Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/673B7346987211ECA6139F985A40D577.roa
File: 673B7346987211ECA6139F985A40D577.roa (raw, json)
Hash identifier: 8gD5qhhHbiP/MPv8mTRs7Nu3JS3iJ7DwZES6NUFd+kI=
Subject key identifier: DC:E7:53:F5:98:BC:BF:43:2C:B9:C1:B0:46:96:06:83:30:86:4B:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 121E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/673B7346987211ECA6139F985A40D577.roa
Signing time: Mon 28 Feb 2022 08:42:47 +0000
ROA not before: Mon 28 Feb 2022 08:42:43 +0000
ROA not after: Fri 30 Dec 2022 08:42:43 +0000
asID: 328608
IP address blocks: 156.235.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4638 (0x121e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 28 08:42:43 2022 GMT
Not After : Dec 30 08:42:43 2022 GMT
Subject: CN=621c8b07-39af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:18:d7:c8:ff:b0:13:c3:d0:d0:6a:b6:58:
3d:65:8f:47:57:89:c9:1e:25:b0:6f:45:4e:1d:0b:
2a:be:9d:f3:a4:f2:8c:10:bf:05:87:50:ab:80:8a:
c6:91:44:5e:76:a4:5a:7d:b4:d4:9a:b6:15:91:93:
25:c0:77:89:a2:53:7e:f7:53:a5:d6:06:28:48:7e:
96:e2:a2:fa:68:9c:48:8b:eb:4f:75:29:4a:7e:99:
a0:04:94:55:29:78:7c:a4:8c:5c:b7:86:0a:5b:76:
46:8c:14:10:f9:72:ba:39:2a:8a:da:f1:56:9b:c2:
54:3b:bc:34:d0:87:46:de:98:1b:ea:e1:ef:6d:22:
8c:0a:85:fc:ec:a4:99:dc:47:99:eb:7c:ee:17:b9:
79:83:e8:d3:e6:aa:53:3a:7f:24:a9:a3:dd:2e:26:
e0:e5:d1:86:51:ea:dd:38:d9:05:07:18:ea:ed:47:
a6:4c:c5:7f:b2:9a:8c:3f:4c:ca:60:59:83:9a:22:
7d:84:b1:ed:cd:c9:55:6f:1c:e4:ee:3b:a6:71:06:
2f:6d:11:fb:55:03:a6:b4:28:4f:64:2e:30:5c:44:
71:cd:59:42:9e:a8:0f:9c:f5:53:03:d6:ff:d4:ac:
20:fe:b1:1e:45:ec:78:46:89:b0:78:f7:7f:51:ad:
26:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E7:53:F5:98:BC:BF:43:2C:B9:C1:B0:46:96:06:83:30:86:4B:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/673B7346987211ECA6139F985A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.0.0/24
Signature Algorithm: sha256WithRSAEncryption
67:36:b3:44:ec:66:59:55:14:dd:50:99:23:dc:3b:9a:27:c6:
24:eb:a9:65:25:39:92:e8:02:40:35:6e:a8:46:48:89:04:df:
e4:a4:4c:95:9b:97:c9:54:36:38:92:91:73:f1:d8:5d:9b:b6:
40:6f:c7:b7:c2:11:97:2f:72:a7:1d:bf:f1:50:c7:a5:4f:06:
2e:9a:78:71:23:e4:38:18:04:4d:29:7c:8f:a9:d3:3f:f0:40:
5d:30:c7:9a:f5:30:b0:05:0b:72:34:b2:f3:e5:98:ce:03:d9:
f0:11:6f:e6:a8:7e:bb:84:9e:b7:d3:ab:df:3b:30:a5:d8:26:
e9:49:b0:21:c3:ac:5a:e8:b7:9f:84:60:7c:21:94:48:ae:37:
c7:70:0b:16:2a:3a:b9:b8:56:7a:e2:7a:74:6e:f5:ec:b7:ce:
cc:d1:b4:23:34:d2:6c:c0:cd:a6:b2:8a:95:be:d0:37:6e:d2:
df:b1:5e:ea:85:27:a4:56:e4:14:67:6d:26:8e:d5:30:61:e6:
1e:e9:de:33:90:e7:9c:94:18:8e:96:cd:cb:9c:fb:ae:be:74:
12:57:13:95:54:83:b3:cc:0d:07:6d:ec:77:8f:94:0b:ab:29:
5a:f1:51:f6:b6:28:3c:4b:c2:33:30:da:d4:f3:ea:d8:da:0a:
58:f8:11:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-ams.rpki-client.org