Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E320782A43511EC87377AA45A40D577.roa
File: 5E320782A43511EC87377AA45A40D577.roa (raw, json)
Hash identifier: kjEfkdqPAd19UM640rx4BvjiGnWG+/6KwhUEbcP+Erc=
Subject key identifier: 1B:F1:D2:1F:94:9E:DD:BC:3F:B4:F4:7E:60:A2:63:9E:B5:90:7D:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1265
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E320782A43511EC87377AA45A40D577.roa
Signing time: Tue 15 Mar 2022 07:56:06 +0000
ROA not before: Tue 15 Mar 2022 07:56:02 +0000
ROA not after: Sat 31 Dec 2022 07:56:02 +0000
asID: 133201
IP address blocks: 156.255.8.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4709 (0x1265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 15 07:56:02 2022 GMT
Not After : Dec 31 07:56:02 2022 GMT
Subject: CN=62304696-ab60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6d:6e:14:0f:fa:dc:83:66:e4:fc:55:81:7e:
f7:23:f2:35:f0:d0:b5:ab:4e:f2:d2:4a:53:15:ab:
fa:44:c3:1c:2c:3b:cf:61:98:f7:ad:18:06:26:cf:
6e:21:0c:bb:54:fb:be:67:60:a2:41:45:3f:e4:66:
cf:5c:0a:3d:5c:a1:4f:69:bf:01:c3:8a:26:b1:22:
0f:2b:02:95:e7:76:16:a6:6d:1b:7b:00:55:29:02:
f2:22:10:f1:4c:da:19:a7:f7:f8:67:76:85:d2:0d:
a6:ed:8c:d0:4a:0e:0c:4b:3c:6f:2a:72:9b:ba:8a:
e0:5b:33:a4:24:43:a8:1b:f3:73:63:fc:ff:f5:fc:
27:99:aa:ba:4e:7b:fb:f7:c2:fb:9f:14:f6:92:d5:
2b:e7:52:04:89:7c:1a:4d:14:5e:68:4b:6e:28:d9:
2e:5a:8d:0a:ab:99:48:86:a5:84:92:47:29:5e:a5:
d4:88:d3:b5:ee:8d:40:13:66:eb:e6:27:08:d5:d1:
ba:bb:c0:85:4f:f1:23:ee:ad:4c:b7:a1:6a:d2:b0:
0e:85:08:3d:e2:ef:d0:2e:a0:e5:fd:42:d5:d7:8a:
57:bc:89:e9:b8:a7:6e:d8:89:c1:36:57:73:1b:f2:
df:9c:95:00:79:a5:c3:4b:7c:6a:ed:d5:3d:6a:35:
2f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F1:D2:1F:94:9E:DD:BC:3F:B4:F4:7E:60:A2:63:9E:B5:90:7D:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E320782A43511EC87377AA45A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.8.0/23
Signature Algorithm: sha256WithRSAEncryption
87:b3:cd:fa:96:64:82:24:63:66:17:8e:a0:28:2d:65:29:e4:
50:16:07:3e:9b:c8:6f:ad:01:b3:89:06:c9:af:41:83:df:f7:
c5:dd:e3:ba:65:bc:94:5b:6a:b8:8f:08:05:5a:97:42:bd:65:
b7:86:87:7f:3f:7d:b6:31:11:cd:cd:8f:86:2d:7e:dc:34:04:
d8:b4:11:2f:d7:86:cc:db:f0:60:4d:7f:37:b2:4e:69:89:88:
13:e4:ec:a8:21:03:cc:7a:29:51:98:f3:be:62:ea:10:49:9e:
aa:08:fb:9b:90:f7:52:fa:1e:c7:35:3a:69:09:2e:d5:51:95:
86:31:ee:80:dd:73:b9:39:25:89:81:ef:60:d3:69:08:a9:65:
5b:1b:ae:f9:59:ab:19:50:52:c8:34:a5:5c:89:52:40:cc:30:
0c:cb:51:15:76:06:16:a6:b7:51:3f:df:f1:fa:bf:5b:00:fb:
c1:78:3a:31:3a:86:69:e7:c9:70:d7:b4:63:6c:86:e3:1f:01:
bd:91:e2:07:61:f4:38:da:c0:89:5f:7b:c8:dd:f7:23:f3:10:
17:28:e0:0b:28:61:f8:c0:e6:2d:34:ab:3b:5e:b0:54:e1:af:
fc:1a:19:ca:c9:ae:1c:55:9a:64:e8:39:9d:1b:e2:8c:39:98:
cb:73:3c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-ams.rpki-client.org