Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/801794D6488511EC91F3C134D8A014CE.roa
File: 801794D6488511EC91F3C134D8A014CE.roa (raw, json)
Hash identifier: mxUrowVjCGrrTjdPpg98M6WyEbyULwUxazwqv1NZsPc=
Subject key identifier: CA:D2:17:C6:4E:8D:CB:B9:35:FE:1A:A9:C0:4D:44:49:08:2B:77:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D2C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/801794D6488511EC91F3C134D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:37:56 +0000
ROA not before: Fri 19 Nov 2021 15:37:52 +0000
ROA not after: Sat 19 Nov 2022 15:37:52 +0000
asID: 139879
IP address blocks: 156.231.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3372 (0xd2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:37:52 2021 GMT
Not After : Nov 19 15:37:52 2022 GMT
Subject: CN=61967354-3efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:30:b9:06:8e:e3:70:30:08:06:cc:d2:c2:e1:
d0:7e:57:92:88:92:ba:53:e2:44:a1:ed:2c:6e:75:
ba:b9:df:6c:18:96:56:29:3d:a9:c6:c3:d4:79:a9:
19:63:4a:dd:e3:2e:01:4b:11:7c:e9:0c:60:15:a7:
bd:34:7f:6c:eb:e6:9b:07:16:7a:f3:75:a7:40:00:
84:14:d4:5f:60:0f:e9:40:8d:d2:08:b0:22:0f:f3:
75:05:0b:56:7d:3c:d0:93:f4:01:db:4f:44:35:b4:
b4:86:9e:b0:93:fe:75:78:5b:98:f3:e0:cf:f1:91:
9b:a4:66:96:59:fa:a6:85:87:6b:b1:df:d7:3c:7f:
c2:88:e0:61:9c:ab:79:7a:1d:ca:05:13:f6:a9:22:
1d:0e:7f:7f:cc:9d:ff:1c:ff:06:15:55:0d:8e:a1:
3b:c1:07:79:20:f4:94:9a:1c:d2:38:20:a3:8c:92:
47:d5:28:52:d2:09:90:49:eb:d4:96:4d:0b:2f:79:
66:4c:7e:a3:42:e3:f9:9b:0e:a8:19:74:ba:5b:e9:
9a:71:5f:bc:46:4a:a9:bb:66:0d:90:6d:36:63:89:
66:bb:fe:b9:24:f8:26:09:b1:60:30:08:53:13:51:
a8:9a:85:23:b1:02:aa:88:34:93:4d:f2:d3:5f:67:
ae:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D2:17:C6:4E:8D:CB:B9:35:FE:1A:A9:C0:4D:44:49:08:2B:77:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/801794D6488511EC91F3C134D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.152.0/24
Signature Algorithm: sha256WithRSAEncryption
84:bf:10:12:b3:a3:f9:1c:fc:15:3f:b8:e9:88:96:5f:68:4f:
90:e3:03:da:23:ef:7d:ca:4b:79:b4:bd:3a:ad:0c:aa:8c:99:
82:74:c8:f3:77:36:98:53:cf:2d:14:f2:f3:ac:9c:c9:d3:22:
96:88:b9:7d:71:c4:6d:cf:28:fa:75:02:04:39:f9:3f:40:2c:
78:61:6f:ac:a0:36:9c:0f:dc:5e:46:56:38:98:ed:b5:d7:ac:
29:dc:da:29:68:cf:5b:a3:02:80:3c:00:e8:7b:9f:f2:4a:aa:
24:ea:d8:24:49:6b:e9:c1:fa:0a:65:32:ce:48:38:c8:77:1d:
73:61:e7:68:e2:2c:83:ba:cc:61:8a:d4:02:f4:29:fc:14:f1:
4b:3f:18:27:6e:85:65:7a:1f:79:9e:70:ba:81:a2:65:9a:1c:
bb:80:db:22:af:70:dd:67:1d:e4:56:0d:13:08:d9:17:39:a7:
bb:c6:0e:31:a4:b0:3c:83:28:24:64:21:88:74:ee:c3:71:68:
82:23:82:fb:3f:8b:a0:9e:0b:80:54:44:a0:eb:5b:96:6b:76:
98:d9:8f:b9:5a:e4:9d:3e:1e:15:b4:a3:3b:b4:c8:18:f4:09:
9f:ad:de:5f:fd:48:c2:05:6b:e5:46:c4:41:14:bf:7b:41:16:
0b:10:35:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org