Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/521CBD8CC2C411EBB2FC295CF8AEA228.roa
File: 521CBD8CC2C411EBB2FC295CF8AEA228.roa (raw, json)
Hash identifier: Zi3yg/Je84I0YRFPTE0skqkW1TeebhJnNJub/EFJ2cA=
Subject key identifier: B3:77:69:7F:31:71:B7:CA:79:46:6B:06:E0:4E:15:DA:AF:0C:DB:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 062C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/521CBD8CC2C411EBB2FC295CF8AEA228.roa
Signing time: Tue 01 Jun 2021 10:30:01 +0000
ROA not before: Tue 01 Jun 2021 10:29:56 +0000
ROA not after: Sat 09 Jul 2022 10:29:56 +0000
asID: 397630
IP address blocks: 156.225.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1580 (0x62c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 1 10:29:56 2021 GMT
Not After : Jul 9 10:29:56 2022 GMT
Subject: CN=60b60c29-7113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:80:8a:e6:d1:90:2a:ff:b6:08:e3:13:c5:e7:
93:86:ee:c2:77:8f:18:6c:d5:42:e9:5b:ea:d8:9d:
fc:5d:93:cb:f1:d3:50:ff:ce:ab:81:9e:af:bb:96:
fe:37:a5:00:56:47:c3:44:ef:be:b9:06:cf:6d:16:
a7:9a:7c:f0:64:0d:8a:c9:c7:2d:e1:a5:86:32:2e:
0d:1a:e8:fb:c0:b6:a2:7f:a3:af:2c:6f:29:25:07:
99:56:19:45:b4:1b:1e:f3:e8:bb:b6:5d:44:40:97:
2d:bd:40:f2:4f:4d:43:eb:55:ea:7f:bb:00:16:d0:
d4:83:8d:3b:0f:f3:83:c3:f1:a8:59:32:30:c9:73:
69:2f:c2:6a:a9:c3:1d:79:3c:f3:60:ed:7d:cf:e6:
8e:d8:54:42:00:f2:78:02:47:78:08:23:88:56:d3:
b2:3b:92:bb:d1:df:b6:59:61:08:e0:98:a9:d4:32:
72:64:89:ff:73:2d:7a:a5:be:7a:9b:f6:86:a3:88:
9a:dc:1c:17:15:30:c4:79:89:21:31:33:80:24:2f:
ad:fe:ff:a6:d4:9e:b3:7d:51:3c:17:10:a9:00:18:
34:f4:36:d5:ac:db:fa:08:59:fe:79:31:d3:a8:79:
e6:73:3b:62:50:6f:cd:3f:33:0b:47:c0:2d:5b:a3:
fa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:77:69:7F:31:71:B7:CA:79:46:6B:06:E0:4E:15:DA:AF:0C:DB:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/521CBD8CC2C411EBB2FC295CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.8.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:6d:22:db:4f:2c:95:16:75:c2:49:65:56:5f:80:a1:88:f3:
a1:b0:fc:e2:77:50:34:82:54:07:5a:c0:f3:bb:33:82:ff:42:
08:3c:7c:a5:28:66:bf:37:6c:b6:3f:b6:b7:04:72:3f:84:a3:
0c:56:cf:dd:10:12:6f:6b:21:e3:b3:95:5e:17:2c:20:b9:4e:
71:c7:8a:52:68:95:2b:af:b4:d8:59:2d:32:e9:3f:b1:59:3d:
37:b3:e3:db:9a:8f:fd:01:9c:9f:b6:11:a3:a8:03:7e:83:97:
73:11:77:96:01:41:d6:06:11:05:72:a5:a4:e6:1f:02:76:38:
85:3a:b2:ac:cc:f7:98:76:6c:6b:93:4d:f5:1e:f8:00:44:29:
16:c1:0f:63:c8:ba:03:34:d0:19:4f:e0:88:87:84:7d:2c:34:
45:c8:e7:9f:b5:83:a5:84:06:e4:5f:e7:c3:03:3a:31:bb:8e:
8a:e6:9b:2a:05:b9:b6:91:fe:b1:4e:6e:52:84:7a:28:38:cf:
06:0d:6a:c8:97:f4:b6:6f:c8:52:5b:9e:3f:e1:b1:63:af:06:
23:c3:8a:1a:bf:77:35:be:5d:47:50:e4:e2:e7:85:a6:75:21:
88:b9:84:52:7d:ee:b1:a0:98:42:47:f0:ba:ba:16:57:b0:e5:
2a:58:00:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-fra.rpki-client.org