Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40619F78C21311EC92D119F2F1222468.roa
File: 40619F78C21311EC92D119F2F1222468.roa (raw, json)
Hash identifier: 0mledqVEXqL28JyPUgpCUba5VqsW8UwHXNOJLdsZk+M=
Subject key identifier: 5E:E3:5B:76:85:2F:2F:2E:43:60:6C:65:0A:31:37:CE:82:C7:50:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1343
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40619F78C21311EC92D119F2F1222468.roa
Signing time: Fri 22 Apr 2022 08:07:28 +0000
ROA not before: Fri 22 Apr 2022 08:07:25 +0000
ROA not after: Fri 30 Dec 2022 08:07:25 +0000
asID: 35916
IP address blocks: 156.248.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4931 (0x1343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 08:07:25 2022 GMT
Not After : Dec 30 08:07:25 2022 GMT
Subject: CN=62626240-8fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c2:64:e9:6b:b1:7a:27:5e:e2:3c:48:9d:68:
e9:76:b1:d7:ab:de:a9:62:15:d7:53:24:05:08:7e:
b0:6c:a4:60:44:af:a8:43:c1:ff:f6:5c:cd:a6:66:
6b:dc:89:e8:3c:4e:92:94:94:66:1b:ce:d2:d4:d2:
96:da:b2:20:6f:5b:b0:0c:92:34:c4:59:28:a6:e3:
d8:50:18:bd:fb:84:51:a7:74:2f:6b:89:60:11:09:
f7:60:c9:31:10:09:f7:4a:d9:a5:42:18:f1:9e:7a:
9b:6a:b3:f9:d5:5d:ab:92:b4:f1:88:82:eb:ca:5d:
e1:6e:9d:bc:cb:27:62:b6:51:4f:f5:a7:b2:33:eb:
40:56:0e:1b:e5:3f:20:d1:1f:ff:0e:03:88:2d:26:
3e:c6:d5:c8:c0:96:bb:b2:8b:41:6e:59:44:ba:c9:
e0:7a:b5:0e:32:36:c1:1d:4a:4b:76:72:cc:fa:c0:
b1:92:89:1c:7f:5a:dd:5f:ea:27:3d:80:9d:51:c4:
54:bf:7f:4d:95:7b:00:fd:bb:0a:2c:c1:01:6b:ce:
82:8a:b1:89:76:f4:12:64:b2:98:d9:33:6a:02:04:
4e:3e:0a:6f:27:d8:f1:37:b9:f6:20:2a:7a:28:d6:
e7:3d:83:32:c0:38:a7:c7:93:ba:b0:f9:f3:68:ee:
1e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E3:5B:76:85:2F:2F:2E:43:60:6C:65:0A:31:37:CE:82:C7:50:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40619F78C21311EC92D119F2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.1.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:c3:b8:ba:85:67:53:1d:ca:76:39:c1:07:be:4b:cb:ea:ac:
ed:e4:2d:36:d9:6f:65:90:86:6b:63:f4:fd:e2:d9:3c:df:34:
cc:73:ea:38:78:95:b9:e4:04:d9:bf:93:8d:de:75:56:65:df:
93:d2:b3:7e:c0:46:c5:e6:a0:3b:22:be:9f:fd:19:2d:b4:7f:
e9:3a:79:9c:89:e9:a5:da:d6:98:88:a4:4d:55:8e:89:42:6a:
2a:a0:8e:8e:e4:d9:a0:5e:8c:96:d6:3e:86:0d:8e:b5:e9:80:
f3:9c:63:87:d9:2d:56:61:2a:3b:ec:73:2f:dd:70:72:1c:e5:
34:e2:9b:a1:2b:e0:7b:25:d5:c7:d4:a7:5a:3d:e7:1c:83:0c:
25:51:73:5f:c6:26:17:a1:85:27:4c:eb:08:13:b6:26:25:9b:
83:b9:67:6f:90:ff:65:3f:8b:c0:99:82:77:ed:7b:54:ac:ec:
b4:3b:53:92:40:27:02:6f:4a:6e:8b:12:6b:91:60:d5:95:0d:
64:5a:d7:ec:cc:c3:aa:c5:2e:04:c3:32:92:18:6a:4b:68:2a:
80:57:86:d7:34:53:65:d2:4e:81:f9:93:c9:89:67:6a:0b:03:
6c:60:3f:b2:6a:6e:a8:ee:05:a6:ba:9f:f1:ab:18:17:17:51:
33:40:2d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org