Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BA33284396011ED83263AAFF1222468.roa
File: 3BA33284396011ED83263AAFF1222468.roa (raw, json)
Hash identifier: RJcz2FaTzOU+yCgLJUqg2dr+SZReaRGAzQr/VEOYUgc=
Subject key identifier: CB:70:2E:20:63:54:B9:3F:A4:B9:C6:2C:7F:36:2F:1A:39:36:4D:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 183A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BA33284396011ED83263AAFF1222468.roa
Signing time: Wed 21 Sep 2022 03:48:20 +0000
ROA not before: Wed 21 Sep 2022 03:48:16 +0000
ROA not after: Fri 30 Dec 2022 03:48:16 +0000
asID: 35916
IP address blocks: 156.251.120.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6202 (0x183a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 21 03:48:16 2022 GMT
Not After : Dec 30 03:48:16 2022 GMT
Subject: CN=632a8984-18e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:e5:e6:b5:17:b5:eb:30:51:bb:95:69:3a:
b7:d3:16:75:7a:57:0a:09:96:27:f6:3d:2e:e2:70:
a9:f6:ee:e4:77:ba:82:52:2b:db:ef:01:48:94:aa:
89:eb:e9:10:af:4a:e5:48:0a:ce:e0:c4:72:f0:4b:
ae:d2:d3:06:74:e3:28:17:6e:af:a3:50:06:6d:f7:
5c:c0:d4:87:63:d9:e7:2f:60:87:dd:39:69:e1:b4:
84:6a:65:b1:a7:e3:10:c0:84:6c:c9:bf:17:a1:bf:
0d:1a:ac:c7:8e:2f:cc:b1:88:c5:ec:7d:07:1e:88:
ea:ea:14:63:63:d3:f7:4e:bd:b2:cd:cf:8c:e2:f0:
95:4a:16:c1:85:5f:28:c0:a4:c9:2c:47:6e:89:9c:
0a:5d:3f:05:da:09:d3:78:50:9d:46:6e:0f:d6:e3:
2e:7f:a6:90:f4:94:37:de:84:b2:49:56:86:3d:9b:
08:b5:54:ac:b8:2a:50:4a:4e:1a:71:33:13:cd:09:
10:a8:3d:a8:1b:12:44:62:eb:0a:18:aa:1a:71:6d:
b3:c6:05:b3:28:b3:3c:9a:80:cb:75:af:af:d7:05:
05:a4:6e:67:fe:dc:0b:35:ad:d5:d4:c5:46:12:9c:
24:df:9a:e1:87:52:55:2a:35:77:76:64:aa:a4:dc:
67:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:70:2E:20:63:54:B9:3F:A4:B9:C6:2C:7F:36:2F:1A:39:36:4D:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BA33284396011ED83263AAFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.120.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:62:74:1c:a2:c0:17:a5:2b:67:3a:e0:a4:fe:33:55:27:f9:
6c:62:91:ca:51:29:fe:4a:01:56:91:85:eb:dd:5a:b0:f3:e7:
d1:77:68:73:0a:a4:fb:67:15:cd:a2:24:b4:74:10:16:a0:33:
ca:98:5c:e8:3f:6a:94:b3:ff:a7:d8:e7:1d:02:62:f2:c2:51:
46:9f:9a:51:29:63:dd:48:b9:e7:78:12:d0:29:26:b0:73:78:
94:3e:96:cc:f7:95:dc:7e:31:6b:58:56:e6:5b:82:6a:74:da:
c0:47:7a:98:19:bf:df:bb:5a:1e:f6:c2:c4:3c:57:18:96:50:
0e:e6:55:62:5f:b6:5f:49:4f:ae:86:ec:1a:fe:3c:0d:c1:22:
82:a0:6c:b4:ae:24:1b:7e:2b:40:57:59:03:79:43:6a:ce:5f:
02:e1:c9:4e:10:5e:14:a0:c3:70:4f:29:e0:36:11:8b:12:70:
3a:52:7b:1b:c6:aa:8b:7a:33:9f:fd:c3:68:81:40:0a:a0:6b:
bf:2a:7a:7e:00:ba:74:69:28:42:5a:15:03:e7:45:ed:20:f0:
12:e8:a4:02:e3:4b:59:31:ee:0d:e8:e4:ec:73:ff:9e:7e:76:
05:ec:15:0c:14:02:68:a3:89:b9:74:2b:e9:f7:69:4e:0f:f9:
97:14:b4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org