Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7AB25B800CB511ED8407528CF1222468.roa
File: 7AB25B800CB511ED8407528CF1222468.roa (raw, json)
Hash identifier: 6YuTavp5GSfXKn7bWSE+mgm222MtxmlDqd+bImfI6TM=
Subject key identifier: CB:AE:10:AF:F0:65:34:CF:2F:A3:00:8B:62:6A:0C:D2:9B:EE:EE:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 15B6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7AB25B800CB511ED8407528CF1222468.roa
Signing time: Tue 26 Jul 2022 07:35:11 +0000
ROA not before: Tue 26 Jul 2022 07:35:07 +0000
ROA not after: Sun 15 Jan 2023 07:35:07 +0000
asID: 149981
IP address blocks: 156.225.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5558 (0x15b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:35:07 2022 GMT
Not After : Jan 15 07:35:07 2023 GMT
Subject: CN=62df992e-fc34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:82:81:f7:57:e3:ff:f2:26:a1:aa:43:a2:
91:4a:50:93:70:dd:fa:f3:14:f1:32:77:c5:59:10:
ce:27:70:e3:99:99:c0:90:a3:8e:31:d8:29:28:fb:
31:58:3e:3c:7a:24:34:a3:21:18:d7:99:48:3f:2e:
38:93:b3:67:a1:9f:82:4b:b0:d1:94:9c:71:db:0d:
44:57:78:44:b9:cd:d2:bf:44:55:84:bf:d6:7b:fd:
23:7c:52:d3:8b:10:05:5d:e2:b4:9a:79:6e:9e:8d:
0d:0c:c4:ba:4b:cb:e7:37:80:fd:43:53:bc:52:88:
bb:ac:4b:b4:3c:dd:b0:42:a5:62:ba:24:3b:b7:a2:
12:c6:d9:af:b3:79:af:08:7b:7c:46:3c:86:38:9b:
ad:71:04:1e:39:8b:7f:f1:01:9e:8a:b8:3b:6e:9a:
ad:24:cd:8f:94:18:86:de:2d:63:df:1a:3d:ae:f7:
2e:d1:2c:67:46:ea:26:52:85:e3:08:5e:87:63:a1:
2f:64:6b:3a:ac:69:2a:de:ab:81:d4:4b:64:e3:d6:
ca:dc:7b:b6:24:77:a2:d3:0e:e5:4d:c7:8d:27:c9:
e2:5e:8d:65:7a:ed:e8:0c:28:ce:89:93:57:d2:df:
15:66:c0:bd:e4:63:a2:1e:53:bb:73:6d:8e:08:29:
5b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AE:10:AF:F0:65:34:CF:2F:A3:00:8B:62:6A:0C:D2:9B:EE:EE:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7AB25B800CB511ED8407528CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.101.0/24
Signature Algorithm: sha256WithRSAEncryption
25:34:9a:cc:0c:50:1b:14:5b:7e:9f:60:29:ba:72:1a:34:aa:
b5:c3:55:18:b4:c9:86:36:31:cf:b3:22:7f:07:93:4e:15:dd:
bb:71:33:9b:ae:81:db:cc:c1:89:14:0c:f5:12:c1:49:7e:1f:
ae:90:6b:8b:a0:10:46:2b:63:77:0f:60:ee:3d:a8:fb:a4:ae:
4a:e7:cf:c3:09:53:78:73:01:9c:13:48:51:76:21:4b:6c:ee:
90:cd:ac:51:11:04:e5:2c:47:b3:2d:c6:55:ce:69:06:0a:2e:
69:5a:ba:a1:48:0a:f8:d8:48:93:5b:0b:2a:7c:35:c2:cb:8e:
7d:17:bf:75:fb:e6:d4:95:e4:7a:84:b4:25:50:2b:bb:4a:30:
4e:a3:5f:1b:20:90:63:84:fa:43:33:3e:59:bc:8b:3d:dc:ce:
fd:75:a4:77:8f:d9:b4:1c:f7:ad:47:a0:58:f2:ce:61:c1:e7:
4f:58:48:82:eb:ac:ed:32:b2:8f:1c:4a:18:8d:49:73:4a:38:
59:78:87:e6:05:5c:6e:94:7b:99:79:e6:8e:89:12:f3:33:be:
55:b5:fe:15:bf:8f:35:91:17:9f:7b:5b:ef:7d:08:42:5d:1a:
7c:75:ea:a3:86:74:bf:84:b8:36:0f:77:1b:47:72:e8:48:73:
41:70:36:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org