Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FD20984C21311ECB0D549F2F1222468.roa
File: 4FD20984C21311ECB0D549F2F1222468.roa (raw, json)
Hash identifier: IW9WCLrF8Pj5A0L9tX21h4q4drSajCHsM+tWRMZ13Hc=
Subject key identifier: 7A:43:38:D0:3C:5C:10:ED:3E:D3:82:27:58:BC:4F:38:C5:7C:52:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1345
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FD20984C21311ECB0D549F2F1222468.roa
Signing time: Fri 22 Apr 2022 08:07:54 +0000
ROA not before: Fri 22 Apr 2022 08:07:50 +0000
ROA not after: Fri 30 Dec 2022 08:07:50 +0000
asID: 35916
IP address blocks: 156.248.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4933 (0x1345)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 08:07:50 2022 GMT
Not After : Dec 30 08:07:50 2022 GMT
Subject: CN=6262625a-df5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:be:43:ab:34:19:da:c5:be:16:39:c3:d4:d0:
61:70:15:f9:52:fc:ad:48:b3:9c:b7:47:5a:a4:40:
59:55:f5:5e:38:45:3f:6e:11:e3:b1:7f:db:60:30:
b8:29:f9:fe:48:dd:c8:3d:00:be:26:69:d1:44:a1:
f4:0e:5c:70:cd:2b:dd:5e:0a:cc:9e:13:d4:c8:17:
be:db:e0:a3:95:08:ad:1e:19:46:c7:8a:d9:6b:87:
c2:9a:7e:06:fd:70:c1:6b:2b:d0:3c:ca:8d:02:9a:
68:a8:ca:6a:03:b9:6b:a5:53:c0:11:fb:00:94:2f:
87:a0:ca:6a:27:a2:97:a6:d8:d2:93:87:49:89:2e:
9d:42:3b:ed:4c:2f:7a:fb:90:3a:c0:16:4b:36:0f:
db:86:49:7c:d6:89:74:b2:c3:d3:63:81:12:f5:f2:
b2:8c:8e:20:be:9d:6d:6e:db:cd:16:25:88:fc:5f:
6e:6a:b0:dc:6d:6f:b8:6c:1b:14:ed:d2:85:bc:e8:
a6:a8:81:71:f5:58:16:cb:c5:74:ad:55:21:e3:af:
f1:e1:19:a6:4f:11:f0:5b:92:45:1e:41:c5:9c:d3:
3d:f0:f9:dc:c7:24:7d:25:56:ec:af:7c:d8:45:f4:
7a:b0:d0:37:09:2a:40:da:18:e7:13:79:6a:4a:23:
4a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:43:38:D0:3C:5C:10:ED:3E:D3:82:27:58:BC:4F:38:C5:7C:52:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FD20984C21311ECB0D549F2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.2.0/24
Signature Algorithm: sha256WithRSAEncryption
18:a1:b7:77:ad:83:2a:d8:ce:d1:81:a5:8f:92:ec:d2:d7:21:
82:a4:ef:63:4f:b1:60:d3:f1:87:1f:ae:dd:d1:b9:63:1a:56:
c2:cb:21:3b:56:73:55:43:e9:48:e1:a9:25:32:bf:6a:53:1d:
0f:db:29:27:4c:14:8a:6e:c3:d2:ab:a0:59:41:60:d7:7a:d8:
73:89:84:8c:84:af:29:fb:6b:53:6a:da:44:81:7c:65:12:5b:
be:16:58:46:70:e7:d1:e5:0d:94:28:0f:7d:92:d8:9b:c0:02:
a2:d2:12:db:4f:66:06:10:c3:9a:bb:c0:e1:63:21:cb:e0:74:
70:e2:e3:56:66:a2:37:bf:f6:32:b0:1e:87:6c:36:9b:ab:6a:
24:b3:e4:60:fb:7b:11:99:5f:91:9e:40:61:af:af:aa:13:86:
b6:79:a5:16:42:d2:dc:d3:4f:b9:9e:b1:c5:f0:50:e0:6c:a6:
53:54:78:77:24:a1:d5:3f:75:ad:d8:bb:a0:66:4c:11:e9:51:
57:ab:29:a8:0f:0f:aa:48:66:a7:7d:ed:6c:d0:c7:a7:f6:86:
53:54:f1:71:39:80:c2:e4:07:48:37:79:e3:c0:5f:20:e0:f0:
80:77:ce:46:e2:bc:72:84:36:bf:73:23:8b:fb:18:b1:93:20:
14:4f:93:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-fra.rpki-client.org