Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7AAD73B4E89711EC827D51C9F1222468.roa
File: 7AAD73B4E89711EC827D51C9F1222468.roa (raw, json)
Hash identifier: s7Oh6KWfbH76gItmk+Lcvb1Mc4IqKfgFAt/4qCSu1PU=
Subject key identifier: 1F:C3:DB:AB:4B:5A:60:39:48:3F:BA:36:52:42:58:9E:11:97:07:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 148E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7AAD73B4E89711EC827D51C9F1222468.roa
Signing time: Fri 10 Jun 2022 08:29:44 +0000
ROA not before: Fri 10 Jun 2022 08:29:40 +0000
ROA not after: Wed 30 Nov 2022 08:29:40 +0000
asID: 133199
IP address blocks: 156.247.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5262 (0x148e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 08:29:40 2022 GMT
Not After : Nov 30 08:29:40 2022 GMT
Subject: CN=62a300f8-2ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:8a:77:0b:58:e8:6e:d3:86:1e:48:ee:88:
e7:77:da:f9:b4:a9:90:f1:e3:a5:86:78:8d:a3:fd:
d9:ef:f1:58:a6:dd:8a:de:4f:5a:cb:d9:7f:2f:83:
c4:36:c9:e4:79:c2:45:85:02:fd:a6:6a:b0:25:ff:
c0:5f:ee:3f:e3:f0:1b:94:fd:06:56:47:3e:dd:b3:
6d:44:15:57:c7:65:db:44:8d:09:91:d4:87:34:5f:
c1:ac:6d:e9:d8:bd:da:87:51:50:ae:78:05:1e:36:
52:32:3d:10:e6:7b:bf:f7:82:91:f2:7d:e5:0e:dc:
f6:ff:28:3e:52:f5:63:06:40:68:12:e7:5f:b9:cf:
ab:1c:a3:9a:40:6c:f9:da:b7:3d:b1:f2:22:9c:8c:
0b:cf:20:cf:22:04:70:97:a7:58:f9:7a:9e:4f:a7:
f0:02:f2:bf:b2:9d:7b:8e:f1:11:75:c6:d1:09:cc:
89:2e:4a:96:dc:e5:56:36:91:97:42:e1:f0:4e:44:
e8:0e:c1:bb:0d:e5:b6:f1:a8:0c:1a:19:ed:d6:40:
c5:0b:2b:3f:f1:6e:75:d0:2f:7a:ea:41:b6:5f:95:
d0:f8:45:78:f0:20:d4:02:2a:3c:ea:94:e0:da:4f:
7d:1b:a4:41:eb:52:63:bb:42:ff:96:58:d0:98:c6:
1a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C3:DB:AB:4B:5A:60:39:48:3F:BA:36:52:42:58:9E:11:97:07:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7AAD73B4E89711EC827D51C9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.14.0/24
Signature Algorithm: sha256WithRSAEncryption
28:c5:f1:55:71:19:90:c0:52:ce:04:b9:89:d7:0e:1b:e7:82:
4c:29:a6:9c:05:2d:f7:15:bc:6a:18:73:ec:c2:50:98:46:1c:
2b:5b:3b:62:39:75:67:da:e2:0c:1f:d0:ca:62:8e:3a:e2:de:
0e:4a:21:94:d9:b3:07:6e:cb:de:2b:3c:89:2d:8c:7e:50:24:
cd:e1:03:ba:ee:b4:6c:92:c4:c7:f9:8b:a6:a6:ef:1a:4a:1c:
e5:d3:93:f6:9b:cc:58:75:1f:57:5f:a4:54:4f:49:8a:a1:12:
c1:83:0e:c6:2e:a9:6d:41:55:60:b8:0c:ef:fb:26:b9:c2:9e:
da:4a:fb:ad:d5:26:43:c3:e7:38:90:0a:73:7b:62:a0:35:4e:
6c:37:ba:e0:3c:f2:33:e2:5c:51:06:02:b3:3a:dc:54:6a:b0:
77:d7:82:ba:d7:f9:1c:b0:9f:c2:4c:17:9e:6f:a7:c5:00:c8:
58:be:42:67:f5:e4:b3:2e:45:54:17:37:67:66:c0:d1:b8:a7:
a6:87:8f:7c:0c:ed:dd:c5:13:9e:f1:6d:25:43:e3:0b:a1:ba:
dc:9c:c9:0f:c6:7e:0c:bf:d3:6c:07:44:69:1b:d8:f0:3d:60:
b9:0b:bd:c4:d8:0b:23:3a:97:cf:8f:1a:16:1a:3a:96:5c:5e:
88:4a:97:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org