Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43AE55B072C511ECB84502875A40D577.roa
File: 43AE55B072C511ECB84502875A40D577.roa (raw, json)
Hash identifier: xIC8fLXzZpwoJ3Vdh0g21DPYLNmQ7JM7BXKs0KewFZg=
Subject key identifier: 0C:36:78:57:72:B5:D7:53:F8:61:4E:56:BD:59:51:F8:AE:3F:CE:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 114E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43AE55B072C511ECB84502875A40D577.roa
Signing time: Tue 11 Jan 2022 10:00:11 +0000
ROA not before: Tue 11 Jan 2022 10:00:07 +0000
ROA not after: Tue 31 Jan 2023 10:00:07 +0000
asID: 138965
IP address blocks: 156.236.88.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4430 (0x114e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 11 10:00:07 2022 GMT
Not After : Jan 31 10:00:07 2023 GMT
Subject: CN=61dd552b-2630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ea:6e:e1:d2:4e:d9:5a:18:f7:66:8a:e6:e1:
a0:68:de:ad:bd:22:85:e6:89:94:e1:20:59:09:10:
93:44:34:7e:68:5c:7e:9b:ab:40:e9:82:85:bb:ff:
0c:9b:84:0d:5e:79:bb:7d:ca:d6:ad:1b:04:82:54:
97:20:62:6f:31:47:8d:fc:8a:fb:2b:ee:90:8e:35:
ac:bf:b8:05:4a:de:6d:60:01:72:a4:fb:fc:36:d2:
ed:6a:bf:35:31:14:f4:6b:17:ac:f2:68:a8:d4:1f:
a9:4d:a0:51:6d:ad:31:9f:f3:85:42:7d:1b:04:a1:
2f:62:39:40:9c:cf:3e:14:f7:17:ba:e6:c1:23:25:
5d:4d:8b:3c:d5:b5:e7:48:d4:cc:67:0f:3a:7f:f1:
7e:30:7d:35:ee:89:9a:e4:f9:b0:63:75:fd:ad:8d:
16:e7:bf:ee:38:39:75:af:b2:5d:05:be:a2:3f:4a:
c8:e9:62:7a:3a:73:64:81:72:f6:ff:93:d7:fd:8a:
1c:c9:54:5b:03:9e:fb:62:c9:61:9d:d1:fc:95:92:
36:a3:94:40:a6:fe:9a:4f:89:af:80:89:d2:46:d2:
f1:cc:e3:e7:77:ff:03:0c:71:08:15:1e:1b:a8:48:
48:51:20:0a:5c:94:ae:15:2e:c9:9b:7d:83:06:89:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:36:78:57:72:B5:D7:53:F8:61:4E:56:BD:59:51:F8:AE:3F:CE:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43AE55B072C511ECB84502875A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.88.0/21
Signature Algorithm: sha256WithRSAEncryption
36:15:68:c3:18:f9:ab:c5:f1:ca:b6:2b:46:e4:34:6e:71:6d:
f2:59:6d:23:a4:42:87:06:dc:71:1a:b0:76:da:c8:e3:9e:a2:
95:55:2c:8d:e7:05:e9:16:1a:3a:c4:76:6c:3b:23:95:e2:98:
ea:3d:ed:72:ab:61:96:b6:4b:dd:7b:6d:31:d7:b8:62:d6:28:
ac:8d:0e:90:08:49:5f:60:9e:ce:c0:67:ed:3a:4e:3b:c8:43:
ca:94:46:18:68:db:98:5f:47:49:9d:3e:3e:41:81:f7:25:3c:
0f:35:4b:f2:b4:5d:65:fa:c4:62:97:6f:f0:e9:cb:5c:c9:e9:
4d:d6:00:bd:c9:9b:00:63:fe:d8:0b:a1:f9:72:a7:c1:17:89:
d4:cc:8d:6c:0d:a6:ba:0d:8d:78:69:09:9c:03:dd:b2:ec:7f:
07:1c:8a:e9:b3:ee:85:b1:b2:7d:9d:48:2a:45:85:2a:3e:ea:
bb:76:ff:28:04:5b:8b:48:bb:a0:77:8f:3c:e9:98:9e:aa:c8:
58:a1:f9:f7:75:a4:7a:bb:13:52:b6:8d:a0:a9:07:e9:34:4f:
7c:61:80:17:54:ff:54:f1:bc:f2:a2:34:ba:3d:81:c9:0a:e5:
87:81:b8:a2:e0:39:31:29:6d:e7:f2:a7:5d:df:ef:39:5c:da:
56:aa:55:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org