Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86C40164179411EDB1F1F29EF1222468.roa
File: 86C40164179411EDB1F1F29EF1222468.roa (raw, json)
Hash identifier: 6156BMOEwHq5Ykg+fUX9pr1jjdQKAg5yKL8tBnd45oc=
Subject key identifier: 6E:89:8E:98:2D:B2:2F:A5:67:32:A2:35:99:02:AD:A5:D4:A8:C1:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1699
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86C40164179411EDB1F1F29EF1222468.roa
Signing time: Tue 09 Aug 2022 03:37:00 +0000
ROA not before: Tue 09 Aug 2022 03:36:57 +0000
ROA not after: Fri 30 Dec 2022 03:36:57 +0000
asID: 328608
IP address blocks: 156.246.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5785 (0x1699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 9 03:36:57 2022 GMT
Not After : Dec 30 03:36:57 2022 GMT
Subject: CN=62f1d65c-3f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:87:56:24:e5:85:44:fb:f1:f0:72:ea:c8:
77:4c:f7:5c:c6:e2:3c:61:a4:7a:eb:e3:5d:09:07:
22:91:d6:75:81:1a:4c:0f:ab:8a:96:bb:62:72:b7:
ac:55:3e:0e:a5:33:ae:ba:8f:bb:91:ef:74:8b:a0:
b3:cc:97:a1:c1:3f:42:04:fb:aa:72:a2:ba:70:30:
af:95:2f:60:46:42:ff:aa:fd:46:48:87:26:a2:ff:
a1:2c:75:73:ad:6a:82:da:c3:fe:fb:55:5f:49:0b:
0c:38:32:ad:34:db:37:10:b2:76:20:ca:19:d1:6c:
19:e3:25:17:f0:59:f3:be:e8:eb:6b:86:1f:28:e7:
e2:ea:08:9f:e1:ee:9d:89:21:d9:a3:b2:36:c3:c3:
9e:ba:d6:1f:71:f2:a0:fc:06:d6:4e:c0:6c:1f:32:
3d:d0:87:d2:67:d9:1a:cd:0e:37:11:bd:fe:d8:9c:
47:48:a1:58:e9:83:ee:08:37:ee:cb:d3:b1:3f:14:
50:4a:28:01:20:d9:3c:38:1f:90:5f:8b:32:55:95:
81:73:e5:25:1e:a6:ab:f1:d0:ff:a5:5d:3e:c0:0b:
17:06:27:80:ac:6f:82:80:03:ea:0e:0b:c7:8f:0a:
03:41:88:7d:88:11:fb:4c:5f:75:87:cf:91:52:46:
d5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:89:8E:98:2D:B2:2F:A5:67:32:A2:35:99:02:AD:A5:D4:A8:C1:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86C40164179411EDB1F1F29EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.202.0/24
Signature Algorithm: sha256WithRSAEncryption
40:eb:7a:ab:1a:7a:59:05:34:be:13:4b:c9:dc:0c:ea:5d:c5:
73:4e:06:55:63:41:7b:b1:96:5e:90:eb:ae:cc:34:d9:11:09:
82:79:df:a2:2c:e3:9c:bc:dc:51:6d:da:44:8e:fc:04:7e:8d:
47:0a:ba:a5:be:e8:fc:89:11:dd:2b:72:2a:26:48:0b:dd:af:
e9:31:aa:89:04:67:66:5d:8c:a1:b6:5c:86:b2:2f:2b:5c:7d:
e5:49:c6:26:66:dc:d3:33:63:97:8d:83:fa:38:b3:b9:46:35:
4d:57:96:9b:e7:10:25:d4:ee:d5:37:76:91:fb:f5:ce:d3:df:
17:b6:78:e3:e3:86:0d:0a:6f:a4:6e:7b:2a:84:f4:2e:c6:95:
1e:8c:20:b1:f9:6e:38:c0:f8:d4:2a:5b:2b:03:df:3c:04:b2:
84:49:18:c1:f9:ed:bd:f2:dc:3f:c4:73:3f:ff:c6:4f:31:79:
83:25:76:95:4c:82:c4:6b:5d:ef:13:be:ac:f8:a2:83:78:aa:
1c:e1:e8:43:21:8c:01:ff:09:6e:28:b2:c6:64:32:02:55:38:
70:e1:b3:e0:86:4f:a2:ac:58:9e:7d:88:de:a9:0c:c1:2d:c4:
9e:4b:4b:a6:ed:5d:a5:4e:9c:48:2f:98:1d:14:be:7d:5b:51:
f1:e9:45:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org