Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DABD30E2C9611EC93C9EB34D8A014CE.roa
File: 0DABD30E2C9611EC93C9EB34D8A014CE.roa (raw, json)
Hash identifier: qNrNitEJBs9eRIsfDkxCp/ukZl9hPR/dici2IAp81II=
Subject key identifier: AC:91:7E:D6:C0:B9:70:28:1D:06:0A:53:64:6A:52:DC:D7:78:C9:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0A0B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DABD30E2C9611EC93C9EB34D8A014CE.roa
Signing time: Thu 14 Oct 2021 02:25:53 +0000
ROA not before: Thu 14 Oct 2021 02:25:49 +0000
ROA not after: Sun 25 Sep 2022 02:25:49 +0000
asID: 40065
IP address blocks: 156.241.138.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2571 (0xa0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 14 02:25:49 2021 GMT
Not After : Sep 25 02:25:49 2022 GMT
Subject: CN=61679531-66e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:3d:e8:ec:6f:db:4a:60:4b:a4:84:b8:37:
c0:de:21:1a:a1:db:ce:ae:92:8b:05:07:0b:cc:61:
69:6a:e4:88:d5:0c:ce:00:13:1e:21:23:44:86:06:
94:33:51:67:29:0e:f9:12:5d:d4:bd:77:35:8f:03:
7e:43:37:99:11:df:de:e5:f4:5e:04:77:f0:94:96:
95:26:2d:e5:21:e8:3f:36:78:72:29:35:7c:3f:52:
c3:a9:28:17:89:e7:21:f0:44:24:00:ba:b5:a9:01:
90:01:5e:8a:96:34:be:12:14:ce:da:83:78:fd:41:
7c:21:90:c2:f8:68:92:75:e5:95:4f:5d:40:e0:ab:
fd:68:45:ce:2d:e3:ad:75:62:07:17:76:28:19:01:
ab:2b:86:b0:3d:bb:57:10:8b:a2:c2:05:5b:79:3e:
c6:53:e9:20:48:82:dd:0d:be:42:8e:04:8d:76:49:
38:c8:42:17:d2:2e:6b:ae:02:c6:25:48:08:a0:3b:
e4:89:29:6d:d7:4b:f1:60:49:e3:1f:fe:18:3d:d2:
ae:02:3d:ea:20:59:32:ae:90:e3:a0:8d:d1:18:28:
67:b3:c1:f3:b1:dd:27:5a:21:74:74:18:37:e1:c5:
42:5d:34:7c:9b:c0:72:5c:e3:f6:ce:d3:54:5f:b9:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:91:7E:D6:C0:B9:70:28:1D:06:0A:53:64:6A:52:DC:D7:78:C9:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DABD30E2C9611EC93C9EB34D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.138.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:19:0e:81:b8:c8:53:53:9c:ff:05:4e:68:85:e3:68:7c:fa:
b0:32:88:8f:5d:83:3d:68:72:3e:ce:f0:2e:2c:7a:be:16:ac:
67:61:ca:c3:1d:2f:27:49:78:e0:c7:15:7b:a4:42:98:98:47:
99:1c:33:bd:ac:59:28:b1:34:34:84:b4:86:30:19:33:1b:67:
c6:1c:64:06:6f:ac:c9:50:2c:05:53:40:dc:92:dc:23:a2:bc:
4c:d7:74:52:b4:06:3e:08:f6:50:e7:5b:cc:8e:2d:4f:12:d2:
11:0a:0c:0a:5d:0b:1d:eb:28:46:c7:ff:f4:cc:be:3a:f1:f0:
1a:36:86:f3:1b:e2:f0:3a:fc:ba:ea:43:1d:1b:39:28:96:17:
8a:5b:5d:6f:3f:25:98:f5:64:e6:0c:39:59:99:95:b5:3b:16:
1c:a0:6c:2f:d3:fa:a8:69:1c:81:69:21:f9:af:81:7e:13:ba:
73:8a:2a:0c:f3:df:22:49:73:03:61:86:79:f2:3d:fb:05:e5:
c4:dc:06:54:5d:23:57:6b:2e:1f:41:36:e8:11:71:ea:1d:34:
3d:ed:ea:f4:8e:01:61:67:54:10:f8:b8:5a:08:e3:48:7e:e1:
f9:3c:96:df:1f:c5:77:a3:fc:93:29:63:a2:10:61:17:48:11:
0f:7a:d0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-fra.rpki-client.org