Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3CFB0B217C711ED97493EBEF1222468.roa
File: B3CFB0B217C711ED97493EBEF1222468.roa (raw, json)
Hash identifier: fph1/o+2ZSqSq2jNsK0M6oEGFhqCZjI9xPiWe1FPJYs=
Subject key identifier: F4:76:E1:F1:D4:F5:07:37:02:50:16:63:8C:4C:B0:DA:96:60:B0:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 16B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3CFB0B217C711ED97493EBEF1222468.roa
Signing time: Tue 09 Aug 2022 09:43:20 +0000
ROA not before: Tue 09 Aug 2022 09:43:17 +0000
ROA not after: Sun 25 Jun 2023 09:43:17 +0000
asID: 1239
IP address blocks: 156.224.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5813 (0x16b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 9 09:43:17 2022 GMT
Not After : Jun 25 09:43:17 2023 GMT
Subject: CN=62f22c38-bb19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:16:85:ec:ca:df:9e:ff:63:3e:ce:f5:d6:
65:12:85:30:02:75:89:be:ed:0b:a5:5a:0f:be:ca:
c4:9c:3e:4f:9a:0e:8b:d9:92:39:95:61:a1:34:e3:
d8:89:ec:b6:2a:f8:7f:ed:91:74:00:f5:70:37:f7:
ff:b0:38:6d:ea:48:f6:3e:fd:a7:95:dc:cb:db:78:
b9:87:87:c0:f9:74:f2:69:c8:b2:74:7a:57:b9:f9:
ca:b9:75:9d:6c:d6:ca:d2:20:63:f7:e0:07:4d:4e:
4d:30:0d:a7:fb:cd:9b:77:d5:de:76:ce:a5:1f:f8:
cc:30:23:03:b2:59:3b:eb:98:2b:55:81:e1:5f:2a:
99:1d:03:e9:49:38:e8:c9:a1:a9:25:65:37:86:4a:
01:62:68:88:a9:60:0b:33:28:ba:7e:cc:26:04:b6:
42:89:a7:95:d7:fa:e8:6f:1c:d3:1a:4b:2e:00:f0:
cc:ed:4e:1c:4d:fa:7b:fb:e2:03:9d:7f:16:28:57:
ff:aa:74:10:18:f0:d1:67:3a:4e:bd:9b:7e:44:43:
8e:61:db:d6:2e:cb:97:45:85:f4:45:19:c3:90:9a:
8a:95:15:2c:66:c2:94:85:0d:73:ac:41:6f:26:c1:
f3:a3:f9:5e:81:a2:5f:81:3d:36:fa:d7:fa:61:e2:
33:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:76:E1:F1:D4:F5:07:37:02:50:16:63:8C:4C:B0:DA:96:60:B0:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3CFB0B217C711ED97493EBEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.4.0/22
Signature Algorithm: sha256WithRSAEncryption
86:6d:5b:cf:89:35:cb:c9:19:52:0e:64:9a:1f:f0:38:a1:ee:
95:07:e1:7e:20:d2:77:00:4b:80:09:08:3c:55:d1:e6:f6:b4:
6a:de:5f:df:79:5f:28:82:a3:7c:82:be:b9:b3:df:cb:63:2b:
a6:8f:b3:d7:fd:f5:30:0e:15:e8:d3:c9:00:d5:93:d5:36:02:
5d:58:5a:ee:ee:bf:26:78:e2:43:7e:eb:55:51:cf:f3:87:1d:
55:6f:92:de:cf:a9:24:10:a5:9d:e2:3e:c5:d8:09:12:3e:d0:
1c:16:c3:9e:e2:db:04:68:1b:5a:d9:a3:18:3d:33:55:b3:ab:
23:89:17:9e:23:2b:ca:b8:a4:33:12:63:ad:d3:a7:2f:37:ba:
d9:5a:f1:31:27:c8:e5:78:23:0a:35:70:92:67:0a:f9:22:ba:
b6:a0:f1:09:2d:42:7a:58:a4:19:f8:4d:88:25:25:e4:7d:7e:
22:cc:ba:20:11:a7:b0:fc:5e:47:56:19:15:c2:67:39:73:b7:
be:45:a8:dd:79:4a:cf:33:a0:ba:7d:d0:ea:dd:df:f0:c1:e7:
69:d9:66:4f:12:00:23:16:35:df:12:20:1e:5a:4b:5f:c8:21:
88:4f:11:21:57:18:df:69:f1:d8:ae:5d:fc:55:4f:40:73:20:
2c:09:03:bf
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFrUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA4MDkwOTQzMTdaFw0yMzA2MjUwOTQzMTdaMBgxFjAU
BgNVBAMMDTYyZjIyYzM4LWJiMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFoRaF7Mrfnv9jPs711mUShTACdYm+7QulWg++ysScPk+aDovZkjmVYaE0
49iJ7LYq+H/tkXQA9XA39/+wOG3qSPY+/aeV3MvbeLmHh8D5dPJpyLJ0ele5+cq5
dZ1s1srSIGP34AdNTk0wDaf7zZt31d52zqUf+MwwIwOyWTvrmCtVgeFfKpkdA+lJ
OOjJoaklZTeGSgFiaIipYAszKLp+zCYEtkKJp5XX+uhvHNMaSy4A8MztThxN+nv7
4gOdfxYoV/+qdBAY8NFnOk69m35EQ45h29Yuy5dFhfRFGcOQmoqVFSxmwpSFDXOs
QW8mwfOj+V6Bol+BPTb61/ph4jNnAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU9Hbh
8dT1BzcCUBZjjEyw2pZgsE0wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0IzQ0ZCMEIyMTdDNzExRUQ5NzQ5M0VCRUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKc4AQwDQYJKoZIhvcNAQELBQAD
ggEBAIZtW8+JNcvJGVIOZJof8Dih7pUH4X4g0ncAS4AJCDxV0eb2tGreX995XyiC
o3yCvrmz38tjK6aPs9f99TAOFejTyQDVk9U2Al1YWu7uvyZ44kN+61VRz/OHHVVv
kt7PqSQQpZ3iPsXYCRI+0BwWw57i2wRoG1rZoxg9M1WzqyOJF54jK8q4pDMSY63T
py83utla8TEnyOV4Iwo1cJJnCvkiurag8QktQnpYpBn4TYglJeR9fiLMuiARp7D8
XkdWGRXCZzlzt75FqN15Ss8zoLp90Ord3/DB52nZZk8SACMWNd8SIB5aS1/IIYhP
ESFXGN9p8diuXfxVT0BzICwJA78=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-fra.rpki-client.org