Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49959828488411EC95802E32D8A014CE.roa
File: 49959828488411EC95802E32D8A014CE.roa (raw, json)
Hash identifier: OFKul4z6TfjR+GlaE11qjxUI7aDTYr1S18SugT7B2DE=
Subject key identifier: F7:10:08:CB:DF:A9:E1:85:C6:D5:E9:5B:8B:71:63:F9:1B:03:A3:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0CE5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49959828488411EC95802E32D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:29:15 +0000
ROA not before: Fri 19 Nov 2021 15:29:12 +0000
ROA not after: Sat 19 Nov 2022 15:29:12 +0000
asID: 139879
IP address blocks: 156.231.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3301 (0xce5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:29:12 2021 GMT
Not After : Nov 19 15:29:12 2022 GMT
Subject: CN=6196714b-8baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:dc:ac:12:8f:5f:e0:6d:53:25:d8:8e:23:
38:cc:40:67:bd:03:c2:ff:ac:e9:81:e6:5b:b3:d2:
db:49:db:8e:e1:72:fc:79:90:af:f8:c8:a3:c8:02:
58:79:72:80:92:af:5f:a9:b7:11:9d:63:dd:af:b3:
17:ae:b2:aa:1b:00:b5:11:6d:db:b9:b0:29:40:28:
99:b9:98:b6:47:6a:2d:7d:ee:d1:bc:57:f0:37:b9:
dc:6a:2a:43:e4:df:db:47:5f:e5:a9:0f:16:31:a8:
24:f2:17:a2:60:d5:67:bc:23:a6:a7:33:7d:4f:10:
10:c6:08:1f:ea:78:06:6c:1b:60:4b:62:c0:df:83:
3c:29:32:3b:ed:5a:44:0e:94:a4:8a:6b:de:cb:41:
04:e6:10:aa:96:e5:db:0e:f4:49:8f:d8:84:03:ae:
ba:60:94:be:0f:16:9b:44:ff:bf:1f:c0:8c:0b:fe:
2f:0f:6b:18:92:71:aa:bd:5d:f4:bd:1a:15:a5:b1:
71:1b:4d:17:85:1f:91:97:63:cc:44:57:d5:d4:7a:
86:6d:a2:35:d2:27:2d:23:ca:97:f1:18:cc:4f:e3:
6e:73:b9:5d:b7:dd:2e:fa:e6:22:dd:a2:a3:f4:75:
b0:76:6a:1c:9b:58:38:9c:43:a9:81:49:33:a7:c7:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:10:08:CB:DF:A9:E1:85:C6:D5:E9:5B:8B:71:63:F9:1B:03:A3:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49959828488411EC95802E32D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.140.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:7b:bc:2c:6c:80:4a:c2:3d:6b:0e:e1:81:30:4b:e9:d6:14:
83:b3:58:fe:23:d9:13:ea:77:6b:48:14:7f:c4:a3:08:a2:b1:
49:eb:cf:60:87:d8:54:e3:29:7d:4e:11:1f:a0:77:29:3c:8a:
92:94:71:b1:4d:e1:7d:e8:e6:96:46:44:33:7c:40:f8:14:90:
58:93:a8:af:d4:86:16:18:ea:77:a3:91:a9:69:6e:d4:a6:45:
fe:3a:40:c7:14:24:7f:59:85:17:46:6c:d2:1c:42:0d:ad:9d:
98:81:70:f9:c0:f6:3d:0f:72:09:6e:35:ea:58:84:50:f3:d5:
5a:eb:7c:75:8d:a2:25:b0:38:87:da:21:d6:3c:ed:31:55:fd:
db:85:b0:e4:90:89:58:28:67:99:8e:72:db:52:47:c1:9e:c3:
b2:f5:56:f7:64:72:52:3b:15:c1:c3:4d:66:dd:57:60:10:63:
58:2a:8e:7e:78:68:35:6f:0a:69:9f:02:62:f5:67:8f:5f:74:
7a:b9:15:cf:94:93:4a:b8:56:7e:72:7e:a0:3a:5b:6c:5a:8a:
e3:2e:2c:73:e3:9f:96:ab:55:46:90:68:77:7e:83:17:ae:22:
83:bd:46:29:99:47:e2:1a:68:b8:df:7d:fa:88:ab:4d:10:40:
3f:c6:d1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org