Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13021314C21311ECB70090F1F1222468.roa
File: 13021314C21311ECB70090F1F1222468.roa (raw, json)
Hash identifier: xw260mLOZAkMOYyQynWMEidhwpmUpkrXBt/k7oyX9SU=
Subject key identifier: 2F:A5:71:F8:00:B9:2F:F4:A9:45:ED:C2:F8:08:60:41:10:20:93:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 133F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13021314C21311ECB70090F1F1222468.roa
Signing time: Fri 22 Apr 2022 08:06:12 +0000
ROA not before: Fri 22 Apr 2022 08:06:08 +0000
ROA not after: Fri 30 Dec 2022 08:06:08 +0000
asID: 35916
IP address blocks: 156.248.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4927 (0x133f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 08:06:08 2022 GMT
Not After : Dec 30 08:06:08 2022 GMT
Subject: CN=626261f4-a11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:36:c6:23:72:ab:66:0d:8b:fb:7b:c9:a2:
b8:59:b8:18:8b:fa:0a:be:6e:a8:36:b6:67:3c:ad:
c8:09:ed:e3:20:64:0f:bd:9a:38:31:f0:ea:14:01:
00:f7:eb:cc:a4:56:b8:a3:03:45:5d:e1:dc:46:0c:
be:be:f1:ba:40:82:2f:a0:9b:ab:c4:a7:c7:c4:37:
d0:cd:32:2e:d7:6e:8e:87:80:5e:08:36:17:5a:d5:
25:24:1c:66:fb:6e:62:7a:4c:8a:4c:40:f9:94:f2:
ce:e9:41:d6:65:71:e3:31:a8:12:90:2a:c6:48:c6:
61:50:f5:66:04:10:f5:e4:0e:e3:5f:f2:f5:7e:18:
ce:d5:fa:13:a1:93:20:f2:6a:28:08:cc:fa:59:fb:
14:c3:1a:3d:44:53:1d:f6:92:c6:f2:28:c1:ab:12:
eb:22:53:64:2c:19:db:7c:5b:21:ef:b9:e3:2e:9d:
58:02:e6:65:a8:f2:85:b9:54:ad:fe:72:8c:a9:8e:
a1:46:1a:4a:ab:f5:57:e9:dd:d6:f8:50:85:17:7f:
b9:a2:f2:f8:07:ea:de:32:e7:a5:06:26:5f:db:91:
45:bf:0b:23:1d:ff:21:1a:c4:52:34:30:11:91:c8:
79:46:da:11:06:eb:25:ce:fb:96:b6:f3:bf:3c:1b:
d8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A5:71:F8:00:B9:2F:F4:A9:45:ED:C2:F8:08:60:41:10:20:93:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13021314C21311ECB70090F1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.4.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:78:02:2d:c5:96:65:50:ab:08:96:d0:83:79:52:fc:c1:a7:
6e:a0:b7:e8:03:37:4a:56:45:b4:c6:c6:e1:1a:3f:4e:6a:fd:
85:39:f4:88:e7:07:e6:f1:32:df:b3:ac:21:0f:83:c3:32:1e:
88:6b:ac:8b:9b:33:48:76:04:da:6e:ea:4c:bb:00:34:74:2e:
3c:5e:47:95:17:06:f8:58:0f:f4:4f:77:1b:48:26:22:f8:b5:
a1:61:3c:3b:95:43:c1:23:6b:95:fc:66:c7:07:6a:4c:66:7b:
e7:66:39:51:b5:6d:5f:84:75:82:c9:1b:19:c7:67:65:a4:cf:
41:a5:e4:58:7a:65:41:97:5a:94:3c:e7:3b:55:8c:d8:50:5b:
7f:b8:5e:b2:17:ad:c7:d5:6a:bf:0d:b6:cc:81:5b:91:21:51:
9f:de:ed:11:53:3a:e8:2f:41:42:0f:e0:f8:c3:c1:f0:98:80:
6f:c1:16:39:04:85:8e:14:7a:8d:3e:d7:6d:19:f2:39:c1:52:
a4:b3:69:3d:9e:e2:b5:bc:ed:9f:04:93:c6:3e:95:fd:71:e0:
96:e6:46:55:f7:1f:5b:1a:19:87:a1:3d:f4:aa:bb:16:be:95:
47:0c:6e:6a:3e:be:32:4e:00:eb:85:78:89:fa:97:41:6c:69:
5e:22:0c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org