Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3540FD70488611ECBDE75336D8A014CE.roa
File: 3540FD70488611ECBDE75336D8A014CE.roa (raw, json)
Hash identifier: wB1mTZl6bbeMzE2S0LFtSnLXhSVWBCwmd9AfYB8ehQY=
Subject key identifier: 3E:FF:26:74:53:8C:E4:3B:B3:8E:C7:2D:4B:0B:6C:A3:E2:AB:3C:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D55
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3540FD70488611ECBDE75336D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:43:00 +0000
ROA not before: Fri 19 Nov 2021 15:42:55 +0000
ROA not after: Sat 19 Nov 2022 15:42:55 +0000
asID: 139879
IP address blocks: 156.231.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3413 (0xd55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:42:55 2021 GMT
Not After : Nov 19 15:42:55 2022 GMT
Subject: CN=61967484-8868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c4:8c:fb:01:7b:66:46:23:4a:e0:9d:c3:ee:
96:9c:1b:03:cb:59:f9:e4:a5:9d:a8:f3:6d:ea:5d:
03:9c:c3:f2:83:0b:d5:14:7d:85:1f:db:64:20:58:
da:a6:0a:03:50:5a:0f:7d:1f:de:6b:d8:ed:fd:35:
22:8e:96:ef:4a:28:53:d9:b7:07:f2:b6:0a:2a:c5:
51:2b:99:ed:d3:53:34:c6:df:9e:94:b7:ba:e6:ab:
00:6f:c7:99:ae:65:bf:89:21:56:80:6a:e6:7e:10:
d4:d7:80:9a:ed:17:b0:7a:f6:0a:9a:14:cd:6c:6b:
b8:05:84:37:32:be:c2:fa:d1:04:93:14:76:79:de:
42:15:f6:a0:cf:f1:4f:f2:e7:91:4a:3c:6d:94:01:
6a:a0:90:8f:67:d4:91:5f:c5:c0:a9:fe:1a:ec:b0:
ed:de:98:cb:eb:39:42:91:e6:9f:12:7b:b3:db:0f:
d9:56:c3:1b:f9:86:67:7d:6a:8f:1b:30:03:a2:6a:
0e:03:5d:ae:de:93:ce:cb:d8:03:62:d6:17:11:f9:
c2:cb:99:76:c3:27:18:07:90:4b:43:8c:5a:75:02:
99:49:fb:5d:f3:e5:4d:8a:6b:9f:03:d1:a0:5a:09:
37:d4:20:2d:9c:79:cf:4a:04:e0:8f:7c:88:2a:4d:
62:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FF:26:74:53:8C:E4:3B:B3:8E:C7:2D:4B:0B:6C:A3:E2:AB:3C:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3540FD70488611ECBDE75336D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.159.0/24
Signature Algorithm: sha256WithRSAEncryption
85:0d:30:ea:50:5c:d2:e3:6e:59:33:77:ab:92:db:f3:3a:00:
fe:a5:7f:bf:81:4f:e2:88:0c:a1:9c:80:3e:ad:73:c7:3a:09:
f9:5d:d8:c9:63:3d:5c:83:03:7e:ad:c9:a2:4a:85:ee:eb:7d:
e5:ce:c3:36:2e:47:3b:66:47:46:69:e3:d8:54:83:21:55:b2:
7c:6c:8f:f1:83:01:ba:54:36:c2:cc:46:b4:63:40:e5:ba:49:
96:8a:b7:fa:13:e4:6f:c1:ca:22:dd:e5:21:3f:84:fc:7a:f1:
e6:bb:64:71:b0:c9:27:e2:7d:98:a0:3f:32:3a:7e:86:0c:9d:
e5:8a:63:f7:64:bb:97:ef:62:50:06:11:6f:c4:13:f4:fb:05:
12:bc:a7:5d:2c:43:f2:1a:cf:40:9b:10:d8:32:14:df:78:93:
d9:1c:27:f2:42:90:41:74:ca:36:1b:b7:4a:9c:e2:95:12:eb:
14:01:fa:b5:c0:6f:ae:7f:d1:e1:dc:d1:8a:50:f3:43:ae:29:
83:22:f3:73:99:c6:bc:5f:84:fb:1a:62:94:38:54:1f:15:b5:
dd:64:5b:85:95:4a:e7:a5:6b:5c:16:2e:9f:07:03:71:1a:61:
23:02:2c:68:1c:07:87:2f:11:cb:6c:bb:63:d4:32:b4:38:73:
14:6f:24:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org