Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5948220C74BA11EB8C0D7D25F8AEA228.roa
File: 5948220C74BA11EB8C0D7D25F8AEA228.roa (raw, json)
Hash identifier: Dpfh9GpfL4DWcPDZQU1ttUSqBjx+8sRWh86SA28Lf6k=
Subject key identifier: 33:BA:FA:92:0F:47:F4:65:5C:A1:A8:C0:6A:62:2B:43:66:9A:14:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 04D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5948220C74BA11EB8C0D7D25F8AEA228.roa
Signing time: Mon 22 Feb 2021 03:02:08 +0000
ROA not before: Mon 22 Feb 2021 03:02:01 +0000
ROA not after: Sun 22 May 2022 03:02:01 +0000
asID: 136907
IP address blocks: 156.227.22.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1241 (0x4d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 22 03:02:01 2021 GMT
Not After : May 22 03:02:01 2022 GMT
Subject: CN=60331eb0-00f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:88:41:fa:7a:c7:f9:68:7b:47:dd:fb:3a:
fb:da:74:2c:87:d7:f8:cd:5c:da:5a:74:ed:fa:64:
80:21:bd:e6:2d:b7:a5:8a:76:35:27:a0:2b:b8:ec:
ad:a1:56:03:8f:50:9c:58:87:eb:38:85:5c:41:18:
b3:80:54:30:fb:83:73:24:27:96:0b:5c:11:45:be:
70:e6:3c:b0:54:82:c4:d0:9b:a0:9e:b0:21:9a:ea:
8e:cd:76:62:4f:be:9a:b0:e7:44:1a:c5:56:31:50:
0d:db:23:ea:bd:ec:d7:b9:db:ae:0a:36:d3:b9:63:
e5:25:56:f6:c7:61:93:10:98:72:c1:dc:a8:ab:a8:
30:7f:b3:03:86:7a:b5:fb:02:a1:6f:4c:65:84:a4:
95:2f:65:c1:b0:ad:34:95:21:b0:36:e4:2c:c1:ec:
27:50:a9:5e:ab:af:80:33:fa:0f:af:2f:bb:0d:1d:
73:d2:52:85:6c:ef:ba:db:57:ae:42:d2:c6:e1:57:
93:e8:7d:b5:33:6b:75:40:eb:a4:69:2a:1f:a5:50:
7c:81:c3:f4:eb:c3:6d:4f:1f:22:bb:c4:57:c7:01:
ff:49:8f:75:cc:fb:ba:ff:33:d2:d7:b2:4f:b9:e3:
00:ac:9a:49:4e:1d:cf:27:5d:6a:72:ae:51:e7:44:
fe:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BA:FA:92:0F:47:F4:65:5C:A1:A8:C0:6A:62:2B:43:66:9A:14:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5948220C74BA11EB8C0D7D25F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.22.0/23
Signature Algorithm: sha256WithRSAEncryption
43:5a:4d:fe:5a:dc:ad:21:6a:26:6b:ea:aa:be:9e:94:4b:21:
60:02:05:d9:85:c8:af:67:22:2d:95:44:46:10:8e:b4:d6:09:
8a:a9:4d:3a:0c:52:de:ba:50:c7:c6:55:cd:94:1e:5e:7b:80:
8b:1d:f1:b7:03:e8:da:a3:40:76:0e:4b:89:6e:fb:00:17:e9:
ec:1c:9a:b5:32:0d:4e:fc:db:0f:e4:6a:9a:7a:20:82:b4:ee:
bd:ab:e4:46:7c:e3:71:48:a7:16:70:2a:f0:13:e0:5b:06:9c:
cb:38:f7:1e:0c:ed:a0:ca:58:16:be:0a:e4:59:78:70:d4:2d:
93:12:00:2f:56:83:65:3d:e9:c9:cd:fd:fc:a7:92:61:26:e4:
f5:1e:f2:3e:9d:99:18:60:c4:79:06:8c:8b:de:e1:44:cb:0b:
f8:cc:ed:36:d8:71:5c:74:f8:8d:89:ce:1a:8d:57:b1:81:33:
b7:d1:7a:2a:0b:2d:bc:44:4b:b9:ca:d6:68:d7:59:0d:91:51:
1c:80:b6:b5:26:fb:52:e8:07:be:45:d5:f9:b9:05:90:50:93:
7d:d4:a3:6a:8f:07:08:1d:f9:38:59:c8:9b:38:c3:3e:8c:a2:
ef:92:f2:f4:96:b7:94:bf:09:2f:5a:e0:dc:25:57:d2:b2:d2:
5c:98:5c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-fra.rpki-client.org