Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/896DA402488611EC93F32F37D8A014CE.roa
File: 896DA402488611EC93F32F37D8A014CE.roa (raw, json)
Hash identifier: MiPrJbrSPg/ImGZuWxF0QNb1QiQY5W5DtEs0QVgQjxA=
Subject key identifier: F8:00:A6:70:34:CD:CE:4D:82:50:97:7B:DE:83:DF:1D:48:53:DA:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D68
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/896DA402488611EC93F32F37D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:45:21 +0000
ROA not before: Fri 19 Nov 2021 15:45:18 +0000
ROA not after: Sat 19 Nov 2022 15:45:18 +0000
asID: 139879
IP address blocks: 156.249.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3432 (0xd68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:45:18 2021 GMT
Not After : Nov 19 15:45:18 2022 GMT
Subject: CN=61967511-d93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bd:29:ee:69:01:b6:01:ed:d8:34:4d:b2:f8:
ad:24:46:70:12:4f:b2:83:8b:e9:1b:70:75:83:28:
47:7f:c0:c9:4a:ef:d3:f1:3b:e7:a6:61:94:e1:13:
e0:7c:02:3d:2b:e9:e3:4d:e8:84:56:0e:a6:9e:27:
1f:6b:8f:fc:9e:67:e4:73:71:d0:05:31:86:06:c7:
79:39:4b:c0:80:a0:22:88:2f:a4:ab:fa:35:97:47:
21:e4:e0:86:28:e3:ea:ff:ac:cb:52:20:f8:17:e6:
5c:9c:d6:27:89:61:79:73:d3:e5:67:79:5d:3c:59:
2f:ca:9a:f9:77:97:08:37:96:6a:19:f2:c8:ef:75:
4d:98:9b:ed:72:4e:d4:c9:bc:06:45:d9:44:93:05:
2f:cf:d3:86:73:98:b3:a6:64:a2:5e:71:ae:d4:84:
47:dd:98:ea:01:96:10:b4:e7:3c:6a:16:a9:d8:38:
b4:f8:19:d3:98:35:53:a2:97:f3:5f:0f:ff:84:f7:
c7:1b:5f:d5:28:c6:8d:3d:c3:68:9f:62:62:c2:0b:
2f:2a:8d:ee:8d:fd:a1:3c:fc:49:03:eb:0b:a1:8c:
07:aa:36:b0:d5:d7:fb:01:5e:17:ad:c8:9f:ad:a3:
b4:0e:b6:9d:85:0b:c2:09:34:0d:c2:87:15:b0:61:
dc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:00:A6:70:34:CD:CE:4D:82:50:97:7B:DE:83:DF:1D:48:53:DA:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/896DA402488611EC93F32F37D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.164.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:f8:72:32:de:3c:87:01:9b:cf:c8:d7:78:da:c8:ab:13:a4:
12:2e:f1:df:2b:e2:3a:75:35:64:52:3d:e0:f2:f7:1c:33:fc:
3a:0e:50:09:35:df:d6:f5:c3:ca:6b:77:b5:9d:b4:e9:75:67:
0a:8a:36:c9:de:f3:b9:12:ed:20:5f:f8:34:98:6a:dc:27:09:
a8:ba:27:e9:45:7f:d9:f6:cd:97:b1:b9:3a:ba:29:12:7c:89:
2e:6b:61:9a:06:3e:46:61:b9:b2:8e:18:73:3d:16:bf:a6:5c:
99:04:7c:0b:b2:fb:df:1d:2c:af:30:7a:69:c1:44:a3:ee:19:
29:c9:d1:0f:a8:a3:5b:3f:07:ab:6e:92:b7:4d:6b:49:9c:a9:
a5:df:19:f7:01:1b:8e:3f:49:c6:c3:c3:d7:f2:99:0a:69:27:
16:3f:24:ab:bf:c2:0f:7c:57:cd:11:f2:3e:54:5d:24:8c:88:
56:5f:82:fa:f5:be:79:70:1b:28:f7:b5:af:4e:e3:6d:50:90:
08:cf:2f:1a:67:ad:1a:b0:97:3e:45:4d:29:35:36:32:40:2e:
0a:91:c9:bb:a8:18:6d:fa:f6:e8:d2:5d:48:af:7a:08:5c:d2:
79:f8:a0:6c:13:79:3b:b9:ec:92:00:0f:20:8b:09:24:d9:35:
8a:ec:30:7e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDWgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTExMTkxNTQ1MThaFw0yMjExMTkxNTQ1MThaMBgxFjAU
BgNVBAMMDTYxOTY3NTExLWQ5M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIvSnuaQG2Ae3YNE2y+K0kRnAST7KDi+kbcHWDKEd/wMlK79PxO+emYZTh
E+B8Aj0r6eNN6IRWDqaeJx9rj/yeZ+RzcdAFMYYGx3k5S8CAoCKIL6Sr+jWXRyHk
4IYo4+r/rMtSIPgX5lyc1ieJYXlz0+VneV08WS/Kmvl3lwg3lmoZ8sjvdU2Ym+1y
TtTJvAZF2USTBS/P04ZzmLOmZKJeca7UhEfdmOoBlhC05zxqFqnYOLT4GdOYNVOi
l/NfD/+E98cbX9Uoxo09w2ifYmLCCy8qje6N/aE8/EkD6wuhjAeqNrDV1/sBXhet
yJ+to7QOtp2FC8IJNA3ChxWwYdx7AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU+ACm
cDTNzk2CUJd73oPfHUhT2lcwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4Lzg5NkRBNDAyNDg4NjExRUM5M0YzMkYzN0Q4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc+aQwDQYJKoZIhvcNAQELBQAD
ggEBAFr4cjLePIcBm8/I13jayKsTpBIu8d8r4jp1NWRSPeDy9xwz/DoOUAk139b1
w8prd7WdtOl1ZwqKNsne87kS7SBf+DSYatwnCai6J+lFf9n2zZexuTq6KRJ8iS5r
YZoGPkZhubKOGHM9Fr+mXJkEfAuy+98dLK8wemnBRKPuGSnJ0Q+oo1s/B6tukrdN
a0mcqaXfGfcBG44/ScbDw9fymQppJxY/JKu/wg98V80R8j5UXSSMiFZfgvr1vnlw
Gyj3ta9O421QkAjPLxpnrRqwlz5FTSk1NjJALgqRybuoGG369ujSXUiveghc0nn4
oGwTeTu57JIADyCLCSTZNYrsMH4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org