Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7370136AB5B11ECBC6793A35A40D577.roa
File: E7370136AB5B11ECBC6793A35A40D577.roa (raw, json)
Hash identifier: ITm7pQb39EzdSDCsGFLL6JA9m4lWdmmyx42ZGb3UvFU=
Subject key identifier: 16:AF:70:B2:16:3D:12:FB:5E:6D:76:C3:86:4D:6A:DC:E1:E8:DF:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 12A0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7370136AB5B11ECBC6793A35A40D577.roa
Signing time: Thu 24 Mar 2022 10:19:35 +0000
ROA not before: Thu 24 Mar 2022 10:19:30 +0000
ROA not after: Sun 23 Apr 2023 10:19:30 +0000
asID: 270068
IP address blocks: 45.199.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4768 (0x12a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 24 10:19:30 2022 GMT
Not After : Apr 23 10:19:30 2023 GMT
Subject: CN=623c45b7-089b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:89:d5:62:a3:64:e2:39:98:7c:a9:91:9c:85:
80:79:9f:0a:28:c1:a0:2a:13:30:f9:cd:c2:6a:61:
cc:33:22:0e:01:66:62:62:42:7d:22:26:73:ac:d9:
1a:3b:da:c8:16:15:a6:6a:68:ad:4d:96:1a:a1:6a:
5b:c9:07:59:3e:42:6c:c4:1b:92:16:0a:d9:76:90:
73:33:94:7f:ef:35:2f:76:f1:c9:bb:5a:c3:b7:1f:
85:7e:7d:64:c3:00:d7:9e:7c:10:ad:3f:72:e9:e3:
76:41:2f:a5:a4:39:3c:3a:f6:1f:57:2c:73:0b:f5:
f1:b2:2f:40:70:37:68:8f:a8:61:ff:be:17:2a:f9:
1a:0e:12:5d:73:2f:de:e8:76:39:4d:f6:98:ff:93:
f8:7f:af:56:5e:e0:bc:06:68:08:ca:f1:82:27:3e:
5d:32:0d:ef:6f:97:f6:ec:12:6f:4b:05:87:2f:73:
83:6e:de:5b:79:be:3a:26:a8:9a:59:29:8c:68:55:
07:da:b6:c1:7e:55:75:98:d9:4d:52:c0:5e:86:e9:
5f:c8:91:4d:74:db:ea:44:ea:24:ab:55:7c:a9:f6:
eb:26:25:96:34:71:04:84:9f:44:4b:59:ac:eb:d0:
f9:c1:78:67:da:73:58:e2:0d:c3:05:fa:b3:dc:34:
0d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AF:70:B2:16:3D:12:FB:5E:6D:76:C3:86:4D:6A:DC:E1:E8:DF:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7370136AB5B11ECBC6793A35A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.184.0/24
Signature Algorithm: sha256WithRSAEncryption
44:d6:aa:f4:ac:8b:d9:7a:c6:52:a3:e1:4a:fd:d6:07:00:15:
7f:f9:3d:bd:e3:d7:66:0a:4a:85:f9:95:fe:c7:a1:e4:7f:58:
b2:b2:a7:9d:47:2d:2a:9d:c6:22:b9:64:fe:f4:10:40:20:2a:
ff:d2:74:a6:a8:3b:5a:77:28:26:e2:f0:29:f7:0a:c1:7b:6d:
0e:10:36:0c:a4:be:50:c3:1f:b9:82:fb:bd:6e:84:40:eb:42:
d6:cd:5f:cf:72:f8:4c:bf:83:22:04:35:7e:1b:dc:66:1a:13:
7b:36:4b:d8:46:15:db:15:29:53:08:17:14:af:9c:17:b4:9a:
45:fa:03:79:e9:73:15:bb:69:2f:5c:02:02:55:05:fd:f7:69:
ac:fd:dc:47:35:e5:2c:be:a0:9e:af:48:c3:39:88:92:5e:1c:
d9:7b:b0:07:89:cd:e9:f6:5c:16:3e:e0:08:a4:28:43:e7:ea:
e5:40:5c:b7:f3:8c:cd:f6:d4:21:67:59:80:af:4e:33:45:d6:
62:b5:fc:a1:c5:f8:49:41:db:cd:f8:49:63:e2:f4:cb:b3:dd:
25:f1:34:bc:c2:3d:bb:78:8f:47:cb:27:31:b3:e1:35:af:d7:
15:ae:bc:41:3b:30:f4:88:5f:90:90:0e:33:96:fd:af:ba:2a:
30:07:80:12
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEqAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjAzMjQxMDE5MzBaFw0yMzA0MjMxMDE5MzBaMBgxFjAU
BgNVBAMMDTYyM2M0NWI3LTA4OWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCYidVio2TiOZh8qZGchYB5nwoowaAqEzD5zcJqYcwzIg4BZmJiQn0iJnOs
2Ro72sgWFaZqaK1NlhqhalvJB1k+QmzEG5IWCtl2kHMzlH/vNS928cm7WsO3H4V+
fWTDANeefBCtP3Lp43ZBL6WkOTw69h9XLHML9fGyL0BwN2iPqGH/vhcq+RoOEl1z
L97odjlN9pj/k/h/r1Ze4LwGaAjK8YInPl0yDe9vl/bsEm9LBYcvc4Nu3lt5vjom
qJpZKYxoVQfatsF+VXWY2U1SwF6G6V/IkU102+pE6iSrVXyp9usmJZY0cQSEn0RL
Wazr0PnBeGfac1jiDcMF+rPcNA0tAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUFq9w
shY9EvtebXbDhk1q3OHo3/IwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0U3MzcwMTM2QUI1QjExRUNCQzY3OTNBMzVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtx7gwDQYJKoZIhvcNAQELBQAD
ggEBAETWqvSsi9l6xlKj4Ur91gcAFX/5Pb3j12YKSoX5lf7HoeR/WLKyp51HLSqd
xiK5ZP70EEAgKv/SdKaoO1p3KCbi8Cn3CsF7bQ4QNgykvlDDH7mC+71uhEDrQtbN
X89y+Ey/gyIENX4b3GYaE3s2S9hGFdsVKVMIFxSvnBe0mkX6A3npcxW7aS9cAgJV
Bf33aaz93Ec15Sy+oJ6vSMM5iJJeHNl7sAeJzen2XBY+4AikKEPn6uVAXLfzjM32
1CFnWYCvTjNF1mK1/KHF+ElB2834SWPi9Muz3SXxNLzCPbt4j0fLJzGz4TWv1xWu
vEE7MPSIX5CQDjOW/a+6KjAHgBI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org