Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0973A122987511ECBFDA46A05A40D577.roa
File: 0973A122987511ECBFDA46A05A40D577.roa (raw, json)
Hash identifier: pHzR03lwcuyrvmAAPARdlREnZx1cfKfpPdQwB5ms5g4=
Subject key identifier: C2:12:42:54:6C:CB:DA:01:E7:CA:45:B9:DF:E6:DC:57:20:5E:1A:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1232
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0973A122987511ECBFDA46A05A40D577.roa
Signing time: Mon 28 Feb 2022 09:01:38 +0000
ROA not before: Mon 28 Feb 2022 09:01:35 +0000
ROA not after: Fri 30 Dec 2022 09:01:35 +0000
asID: 328608
IP address blocks: 156.238.136.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4658 (0x1232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 28 09:01:35 2022 GMT
Not After : Dec 30 09:01:35 2022 GMT
Subject: CN=621c8f72-8285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:52:58:3a:8a:0a:b1:68:f8:13:ef:64:6a:57:
b8:7f:b3:cb:0b:62:c5:aa:a0:eb:b1:a5:d1:a1:a4:
ca:c5:0d:fc:84:e3:af:e7:47:bb:f6:36:4d:2f:d7:
d9:6d:6e:57:80:42:7f:7c:bf:2f:a6:b0:93:99:96:
0b:85:bb:0d:f7:15:bf:7e:9b:1c:6d:e4:56:b6:e2:
27:07:3f:82:94:06:82:d2:a3:9e:83:95:f2:98:bc:
b7:c7:d8:9e:02:48:61:45:b1:0f:96:78:89:da:b7:
9b:04:4e:c3:28:1d:55:5e:c5:51:94:3b:5c:8d:45:
7a:34:73:ad:e4:78:cc:1a:6c:5f:84:d7:0e:64:af:
e1:0b:e6:13:b8:21:8e:ac:aa:9b:bb:c6:31:3c:b9:
13:c8:9d:65:40:d9:19:73:aa:89:ed:ca:75:00:28:
58:c5:09:ab:d8:ad:92:8c:af:f7:9e:42:00:c7:b0:
8e:c5:f4:c6:fd:a9:e0:2f:81:55:76:ed:ef:70:d5:
0c:71:f8:70:52:86:20:3f:1f:6f:71:7e:16:b5:b9:
c4:88:a3:d2:a1:89:22:ec:94:d9:ca:8a:72:af:6f:
cb:99:94:1f:2d:b3:b5:dd:e8:23:2f:52:c0:26:f4:
5d:51:00:99:f7:7e:77:d4:e6:f5:29:6a:c8:c7:07:
4a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:12:42:54:6C:CB:DA:01:E7:CA:45:B9:DF:E6:DC:57:20:5E:1A:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0973A122987511ECBFDA46A05A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.136.0/22
Signature Algorithm: sha256WithRSAEncryption
12:6d:0e:9c:b5:db:d6:1b:e9:8f:0e:5f:e8:eb:58:22:a4:d7:
b1:69:fd:49:ff:a7:43:85:aa:e7:94:4c:0f:1e:2c:17:a7:1b:
96:19:53:85:79:f7:51:75:d7:e0:4d:14:33:6c:18:88:15:85:
55:14:39:35:67:03:cd:4f:db:e9:6c:e9:59:b3:8c:e7:d0:32:
d0:26:84:6c:b3:f6:d7:1c:bb:b9:d1:8c:d4:e6:fa:b5:9d:81:
53:f4:05:02:d0:7f:c5:29:0e:ca:41:be:b1:92:10:05:07:25:
81:8c:bb:94:26:a4:fb:98:64:ef:8c:9b:a5:9a:ec:d4:61:2b:
0e:64:78:3e:af:72:6f:ca:e2:55:cd:3d:5d:23:80:c0:0f:80:
18:30:4b:da:c5:8c:45:78:c9:f9:04:af:30:c2:13:fe:e0:9e:
bb:ee:03:8f:19:20:75:1b:06:c5:f7:5d:74:71:d2:16:36:c1:
c8:be:17:89:33:15:90:06:0a:ef:51:5b:86:bd:59:96:87:46:
3d:1e:4e:b0:e5:b9:65:6a:60:42:cb:7f:3f:4a:db:dc:f1:ec:
3f:9e:48:45:88:3b:70:a5:08:4d:80:d6:e9:be:ed:11:3a:79:
17:4b:63:34:a3:07:e1:ff:1c:3c:0f:91:58:99:10:ef:18:be:
f6:0a:06:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-ams.rpki-client.org