Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/364A17CCC21311ECBFFD05F2F1222468.roa
File: 364A17CCC21311ECBFFD05F2F1222468.roa (raw, json)
Hash identifier: kVoERj5fSCC06vADVjHYxxZgtM77NWI0/VjY5bUCVbE=
Subject key identifier: E4:89:DD:88:54:36:90:BE:6A:77:CB:C8:5E:21:27:B5:60:FB:97:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1341
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/364A17CCC21311ECBFFD05F2F1222468.roa
Signing time: Fri 22 Apr 2022 08:07:11 +0000
ROA not before: Fri 22 Apr 2022 08:07:08 +0000
ROA not after: Fri 30 Dec 2022 08:07:08 +0000
asID: 35916
IP address blocks: 156.248.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4929 (0x1341)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 08:07:08 2022 GMT
Not After : Dec 30 08:07:08 2022 GMT
Subject: CN=6262622f-6648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:13:d4:b6:ca:87:d2:b1:89:08:b9:ed:f0:9a:
d0:8f:8a:d5:67:6b:5f:3e:19:16:66:4c:82:17:ae:
13:58:76:80:a0:b8:e8:58:e2:8b:e1:70:b8:81:13:
d1:1f:0c:86:b0:04:32:61:f2:21:a5:15:05:91:2a:
be:04:0e:e4:cb:7d:da:5f:39:ff:39:57:3b:75:41:
b0:a4:b7:b5:bd:b9:18:a2:15:ce:e6:a3:d2:10:8f:
18:28:d5:39:e8:31:21:ea:76:81:7b:13:33:bd:dc:
43:b9:d3:0c:ed:5f:ae:32:27:12:f0:44:8b:f5:1d:
dc:c0:58:a6:9c:55:19:c4:fd:33:ab:56:78:56:14:
68:c0:ab:1f:6f:d8:2d:42:7d:ec:28:74:f4:18:8e:
e4:a8:94:38:09:17:ff:74:e2:b6:6d:b0:d4:07:9b:
37:15:73:d0:51:5e:06:51:69:ef:d9:51:78:24:4d:
31:ff:bc:03:5e:18:ba:f8:47:1e:0e:aa:a1:6c:5b:
40:da:97:9a:0c:ac:e9:59:a5:c0:a9:23:17:a1:5e:
a9:aa:20:bd:6d:27:15:1d:b8:54:ce:e7:59:8f:60:
9f:ce:fc:1f:a9:f2:a4:d7:e4:7a:2d:88:d0:d6:a9:
cb:64:d9:c8:e0:91:2d:8e:71:e6:a8:e9:d6:ff:04:
09:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:89:DD:88:54:36:90:BE:6A:77:CB:C8:5E:21:27:B5:60:FB:97:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/364A17CCC21311ECBFFD05F2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.0.0/24
Signature Algorithm: sha256WithRSAEncryption
61:5d:7a:69:0e:d2:ce:e3:18:ce:c8:ab:07:03:00:30:bc:b6:
4e:ab:21:ff:bd:2e:da:18:be:ab:fb:f4:a1:70:23:e4:6d:97:
2e:d5:b4:ce:e6:40:e4:a1:92:9a:0b:06:f3:16:c3:8c:a2:87:
c5:56:d9:d2:86:c3:7f:d9:62:b4:21:67:be:4b:3d:3b:23:ad:
58:87:d8:92:40:79:ff:1a:3f:e9:ea:38:9e:16:26:bf:f7:3d:
d1:eb:c9:99:83:24:10:8a:00:b3:2b:b2:52:41:cf:06:e7:a2:
4e:7c:e5:1d:a8:71:8c:e5:88:5f:96:86:af:d4:1a:92:cf:af:
1d:9f:be:e2:5a:73:12:d2:9a:19:19:d2:a2:5b:32:07:8e:1a:
09:b2:c4:62:a6:b1:24:3b:af:f0:d8:2e:65:0d:c3:63:59:70:
cb:5c:52:0b:17:b4:c9:fc:7f:f6:6f:12:bc:82:60:bc:79:7d:
36:10:fa:67:36:23:88:03:81:9e:20:d3:86:2d:1c:9d:aa:bf:
05:d7:8b:79:72:ef:bd:47:2b:82:6c:a1:b5:a5:7b:9c:18:69:
f4:be:2a:c2:da:4b:d7:ef:2d:58:6b:cc:d6:0c:3d:1f:1e:01:
c5:96:da:42:49:a5:5c:c5:0d:6d:c0:7b:9d:d8:32:29:c7:66:
1c:fd:a1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-fra.rpki-client.org