Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8368909A3E4D11ED9137FBCDF1222468.roa
File: 8368909A3E4D11ED9137FBCDF1222468.roa (raw, json)
Hash identifier: dBSSFL600T+oLJK5jJZeTmuFGg9qYqLCD3A1OOChhsw=
Subject key identifier: 91:DC:CE:AB:C8:89:4B:9B:6D:3D:2F:36:EA:F5:62:DE:DD:CE:C4:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 189D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8368909A3E4D11ED9137FBCDF1222468.roa
Signing time: Tue 27 Sep 2022 10:16:56 +0000
ROA not before: Tue 27 Sep 2022 10:16:52 +0000
ROA not after: Mon 27 Feb 2023 10:16:52 +0000
asID: 7029
IP address blocks: 156.243.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6301 (0x189d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 27 10:16:52 2022 GMT
Not After : Feb 27 10:16:52 2023 GMT
Subject: CN=6332cd98-a9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:85:1f:3e:15:cd:b0:65:ea:55:b1:63:62:82:
c6:d0:1d:1b:b8:d4:fb:3b:3c:92:f0:b3:7d:ac:e6:
1e:97:77:d8:8b:fb:69:44:e8:ad:80:7e:ff:7d:4f:
fc:bf:a2:0d:8b:e4:57:1f:54:f7:da:86:4f:9b:7a:
b8:e2:75:8c:65:ea:bb:e7:d6:f4:c2:a2:35:94:07:
03:14:16:1b:3c:f3:32:a8:b8:c6:83:94:40:32:b9:
68:25:65:72:4a:0b:27:ab:58:9a:df:93:55:88:3f:
2d:4e:76:b4:b0:39:e4:14:ae:ec:89:e8:88:91:fc:
de:af:61:3b:5d:b4:ce:c0:1c:55:37:42:d4:cc:41:
b0:06:f4:df:e8:0b:a2:de:4f:a8:e9:8e:d8:40:55:
6a:fc:90:fe:ba:5d:21:6d:ee:5a:c3:5f:68:0c:d4:
c3:9c:b6:47:55:30:08:5f:c9:db:97:c1:9f:45:c3:
3f:b0:b6:32:c3:75:78:68:d8:f6:7d:47:79:d7:0e:
5c:58:1f:6a:f3:da:b7:48:19:fe:b5:ec:be:6f:73:
8f:44:c0:19:cc:76:41:91:2c:8c:3a:a5:22:9c:0f:
f7:41:af:9c:aa:c7:33:27:ba:f9:76:45:f7:01:70:
24:c3:af:ff:ff:1a:53:62:20:be:d8:fb:9e:6b:97:
ac:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DC:CE:AB:C8:89:4B:9B:6D:3D:2F:36:EA:F5:62:DE:DD:CE:C4:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8368909A3E4D11ED9137FBCDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.192.0/18
Signature Algorithm: sha256WithRSAEncryption
24:be:98:71:3d:d8:c4:b5:85:64:43:07:9d:ce:c2:bb:97:f4:
55:f2:a3:64:02:e4:60:ac:34:e1:70:7f:06:17:30:69:3c:8f:
e0:c4:02:0c:54:c5:2d:9e:2c:04:13:8c:f3:ff:e8:fa:79:91:
84:1e:a7:66:c9:38:21:d2:95:0e:cb:a9:1e:84:60:e2:32:70:
13:d8:38:06:c0:13:11:d4:59:f3:e7:44:9f:f0:a2:21:9a:c5:
db:5b:18:2c:8e:18:47:2b:bf:41:d6:97:31:9d:56:ec:66:5e:
4c:cf:d1:23:49:aa:16:19:a8:e4:69:7a:4b:84:e0:c8:e8:d4:
e3:54:f8:1a:4d:0e:7d:35:a7:8b:37:22:b6:a8:32:33:31:7d:
ba:85:5a:c6:7c:be:77:a1:97:4a:a9:c5:fc:9b:e6:8a:81:c6:
02:55:c0:ed:e3:0c:c1:bc:aa:d4:67:7e:d4:03:94:bc:1c:c4:
c3:05:c1:90:8c:17:58:21:04:93:e0:8c:d1:64:93:3b:64:3e:
6d:37:65:c1:72:04:9e:ce:20:f6:38:45:a7:c9:3f:96:52:57:
1b:7f:11:74:1f:cb:99:f8:91:40:a6:9e:12:d2:69:fc:69:a8:
fd:53:73:46:e2:84:b9:e7:1e:99:90:00:31:ed:51:8b:5e:84:
f9:3f:31:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-fra.rpki-client.org