Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40C25EA2F1F711EDBACC55694AD9E6FC.roa
File: 40C25EA2F1F711EDBACC55694AD9E6FC.roa (raw, json)
Hash identifier: 8aJelbtMCOwpxpF73pQ+g20oeLagQQsNesBBPlX96PU=
Subject key identifier: 27:01:5B:18:2F:EE:15:BA:50:A7:BF:82:F5:53:7C:D9:34:02:F0:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 24EC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40C25EA2F1F711EDBACC55694AD9E6FC.roa
Signing time: Sun 14 May 2023 01:32:56 +0000
ROA not before: Sun 14 May 2023 01:32:53 +0000
ROA not after: Thu 15 Jun 2023 01:32:53 +0000
asID: 138995
IP address blocks: 156.227.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9452 (0x24ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 14 01:32:53 2023 GMT
Not After : Jun 15 01:32:53 2023 GMT
Subject: CN=64603a48-044c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:05:a9:4b:81:a1:da:67:fb:d8:72:f3:db:
82:1d:13:77:a5:33:08:18:2b:35:28:f5:b5:f1:2d:
91:53:5c:40:bd:5d:5d:1d:e1:ac:4c:e9:0a:f4:9a:
d3:34:47:b8:10:1a:c8:de:94:44:e7:87:08:7b:63:
f1:be:a4:f6:3c:45:d4:0c:2c:d6:13:02:d9:d6:3e:
12:56:5b:09:dc:3e:b8:68:f0:37:67:d3:2b:3d:86:
14:7c:60:e6:e8:a7:bc:de:c9:94:8e:5b:03:e1:67:
0e:08:76:41:92:1e:85:c7:9f:6d:e1:9c:8c:b7:8a:
e1:b4:b8:52:b3:16:92:a5:cd:46:ec:ff:d6:d0:87:
f6:81:46:bb:4c:df:5d:dc:88:95:d0:22:f9:4c:f1:
45:f5:b7:94:bb:1d:d9:ab:8c:ea:92:a8:32:8c:f2:
f8:a8:79:47:1e:d5:5a:e2:86:8a:34:c3:3a:e0:bf:
cd:fc:67:0a:22:d1:69:1f:ed:0c:2a:99:20:0f:49:
1a:63:a9:f6:c3:81:35:78:ac:3e:bb:67:35:3b:87:
87:70:5d:79:97:03:be:c1:4a:66:a9:0e:8b:6e:fe:
98:61:df:b4:dd:e0:79:ac:82:4b:2e:13:1e:48:a2:
b8:03:1b:c9:3f:6f:0d:bc:69:e9:18:20:3d:93:57:
00:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:01:5B:18:2F:EE:15:BA:50:A7:BF:82:F5:53:7C:D9:34:02:F0:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40C25EA2F1F711EDBACC55694AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.31.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:fc:b4:34:d2:eb:3a:a8:90:90:a0:7a:1e:6d:4b:cc:26:8d:
fc:6f:11:9a:ae:43:12:d7:58:f4:9b:b0:b4:08:3d:2f:c9:2e:
0b:a4:d3:b7:3a:0d:b3:e8:b8:98:49:8e:e2:fd:a2:de:ea:37:
40:3c:a9:a3:48:d2:71:14:01:32:24:01:42:07:64:10:fe:4e:
0c:ef:c7:6b:a1:a2:ae:2e:0d:e2:07:c4:44:e4:38:71:07:08:
da:c0:c8:46:dc:a1:59:46:d4:b1:fd:e2:98:3a:dc:61:34:46:
18:18:bc:12:23:bb:c4:82:f3:28:fc:48:3d:bb:84:b2:57:73:
ed:6a:bd:80:86:79:b7:52:d0:d0:8d:ba:ef:6c:21:3f:ef:66:
31:c5:5c:4a:4b:cb:50:ae:01:11:3c:25:aa:b1:7a:6d:18:f8:
96:9b:a6:19:95:7a:80:74:62:da:1b:5a:b3:e7:44:ae:52:d2:
af:94:ec:89:10:ff:a6:21:81:f7:9c:85:95:1b:6f:ce:d6:23:
0a:78:e3:04:38:96:1e:88:1a:0c:57:0d:ed:4c:d4:69:cb:87:
8f:32:82:fc:4c:60:cf:27:99:22:bd:16:b2:6f:ba:97:6b:98:
42:15:41:ed:0f:22:01:d8:46:c6:94:74:e1:b4:07:11:d1:13:
58:46:15:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org