Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D170636125811EDBE974BF1F1222468.roa
File: 0D170636125811EDBE974BF1F1222468.roa (raw, json)
Hash identifier: WfZ7Uh09qAogHKwHVpqvf8FRVVaXuBCfa5zKHv4LNa4=
Subject key identifier: 65:57:7C:C2:D5:4E:3E:3B:BB:34:D6:03:4E:94:19:0A:9B:FB:58:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 15F8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D170636125811EDBE974BF1F1222468.roa
Signing time: Tue 02 Aug 2022 11:41:30 +0000
ROA not before: Tue 02 Aug 2022 11:41:27 +0000
ROA not after: Wed 26 Oct 2022 11:41:27 +0000
asID: 133861
IP address blocks: 156.245.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5624 (0x15f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 11:41:27 2022 GMT
Not After : Oct 26 11:41:27 2022 GMT
Subject: CN=62e90d6a-2046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:2c:b9:49:69:38:16:ff:f4:df:8d:0e:b7:77:
cc:9f:2e:ff:2b:00:f7:83:15:4c:49:bf:8e:d6:2d:
86:02:f5:30:08:94:7b:27:34:5f:b6:b7:55:98:af:
3d:b5:4a:ca:64:1b:28:b9:25:63:4c:96:f3:20:22:
01:ab:13:62:13:56:a4:58:21:b1:76:ef:0c:b0:52:
26:37:fd:b2:14:c0:a1:81:e5:24:16:eb:e9:55:04:
7c:5a:39:3a:2a:64:87:25:03:f9:b4:10:82:6d:d4:
a6:3a:4d:97:0d:f8:a6:eb:85:fa:97:7e:89:0c:c7:
e0:75:36:69:e8:ad:90:b4:19:7d:5f:f4:19:e2:02:
bb:98:a2:86:6d:16:05:1e:4f:20:d4:0c:cd:ab:b8:
ec:e2:6a:2d:30:7c:c1:f4:9e:59:c5:d0:26:00:84:
63:ec:f0:e9:af:f7:dd:a7:07:a0:b7:4d:9e:40:a9:
43:cc:90:79:fe:fb:ad:ca:72:f8:93:75:13:12:e9:
fc:ab:67:e6:d2:fd:cd:9c:2d:ff:41:b8:7f:17:71:
cb:ed:86:a8:cb:80:ff:7b:58:84:12:2a:2e:0a:82:
ca:aa:ca:11:22:5b:4f:c1:2b:27:33:8f:cb:c0:cf:
42:df:a6:9f:30:1b:32:d4:c7:48:f5:c4:38:17:38:
8f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:57:7C:C2:D5:4E:3E:3B:BB:34:D6:03:4E:94:19:0A:9B:FB:58:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D170636125811EDBE974BF1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.11.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:ba:9b:93:32:3a:62:9b:ad:a0:99:41:43:0c:5a:0a:ed:e0:
c6:69:32:23:ba:8a:ad:7c:31:a0:2e:93:25:38:4c:be:f0:49:
0b:72:bd:60:43:1e:20:b9:c4:83:8d:f8:2a:fd:7b:4d:7b:25:
8d:e0:ad:ef:56:93:a3:04:c9:37:ee:53:82:60:24:ee:1c:5a:
0b:27:91:9e:42:e9:9f:08:fa:01:62:81:1b:df:1a:70:c5:3a:
5a:81:c9:b7:ee:c5:80:11:a8:56:33:44:59:62:3e:c4:d1:a5:
a2:79:bd:ca:19:51:4a:53:d3:ed:2d:ca:f8:8a:ab:54:ff:be:
12:52:f3:42:1d:ff:94:7a:84:c0:0e:96:3b:59:94:7a:bc:21:
f2:fa:ae:5c:b9:3e:13:ef:68:e8:d0:00:3d:df:a4:0a:8c:f0:
dc:a7:aa:17:f3:ce:22:52:39:91:65:98:b2:6f:bd:40:3d:80:
1e:98:8f:ea:82:24:cb:7c:22:3b:b5:4d:c4:46:43:e4:27:57:
6b:88:e6:27:bd:e2:0d:23:bd:ea:d6:41:68:bc:89:fb:ec:29:
33:58:09:1e:f1:49:26:2f:32:01:6d:1a:aa:a7:d6:9c:c9:e6:
ca:45:d4:0c:b2:02:64:0c:3e:6e:9c:0e:b9:c4:23:ad:59:7a:
1c:2b:40:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-fra.rpki-client.org