Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BCCBE28571F11EBACCDE653F8AEA228.roa
File: 1BCCBE28571F11EBACCDE653F8AEA228.roa (raw, json)
Hash identifier: NbuJC2z2a+x/mdKzszBvYeVOMtbd+Dv41hMgG9cJAWQ=
Subject key identifier: 4B:DE:6B:90:8D:83:12:F4:78:29:17:E1:94:53:1F:F9:FF:5F:14:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0457
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BCCBE28571F11EBACCDE653F8AEA228.roa
Signing time: Fri 15 Jan 2021 10:47:49 +0000
ROA not before: Fri 15 Jan 2021 10:47:44 +0000
ROA not after: Fri 15 Apr 2022 10:47:44 +0000
asID: 399077
IP address blocks: 156.248.72.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1111 (0x457)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 15 10:47:44 2021 GMT
Not After : Apr 15 10:47:44 2022 GMT
Subject: CN=600172d5-1351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9d:19:c4:bc:27:35:0c:f8:99:54:26:76:d3:
64:12:0d:f8:bb:81:9a:02:50:bb:aa:a5:86:20:53:
06:22:d6:dc:ef:36:d6:26:f4:6a:99:52:25:d0:a9:
4e:eb:83:be:ed:c3:5b:82:c4:6a:c9:5d:2e:59:db:
8a:c9:f1:5b:d6:92:0f:a0:27:c1:a6:ff:e3:10:91:
ae:52:77:56:d5:ee:23:03:e1:e7:3c:0f:c6:56:7c:
88:ee:22:9e:af:07:69:8a:f8:fa:fa:06:b6:3d:cb:
a7:b1:b4:28:25:10:4b:11:41:1a:54:6d:9d:80:42:
81:2e:48:f9:f7:03:2a:80:6e:25:40:be:4f:b1:af:
b6:64:2b:56:d8:1c:f1:fe:ed:be:55:be:b1:87:b3:
03:d7:bc:b6:85:ed:c6:98:f9:7d:1a:c9:96:6d:d2:
d6:ac:08:26:b6:86:ea:99:5e:e2:05:f9:72:8a:ee:
ef:56:7b:3d:7c:87:4d:b8:1a:f2:7c:f9:8f:80:40:
e6:f8:13:f1:18:0d:8b:a3:c6:35:f6:e5:d7:f3:e7:
ec:c8:93:c7:c0:f6:02:b0:5a:9f:0d:0d:7c:56:0a:
ed:dc:c6:42:94:f6:eb:64:97:fb:41:2c:ce:97:79:
5f:31:de:fd:d1:91:39:a1:86:9d:54:0b:0e:96:90:
6c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DE:6B:90:8D:83:12:F4:78:29:17:E1:94:53:1F:F9:FF:5F:14:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BCCBE28571F11EBACCDE653F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.72.0/21
Signature Algorithm: sha256WithRSAEncryption
15:22:df:14:b5:0a:72:f1:49:92:10:3f:ba:f9:99:64:4c:20:
c4:54:93:27:18:08:c9:4d:00:2f:9a:cb:c3:45:1b:2a:56:20:
dd:bc:e2:51:60:52:ce:e1:f4:c9:99:76:78:4c:d3:2c:60:eb:
f8:53:70:ad:5b:0b:a0:2f:62:38:b3:d3:44:66:35:70:68:dd:
ed:0b:11:a3:6e:6e:54:27:18:33:68:61:0e:fb:32:bb:e0:e7:
f0:3e:54:ac:a7:86:af:6d:07:33:1d:9c:ab:32:05:5e:b6:3c:
56:91:92:68:01:38:52:ab:fb:05:aa:61:1f:17:95:e6:18:8c:
2e:5e:dd:55:ce:f5:53:01:e8:e3:48:c3:aa:b0:79:5a:a6:8b:
55:7c:ff:71:c8:d8:5c:b2:32:bd:99:ca:92:3c:db:a9:04:0d:
ef:a0:1c:d2:49:3b:fa:18:2f:84:4f:ae:00:ea:34:97:22:47:
59:17:c5:bb:8b:a0:d5:71:82:f7:8b:89:a1:a4:9d:e2:5c:31:
98:e5:87:f8:13:09:06:ed:74:56:9b:e4:cc:69:69:1f:18:03:
f7:f5:7a:c8:c9:02:2c:e0:64:d1:c0:2a:1a:c2:d4:81:20:06:
21:77:8e:61:c4:31:bb:a6:9b:1a:ba:f4:19:26:d4:7e:fa:b0:
a1:fa:87:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-fra.rpki-client.org