Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/EAD85330050111ED9C25608EF1222468.roa
File: EAD85330050111ED9C25608EF1222468.roa (raw, json)
Hash identifier: cabeqbq4j8NgClE6WlIksU3mvR/8zuRCgsbtNURk3Os=
Subject key identifier: 14:74:31:6C:5A:98:83:7E:96:4A:59:5A:4C:B1:B0:90:A9:B9:E1:87
Certificate issuer: /CN=F364C81DAR/serialNumber=0D27394E9CDE92155E4599D68410992D708BF244
Certificate serial: 0495
Authority key identifier: 0D:27:39:4E:9C:DE:92:15:5E:45:99:D6:84:10:99:2D:70:8B:F2:44
Authority info access: rsync://rpki.afrinic.net/repository/arin/DSc5TpzekhVeRZnWhBCZLXCL8kQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/EAD85330050111ED9C25608EF1222468.roa
Signing time: Sat 16 Jul 2022 12:22:11 +0000
ROA not before: Sat 16 Jul 2022 12:22:08 +0000
ROA not after: Sun 01 Jan 2023 12:22:08 +0000
asID: 327822
IP address blocks: 169.255.20.0/24 maxlen: 24
169.255.21.0/24 maxlen: 24
169.255.22.0/24 maxlen: 24
169.255.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1173 (0x495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364C81DAR/serialNumber=0D27394E9CDE92155E4599D68410992D708BF244
Validity
Not Before: Jul 16 12:22:08 2022 GMT
Not After : Jan 1 12:22:08 2023 GMT
Subject: CN=62d2ad73-ab26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2b:f3:c8:d5:c3:58:36:cd:c1:96:92:9a:ab:
e9:18:ad:8f:0b:9a:ed:d1:73:55:d5:d7:2f:d1:0b:
ef:16:47:91:7b:d3:c6:9b:9e:26:77:89:42:b5:ec:
4f:3d:83:66:29:f1:63:0c:8b:04:46:27:c1:25:68:
a2:f1:92:79:c5:06:44:c5:50:a0:0c:e3:66:56:77:
d8:5c:af:67:00:90:3c:ae:15:aa:82:f2:6e:62:59:
67:61:7a:51:97:25:b6:ea:01:e4:20:b4:0b:9c:34:
9f:24:26:bd:71:4f:e9:97:d2:de:16:7c:ca:9d:9e:
6f:cb:72:e9:05:a6:dc:8d:61:db:e4:99:ed:0d:77:
24:28:6d:a7:5c:d6:0b:40:8c:40:f0:15:7f:46:53:
a5:06:08:1d:50:5e:b4:90:13:54:10:3f:cb:47:1f:
11:02:a8:40:ae:06:bd:49:83:c4:7b:ef:22:f0:71:
14:6c:77:fb:61:9d:1c:40:b4:b5:4c:e7:17:5c:8d:
0d:1b:b8:a9:7c:16:d3:ac:dd:d2:f1:a7:df:0a:1e:
40:bb:db:4c:84:e1:f3:26:7b:d5:e4:d9:ed:b0:4f:
e1:26:a7:db:fb:14:7f:2a:5d:6e:d1:2a:ec:71:4d:
e6:ef:e2:69:a1:1c:a9:16:63:e4:ad:83:33:02:42:
31:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:74:31:6C:5A:98:83:7E:96:4A:59:5A:4C:B1:B0:90:A9:B9:E1:87
X509v3 Authority Key Identifier:
keyid:0D:27:39:4E:9C:DE:92:15:5E:45:99:D6:84:10:99:2D:70:8B:F2:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DSc5TpzekhVeRZnWhBCZLXCL8kQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/EAD85330050111ED9C25608EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.255.20.0/22
Signature Algorithm: sha256WithRSAEncryption
07:b2:8d:a6:59:87:28:68:8e:52:9f:83:bf:70:90:99:0e:9a:
86:80:b7:83:fd:8c:0a:17:8c:dd:1d:69:29:24:42:51:56:eb:
23:f1:cf:e4:59:90:67:9e:48:a8:12:4e:bb:43:3b:0c:14:7c:
5b:73:da:5e:af:6b:eb:ff:19:e4:02:6d:2c:9e:cc:42:9c:2a:
3e:ba:71:fb:ac:e4:34:a6:ed:55:18:c5:3b:a1:1b:99:08:7f:
4e:67:d1:2d:0c:3d:e3:1f:12:de:20:5b:7a:a3:22:da:8d:39:
70:55:f3:45:90:57:12:c2:26:e7:a9:74:33:de:41:f0:4a:0c:
d9:0c:99:80:ee:c0:16:4b:99:80:5f:3e:06:69:16:0b:48:d9:
6b:9e:6b:3a:48:e9:86:c1:6e:5e:9f:33:09:dc:3c:7a:8b:42:
32:a1:73:48:09:77:eb:33:db:60:3d:fd:eb:73:91:c6:86:d7:
96:bc:06:28:be:31:d4:98:1e:8c:22:39:e1:5e:d3:3b:60:78:
0b:fc:c8:7c:85:9f:67:78:fe:33:e4:63:e7:3f:03:e2:df:36:
b4:5e:04:02:4e:0e:fd:0f:01:18:4e:38:f8:ba:b8:28:33:94:
9f:5c:f5:4d:7c:aa:d7:2c:f1:40:32:1e:db:f1:84:fa:4e:8d:
1e:3d:bd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:56 2023 by rpki-client on console-ams.rpki-client.org