Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28C2197C541A11EC90316950D8A014CE.roa
File: 28C2197C541A11EC90316950D8A014CE.roa (raw, json)
Hash identifier: zD64cZ1C6VmbRZLA7ydY3eL/4ynAxMR9DHsJw/9xcRM=
Subject key identifier: 5E:FD:7A:90:32:F3:D4:67:6D:C7:76:D3:BA:E4:88:05:15:F6:0E:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 102D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28C2197C541A11EC90316950D8A014CE.roa
Signing time: Fri 03 Dec 2021 09:19:47 +0000
ROA not before: Fri 03 Dec 2021 09:19:43 +0000
ROA not after: Fri 30 Dec 2022 09:19:43 +0000
asID: 3561
IP address blocks: 156.248.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4141 (0x102d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 3 09:19:43 2021 GMT
Not After : Dec 30 09:19:43 2022 GMT
Subject: CN=61a9e133-7977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c8:be:db:f7:6a:65:6b:84:c2:64:7b:c9:b7:
37:43:76:17:00:fa:9f:a6:76:70:5d:8b:59:20:30:
18:ff:0a:52:57:84:93:7d:cc:4a:47:73:ff:37:c4:
3e:6f:19:ab:57:a6:99:09:20:ff:bd:00:38:36:99:
68:0f:49:63:78:b5:09:0f:3d:0e:6c:b9:20:2c:57:
eb:37:55:fa:00:b4:e1:ca:50:81:8d:65:22:c3:de:
03:43:0d:18:c3:1f:0c:00:94:57:85:b6:05:26:60:
d5:5d:a0:fa:e1:01:64:ad:af:8a:d0:1d:14:23:69:
d6:38:e2:ab:cb:5a:77:56:a0:d9:b7:c4:50:e6:1b:
15:be:b4:2b:6d:6e:03:5c:29:c8:e9:f1:02:dc:4c:
eb:9e:f7:cc:0d:a4:e3:45:90:d7:5e:6e:5b:52:64:
8e:73:3d:96:fe:bd:25:1b:b0:ac:d4:b7:a7:09:a3:
87:eb:e7:43:ba:6d:dc:d8:98:41:c9:27:de:a6:e3:
af:1c:47:b7:c6:9c:d7:4b:31:93:49:e4:1a:ed:75:
9f:f5:9f:5f:7a:62:52:23:8a:00:88:f3:1e:2a:ea:
b6:88:be:b8:17:f2:82:d5:f8:d6:e2:a6:99:8a:0d:
69:1e:5b:fb:74:a7:54:b2:c1:e0:39:39:00:e2:47:
b4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FD:7A:90:32:F3:D4:67:6D:C7:76:D3:BA:E4:88:05:15:F6:0E:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28C2197C541A11EC90316950D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.88.0/22
Signature Algorithm: sha256WithRSAEncryption
75:8b:62:f0:53:a3:5e:06:ef:0c:e8:7c:4b:b4:90:19:4f:0b:
f8:56:54:bc:07:cf:c1:8b:37:f4:50:e3:28:56:bf:79:c7:ac:
19:8b:23:a0:74:8b:23:15:82:73:d7:03:1c:a2:9f:a5:46:c2:
db:be:6d:5c:71:80:67:e4:3e:88:1f:1e:02:83:d4:d8:f4:e9:
c6:2d:da:2f:b5:42:61:39:84:07:6d:85:72:8d:e5:78:50:a9:
7b:88:f7:dc:82:c4:a9:07:be:66:72:c3:b6:1a:36:c2:80:ce:
3d:5f:39:a7:24:22:f3:32:7c:61:0a:ca:40:f3:71:60:76:f2:
5c:89:f9:21:4f:98:a2:9e:df:30:71:9b:4a:94:28:b1:25:01:
f3:0c:19:bc:89:94:a6:af:6a:57:47:4a:e7:37:4f:5b:29:88:
f1:16:fd:00:dd:c5:86:1a:58:00:1c:7d:68:ad:3b:5c:da:51:
f7:1d:63:7d:4e:e6:d7:ec:1d:0e:64:51:9a:3c:d4:67:64:6c:
1c:d5:83:a7:8a:84:a5:52:9c:2b:6e:4b:22:94:da:f3:f9:29:
19:ff:5c:da:e3:89:b4:ad:f1:4d:62:37:16:68:b9:38:9d:65:
4f:7e:0d:c7:19:2c:c2:26:a5:7a:b8:96:73:39:d6:64:96:2d:
8e:97:a8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-fra.rpki-client.org