Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18D928841D0F11ED9581E582F1222468.roa
File: 18D928841D0F11ED9581E582F1222468.roa (raw, json)
Hash identifier: HI4YFA+VXfm9Q3EAKfn3s+L3Yxc178TTSZj7DtEU4bI=
Subject key identifier: 8E:29:B2:11:58:80:3A:FF:31:C9:80:99:3F:F4:15:16:60:6F:B8:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 16D1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18D928841D0F11ED9581E582F1222468.roa
Signing time: Tue 16 Aug 2022 02:57:00 +0000
ROA not before: Tue 16 Aug 2022 02:56:55 +0000
ROA not after: Sun 05 Feb 2023 02:56:55 +0000
asID: 210837
IP address blocks: 156.245.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5841 (0x16d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 16 02:56:55 2022 GMT
Not After : Feb 5 02:56:55 2023 GMT
Subject: CN=62fb077c-f0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:08:94:5e:bb:9f:f3:9b:6f:3c:d4:5e:99:
5b:4b:87:37:73:67:3d:38:d4:61:35:6e:5a:41:78:
a1:2c:fd:02:95:f7:99:c1:17:8a:5c:17:1f:d8:c0:
8c:ff:20:f5:37:94:52:8b:6c:1c:80:6a:a0:2b:45:
d7:fc:d6:65:c7:48:56:ae:1c:fd:71:cb:83:19:2b:
e1:2f:fa:bf:27:91:81:a0:dc:b4:20:1f:dc:7d:86:
1c:56:7a:d0:62:9f:a8:04:6a:bb:4e:c3:79:6a:07:
f6:26:7d:66:b1:94:bc:b6:19:fd:ea:b0:ce:3c:23:
04:51:b2:59:61:1f:f3:69:8b:a6:8f:92:5f:a4:47:
f1:f0:d7:ae:78:ab:08:18:30:9e:bb:9a:86:ed:4e:
c0:3c:ac:fa:a3:84:75:70:f8:13:1b:0e:7e:e1:35:
6f:37:1f:59:0c:21:26:56:f9:ae:d1:cb:c5:75:c9:
f0:e2:be:24:9c:ba:5f:87:31:bf:e2:bc:e1:2f:20:
09:0e:46:81:3d:74:0b:d2:14:7c:28:16:07:41:09:
39:91:fd:97:5f:fa:5d:6c:02:31:ec:8f:d2:14:19:
c4:f7:57:61:49:c9:f3:8c:6d:56:05:e7:e3:ea:f6:
41:a9:e7:c3:70:00:e2:18:cf:4e:8e:5d:c6:98:5a:
9d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:29:B2:11:58:80:3A:FF:31:C9:80:99:3F:F4:15:16:60:6F:B8:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18D928841D0F11ED9581E582F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.3.0/24
Signature Algorithm: sha256WithRSAEncryption
02:e4:90:8b:d1:45:6e:6a:d9:07:b2:06:73:30:92:58:ae:2c:
8f:bf:32:cd:ce:e3:d9:99:26:fa:80:b1:b1:d6:76:06:ba:be:
ad:b1:39:05:16:b6:e5:26:6c:e5:8b:7f:5f:65:c1:5e:34:1e:
91:ac:32:a6:ac:42:75:60:57:62:b0:65:75:87:d8:5f:90:95:
aa:05:bd:e1:56:cc:02:2e:c6:6a:e7:7d:64:50:4c:b4:4d:df:
44:ed:fe:6c:a5:c0:a7:12:ed:46:06:41:81:10:eb:57:50:b9:
63:7c:94:06:4a:e3:bf:a0:a9:c5:1f:6c:c5:4e:9f:34:e2:71:
1b:77:fa:c6:5e:fe:bc:dc:75:77:24:2f:df:60:81:e6:f2:b6:
9e:4a:a9:f5:5b:30:d3:1c:bd:08:28:1d:a3:23:90:e4:3a:9c:
74:84:28:90:7e:76:7e:a4:fc:d6:34:54:cc:33:6e:cb:0d:c2:
34:9f:af:f7:5d:7d:97:2b:a4:a1:0c:ab:3e:6f:cc:aa:6d:5e:
66:37:ec:90:62:08:7f:ce:d6:e9:5a:5b:92:5e:b6:f9:3f:fa:
05:ab:16:01:ec:91:60:7f:60:8b:5d:f0:de:df:03:e8:48:e7:
a0:ab:90:9f:5f:f6:e9:c7:f3:b5:14:47:b8:82:c3:46:8b:5e:
e6:b5:8b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-ams.rpki-client.org