Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04036B2AF4D611EB997FBB41D8A014CE.roa
File: 04036B2AF4D611EB997FBB41D8A014CE.roa (raw, json)
Hash identifier: 10XipmYXIVIzZi9IeXv0R2/Y16rBDyyzlA/oZpJvcgc=
Subject key identifier: 07:1E:FB:5A:8C:16:89:7E:E7:A0:4C:BB:17:DB:E9:7E:BB:94:C1:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 084A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04036B2AF4D611EB997FBB41D8A014CE.roa
Signing time: Wed 04 Aug 2021 03:43:09 +0000
ROA not before: Wed 04 Aug 2021 03:43:03 +0000
ROA not after: Thu 04 Aug 2022 03:43:03 +0000
asID: 398993
IP address blocks: 156.235.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2122 (0x84a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 4 03:43:03 2021 GMT
Not After : Aug 4 03:43:03 2022 GMT
Subject: CN=610a0ccd-b18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:23:f3:49:12:9c:78:8a:00:69:e4:ce:a6:96:
a7:a8:be:a7:c9:4b:44:48:37:9c:5f:83:fb:84:f4:
4a:74:b5:cd:ff:24:be:d3:6b:51:2e:cf:3e:c8:eb:
6d:8a:ce:9f:18:bc:21:45:88:de:59:a4:35:a4:f4:
9e:a5:89:26:df:02:e0:df:a8:1c:cd:a3:0b:7f:be:
c3:52:68:e6:3c:f8:c3:cd:f4:d5:29:f8:44:3e:96:
c8:35:8c:da:4a:bc:1b:41:61:b7:c5:c2:d0:61:60:
3a:cd:ce:b7:fa:1b:8c:50:5f:73:29:a2:af:72:8d:
30:c7:e7:64:5e:5e:2e:df:5e:54:ae:da:86:dc:1b:
38:d5:61:8d:b1:92:4a:ec:1a:13:59:4f:b8:0e:95:
4f:a3:e8:49:fc:aa:47:64:7d:8b:92:62:2c:61:20:
3e:fc:da:cb:d2:3f:29:bc:6d:f8:c8:9f:8f:75:0c:
41:15:ef:cd:50:a5:0d:c0:95:89:d6:41:a0:05:24:
a0:dc:46:32:61:3a:53:df:e1:28:4f:54:50:8d:d2:
98:9f:fc:fe:13:7c:5d:67:b2:65:78:46:dd:62:78:
f0:b3:cc:fa:d9:ae:d4:51:85:5a:5a:77:dc:17:36:
89:b7:f7:84:e3:5d:ff:b1:9e:3c:06:c2:16:b7:34:
0a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1E:FB:5A:8C:16:89:7E:E7:A0:4C:BB:17:DB:E9:7E:BB:94:C1:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04036B2AF4D611EB997FBB41D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.112.0/20
Signature Algorithm: sha256WithRSAEncryption
a5:ec:c8:b0:60:f8:47:0b:01:e1:6c:59:f3:c4:76:be:0c:f5:
fe:0d:09:bb:98:cd:a5:ef:32:2e:b1:1f:a9:8d:bb:42:b0:6a:
4a:2b:c0:f5:49:17:98:69:9c:96:40:f7:fd:56:90:cb:6a:d7:
5e:30:de:80:2a:0a:37:9f:ad:6e:12:c8:9a:78:a3:38:ed:3d:
2a:9c:42:5b:75:33:2a:86:50:35:a6:15:91:c9:a5:e8:e7:85:
aa:bf:e3:16:87:6a:09:48:9a:ff:cc:6b:cc:b7:fb:56:4d:e3:
db:23:7b:28:bb:f6:bc:9f:64:03:fa:c3:ce:ee:a4:e4:5b:d3:
e3:c4:42:3e:af:79:db:ef:59:70:af:41:ba:69:2d:6b:75:c0:
6b:fa:95:74:a5:e7:8e:e8:c9:a0:63:83:c1:95:93:b6:dc:db:
35:45:22:1a:5a:e5:6f:55:87:b5:5b:8b:ff:d1:ef:15:c8:64:
d1:46:b0:a5:f4:ed:a1:36:d3:c3:d3:5b:92:22:67:b8:57:a4:
c6:92:ac:8d:e5:23:07:37:54:0e:24:9f:c2:2f:16:25:6e:b4:
51:8e:4b:65:c2:a4:f8:72:bf:97:96:97:2d:5a:88:d6:ea:45:
dd:d2:fd:c8:98:9b:8b:e5:a9:19:ab:bd:59:71:4e:7e:2d:5b:
83:49:ee:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-fra.rpki-client.org