af:45:5b:a8:61:7b:e3:1f:73:7f:5d:cb:
1d:31:3d:b3:6f:14:d8:04:a8:da:1c:c7:cf:8e:f9:
7b:4c:c3:cc:d6:aa:ff:ef:99:88:ea:da:f6:a3:23:
ac:40:89:05:55:71:78:57:4e:70:76:44:7b:89:fd:
b9:58:8a:52:01:56:25:d9:36:a5:13:57:b2:c5:95:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:72:F3:6C:7D:5B:57:16:8F:A8:15:A0:7C:56:B0:6F:6E:8C:21:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAA8939AEDE311EC8130199EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.128.0/19
Signature Algorithm: sha256WithRSAEncryption
24:91:cc:0e:08:84:42:27:22:1c:e4:01:33:b9:0d:27:33:b2:
9e:78:38:59:74:99:1c:b1:50:b6:ae:0a:70:e0:21:ff:46:f8:
c7:67:02:2f:91:b9:43:b8:cc:00:60:c0:96:7c:e9:41:bd:2f:
0a:77:71:a8:e9:72:23:cf:36:70:81:bf:53:5c:d3:e2:99:08:
68:76:4b:89:db:f0:99:45:35:77:ea:b2:da:47:7d:57:43:99:
e1:1d:c4:88:58:f4:07:04:6e:6f:e6:2f:73:c6:3c:b3:37:c2:
9e:30:ca:f2:c9:e7:cd:af:b9:39:86:12:f2:4b:e2:80:5f:2c:
42:fc:59:51:22:f7:42:9d:af:5b:2b:36:a5:7b:82:e2:1a:02:
7e:9a:9d:b0:bd:ec:c0:65:46:b1:8d:60:75:6f:a4:7b:14:5f:
e3:68:eb:61:1d:4b:62:c4:71:12:8b:cd:fb:d3:3a:de:53:d8:
70:8b:37:0e:6d:3d:f6:de:8f:cf:cb:f3:48:47:cc:3f:91:ec:
15:b8:d1:bd:5b:dd:7c:c8:fa:68:89:f8:8c:38:9e:fb:b7:d5:
f7:ac:07:c3:02:43:62:69:20:d5:54:37:b1:54:3f:f4:63:5b:
92:61:33:d2:f9:a9:57:e4:46:4b:d3:d6:70:82:38:19:56:79:
d1:b5:66:01
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFOwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA2MTcwMjE3MzhaFw0yMjEyMzAwMjE3MzhaMBgxFjAU
BgNVBAMMDTYyYWJlNDQ2LTBmZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHpoKj2uAb5s95SSMjFMeWJxkM9AIRoBnqB6I+clJS7JO83iZhgpirdpPa
GW+3URCn+fr2iZSw/mLro9+Zy1RgijhKyaqfH0bpmhByrgVrjhM2s1TGUUgL4gxS
JBaE1LPgr0HTLgAVK5p4gHu0k8HKyfvQ3ui3Lmd8rfi8aXDPNXKMSqKuF44uNxHq
YsSpyCHaPgQSe3STNQr1JBhhx3w7uVRg1k2t/uZt5gqACa+j4qGSSNSUL69FW6hh
e+Mfc39dyx0xPbNvFNgEqNocx8+O+XtMw8zWqv/vmYjq2vajI6xAiQVVcXhXTnB2
RHuJ/blYilIBViXZNqUTV7LFlWIjAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQULnLz
bH1bVxaPqBWgfFawb26MIREwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0FBQTg5MzlBRURFMzExRUM4MTMwMTk5RUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUtwoAwDQYJKoZIhvcNAQELBQAD
ggEBACSRzA4IhEInIhzkATO5DSczsp54OFl0mRyxULauCnDgIf9G+MdnAi+RuUO4
zABgwJZ86UG9Lwp3cajpciPPNnCBv1Nc0+KZCGh2S4nb8JlFNXfqstpHfVdDmeEd
xIhY9AcEbm/mL3PGPLM3wp4wyvLJ582vuTmGEvJL4oBfLEL8WVEi90Kdr1srNqV7
guIaAn6anbC97MBlRrGNYHVvpHsUX+No62EdS2LEcRKLzfvTOt5T2HCLNw5tPfbe
j8/L80hHzD+R7BW40b1b3XzI+miJ+Iw4nvu31fesB8MCQ2JpINVUN7FUP/RjW5Jh
M9L5qVfkRkvT1nCCOBlWedG1ZgE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org