Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/892720C617B211EDAE1AB0FAF1222468.roa
File: 892720C617B211EDAE1AB0FAF1222468.roa (raw, json)
Hash identifier: liB4DifJ0UIl/jJePmMjHH31AhD+3mJbrojGk5Cuxgg=
Subject key identifier: FB:25:22:C3:76:1B:10:20:6E:C9:7B:03:E7:5E:4C:B3:3F:12:5E:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 16AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/892720C617B211EDAE1AB0FAF1222468.roa
Signing time: Tue 09 Aug 2022 07:11:49 +0000
ROA not before: Tue 09 Aug 2022 07:11:46 +0000
ROA not after: Thu 15 Jun 2023 07:11:46 +0000
asID: 136744
IP address blocks: 156.235.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5805 (0x16ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 9 07:11:46 2022 GMT
Not After : Jun 15 07:11:46 2023 GMT
Subject: CN=62f208b5-1f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8a:81:e9:76:ff:9b:9b:66:ed:6e:20:bc:9a:
e2:e2:07:a0:d4:1c:85:2e:68:81:10:85:f9:03:6c:
1d:dd:ad:6b:13:22:28:4d:c4:8a:76:4d:26:e0:61:
a2:0e:4b:2c:e5:31:58:cc:14:da:c8:ba:5d:38:65:
e9:f3:f9:bb:13:ec:10:20:8a:94:bf:9b:73:21:46:
3f:93:c4:95:6c:8e:5d:08:b9:1b:79:04:01:bc:2e:
ad:27:ff:a4:6d:0b:72:6e:4d:79:52:79:fb:ed:84:
7a:77:5e:5c:9b:5a:c3:3c:41:de:57:d9:4b:55:8d:
31:0e:05:09:9a:ad:55:51:44:54:a3:af:70:66:1d:
54:03:23:14:3b:07:4d:03:80:8f:c2:ed:79:45:f9:
11:12:8f:ab:45:f8:01:3f:75:09:ef:cb:e0:92:4f:
ff:4e:da:5d:f0:a5:35:6d:92:85:58:6a:9d:a6:90:
46:cb:e2:99:3a:95:37:50:3d:a1:11:78:6f:1b:5b:
48:9f:af:d0:9e:6e:7f:78:b8:44:37:fa:81:ee:c3:
b3:f3:79:8f:99:d3:0d:84:36:b5:a9:99:dd:41:ea:
db:26:ed:07:43:d1:3d:29:18:ea:7f:90:ea:06:31:
ac:42:b6:dd:f3:26:a4:87:13:25:58:ee:aa:30:db:
3c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:25:22:C3:76:1B:10:20:6E:C9:7B:03:E7:5E:4C:B3:3F:12:5E:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/892720C617B211EDAE1AB0FAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.31.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ac:a8:77:de:5d:68:b8:c5:94:78:74:cc:80:66:0a:e6:ab:
06:ab:32:ef:46:f8:28:e9:b5:63:b8:4a:12:ab:be:e9:a3:f8:
4d:15:a9:a4:74:63:1d:6e:39:e6:3d:db:07:ed:62:5f:01:13:
d0:81:e9:b6:13:fa:ef:6f:47:89:ba:dc:d0:6d:eb:8d:fc:2a:
13:94:84:3b:a8:3c:84:1a:41:88:8a:cf:2d:b5:6f:30:e4:35:
73:c8:4c:74:c4:74:93:93:a9:d3:28:ef:92:ae:6e:c1:93:f6:
14:50:6f:24:97:0f:ed:de:82:3e:ca:64:22:8d:af:dc:f9:51:
b5:38:e4:b1:39:61:56:95:4b:c5:10:b4:81:a7:b2:50:fd:3a:
4d:16:d6:e1:7f:87:85:ff:91:ce:2e:e6:d9:1a:af:c4:56:f2:
1c:23:b5:89:35:b0:44:fc:84:4f:06:ab:69:23:53:26:a1:d5:
86:cc:cd:d3:ab:fb:77:c5:e1:70:9e:ce:67:3c:5c:9f:5d:bc:
c5:5e:85:65:56:9f:3b:de:9c:37:f9:c7:e3:32:79:c6:ff:7e:
57:a3:bc:b7:b6:f4:52:40:f9:17:f2:3e:08:8c:22:1c:c5:71:
8c:b8:b4:ae:38:df:75:c7:93:5a:69:b5:b3:ae:d7:96:63:3a:
d7:58:72:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org