Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14C90C3E3E2D11ED8103B67EF1222468.roa
File: 14C90C3E3E2D11ED8103B67EF1222468.roa (raw, json)
Hash identifier: HnEhaRvWn9wZZA6FMnbl3bnwpRM5ZVdrQ1MGqo3EvAA=
Subject key identifier: 41:E2:88:84:11:E9:79:CF:3D:D9:7D:19:58:D6:D9:18:97:10:BB:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1887
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14C90C3E3E2D11ED8103B67EF1222468.roa
Signing time: Tue 27 Sep 2022 06:24:46 +0000
ROA not before: Tue 27 Sep 2022 06:24:42 +0000
ROA not after: Sun 15 Jan 2023 06:24:42 +0000
asID: 35916
IP address blocks: 156.225.76.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6279 (0x1887)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 27 06:24:42 2022 GMT
Not After : Jan 15 06:24:42 2023 GMT
Subject: CN=6332972e-6b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:02:1f:c5:da:dc:6a:1b:cb:58:28:dd:eb:
5f:3b:91:c2:89:85:4d:ea:f4:84:e1:05:11:ec:fd:
09:90:66:4b:8f:9a:4d:85:7a:9e:b7:cd:75:b7:6e:
fa:91:1c:33:1e:29:65:80:4d:83:23:30:47:72:5c:
42:f4:74:d8:48:6e:12:0f:93:ac:42:1a:df:74:9d:
21:f5:49:65:be:db:4f:30:c3:02:52:66:d7:dd:ec:
41:2e:8a:f4:85:22:73:8a:19:38:fd:a2:69:3e:d2:
1c:36:3d:30:44:0d:2f:f6:1e:04:7b:7c:95:1a:62:
f7:a7:2c:25:79:2e:cd:42:f2:df:76:ee:f4:8d:a6:
68:67:58:4e:c1:5d:ab:35:b1:59:ba:6a:43:35:c7:
ba:86:37:35:0d:ad:3b:45:2d:c8:39:80:8a:7a:a0:
a1:61:65:fb:02:ea:b8:56:e7:e4:17:36:fc:20:8d:
20:b6:4b:d3:ec:16:81:4b:26:54:ba:31:65:ad:1d:
b3:a5:ea:19:63:9c:b9:a7:1e:94:6a:44:63:18:e5:
bb:91:51:a0:ff:f9:f6:3e:4c:54:89:1c:07:1c:e7:
bd:94:6b:93:6b:63:ea:71:d6:7e:ed:9a:69:80:c1:
6a:2c:2a:04:7e:32:55:44:89:da:34:77:03:24:e6:
67:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E2:88:84:11:E9:79:CF:3D:D9:7D:19:58:D6:D9:18:97:10:BB:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14C90C3E3E2D11ED8103B67EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.76.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:04:cd:26:ca:94:3b:aa:61:17:97:4f:b9:9b:a1:94:25:11:
22:b9:7e:68:bf:ce:6c:c2:1f:78:f1:70:26:bf:73:bb:33:c9:
89:4a:13:c2:ff:b2:75:c4:f8:65:03:d1:c4:32:28:d2:a7:5d:
ed:b8:69:1a:b0:2b:7b:90:2c:c0:0f:8b:27:c5:40:09:be:46:
d3:28:ae:34:5a:d3:52:e0:b2:d8:0a:60:a2:a6:4d:e0:05:d2:
50:61:51:f3:d8:ad:60:d9:46:7b:89:73:d8:45:be:77:5f:73:
82:12:54:4c:3b:13:2c:2e:45:2d:8d:9b:72:94:85:9c:79:14:
e1:67:3b:e2:99:ec:02:05:3a:75:f3:a9:f8:89:4b:f8:2d:ea:
2f:3c:d6:b0:ef:52:5e:82:87:1a:31:91:55:e8:fa:2d:62:fe:
e2:13:a3:22:a8:c0:b4:2a:e4:dd:27:69:21:a2:b2:2a:83:00:
11:6c:9e:c4:e4:08:aa:81:b6:ec:04:bc:1b:38:ae:b4:60:9a:
0c:e2:fe:5d:f6:19:3e:1e:68:76:a5:8d:91:f3:64:47:d0:c2:
5c:37:c2:94:ba:bf:e2:5c:1d:3a:51:8a:4a:f5:6d:fd:42:49:
22:ba:5f:8f:80:b8:67:89:56:9c:35:f1:68:4b:8a:82:95:84:
1a:19:0b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-fra.rpki-client.org