Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/676273023E2A11EDAAA50CF6F1222468.roa
File: 676273023E2A11EDAAA50CF6F1222468.roa (raw, json)
Hash identifier: OIgMxfcwyedAXpLhjI531c8qRcztLvDjjBtbeTDcNY4=
Subject key identifier: BF:AC:23:97:62:F6:09:94:8F:1D:08:2B:16:D9:E3:FF:45:27:02:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 187B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/676273023E2A11EDAAA50CF6F1222468.roa
Signing time: Tue 27 Sep 2022 06:05:36 +0000
ROA not before: Tue 27 Sep 2022 06:05:33 +0000
ROA not after: Sun 15 Jan 2023 06:05:33 +0000
asID: 1239
IP address blocks: 156.243.112.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6267 (0x187b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 27 06:05:33 2022 GMT
Not After : Jan 15 06:05:33 2023 GMT
Subject: CN=633292b0-0fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9d:64:d4:a9:1a:df:8f:c6:de:82:aa:a9:10:
5f:dd:00:b9:c1:03:4e:75:69:4d:24:60:ae:fd:d6:
d1:f8:cb:ce:07:bb:30:99:60:c5:47:08:c5:d5:e2:
4a:a3:b7:0f:11:bc:d5:9e:51:b1:62:fc:73:16:05:
cd:65:22:41:27:98:64:bb:05:64:b8:ef:06:b7:12:
a1:dd:52:2b:48:00:96:75:87:8e:33:1f:11:be:d3:
7a:58:df:8f:f0:12:a3:91:37:cf:71:ee:19:49:87:
a9:2a:16:ff:54:1d:b3:98:cd:1f:38:fc:16:fa:d8:
b5:d6:6f:29:c3:87:38:9a:88:82:4d:e4:e4:0d:94:
96:7c:01:41:b4:95:92:8e:47:b8:12:a5:a4:3b:76:
49:df:7a:b2:12:4e:93:eb:2c:17:2c:a6:bc:18:f9:
29:25:86:d9:64:ba:3e:77:1a:c6:b7:73:e0:47:b9:
46:3a:f4:8b:78:15:d0:c3:ec:f8:01:1f:ac:34:80:
57:fa:42:9f:6b:c3:de:9e:02:7b:86:4c:59:7a:fa:
a9:1f:67:7b:65:06:ca:e2:a5:e9:47:98:dd:1e:48:
ea:77:fd:34:b7:ef:2c:cc:07:1e:69:be:ea:be:9d:
1b:c3:59:ff:78:7a:7b:dd:cc:fd:b9:be:7c:95:29:
84:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AC:23:97:62:F6:09:94:8F:1D:08:2B:16:D9:E3:FF:45:27:02:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/676273023E2A11EDAAA50CF6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.112.0/22
Signature Algorithm: sha256WithRSAEncryption
62:bf:07:2d:63:f9:b5:5d:9c:42:9c:0a:ed:72:ef:89:43:da:
5f:bc:f4:53:02:91:75:64:05:48:4a:0a:1b:42:df:13:59:69:
78:46:60:a9:3e:91:f6:c3:cc:02:8c:65:7b:76:b2:a0:be:a1:
31:6f:ad:88:ad:df:9b:54:43:df:e3:4f:21:5d:f8:2a:b2:46:
2c:14:8f:0b:b0:80:2b:43:a8:bd:a8:18:ed:45:f5:0f:64:9a:
40:d9:bc:0b:0a:11:d0:5e:b0:99:6d:e0:40:89:43:54:d9:9d:
92:3e:cc:a7:31:f5:aa:d2:52:5d:b6:b0:8e:1c:6e:80:0b:fe:
6f:c2:6e:08:b8:74:d4:a8:93:6e:3e:34:bd:8b:2d:09:4a:01:
8d:77:e1:4d:c5:c0:02:66:f2:a7:66:ff:87:17:67:26:7c:f4:
63:62:d6:81:3d:63:54:e3:31:88:a2:68:19:a8:2d:74:39:65:
26:6d:ba:4f:02:4b:f2:d1:f5:9b:59:c1:fc:bf:3e:50:83:62:
aa:73:45:b6:83:89:8e:8b:72:d4:8e:ad:17:dd:ae:d7:95:43:
89:09:b8:25:94:1a:20:52:be:e9:a0:8c:23:e9:f2:79:c8:5f:
e6:78:55:14:02:70:69:0e:6a:a0:b3:a5:90:e1:12:4b:77:68:
5a:bb:40:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-fra.rpki-client.org