Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CB6D5720CB511EDAE62768CF1222468.roa
File: 8CB6D5720CB511EDAE62768CF1222468.roa (raw, json)
Hash identifier: XL3HMhd1nk34aoDyZ9R3XWZOGLyKE7RFRujyeqDOytQ=
Subject key identifier: 6F:62:9E:1A:4A:FE:BE:63:5D:BB:9E:AA:49:E1:E3:27:D6:F0:4E:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 15B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CB6D5720CB511EDAE62768CF1222468.roa
Signing time: Tue 26 Jul 2022 07:35:41 +0000
ROA not before: Tue 26 Jul 2022 07:35:37 +0000
ROA not after: Sun 15 Jan 2023 07:35:37 +0000
asID: 149981
IP address blocks: 156.225.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5560 (0x15b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:35:37 2022 GMT
Not After : Jan 15 07:35:37 2023 GMT
Subject: CN=62df994d-dd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:a6:88:4c:a8:c5:cf:ba:f9:ef:e7:3a:11:
84:64:ea:41:13:e4:4e:c0:b6:32:37:a0:f5:5e:b2:
81:42:b2:5e:23:62:0d:e9:73:e2:f3:c6:03:ae:21:
dc:b4:b8:e6:ad:2f:8c:31:ee:ad:56:61:b2:a1:bd:
37:11:5e:a1:62:e8:11:41:46:36:35:11:e7:ab:7a:
cd:b1:d2:6a:e6:14:5b:27:06:8a:4a:f6:22:76:7d:
b2:ad:79:aa:d2:41:6a:0c:ae:8a:11:90:eb:02:97:
96:67:6a:67:17:b1:95:e7:d1:61:bb:7b:58:af:07:
ff:c5:4c:5e:b7:b4:c9:fa:32:98:90:6c:bc:37:12:
80:67:21:ac:ef:d6:92:ac:5b:3c:52:0c:2c:ad:39:
d5:49:1e:ac:41:2e:f7:20:8e:49:fe:24:bd:82:85:
ea:61:f5:32:be:d6:28:e1:fc:74:f6:36:e8:94:c7:
e6:b5:07:be:58:4c:85:e8:67:4f:69:7d:80:44:ef:
36:41:b6:51:e4:a2:ed:5f:90:3d:d3:11:00:49:e7:
d3:ac:89:44:8a:87:a8:80:9d:25:72:6b:d4:a6:9f:
30:10:49:d5:ff:bb:1e:68:68:a3:68:06:65:99:68:
b4:d1:ed:a0:80:80:1a:46:7c:63:64:ce:eb:38:3f:
06:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:62:9E:1A:4A:FE:BE:63:5D:BB:9E:AA:49:E1:E3:27:D6:F0:4E:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CB6D5720CB511EDAE62768CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.102.0/24
Signature Algorithm: sha256WithRSAEncryption
07:7e:94:d4:d2:56:b9:79:89:7a:bf:ba:ae:34:26:9a:1d:0c:
ec:3d:cb:ed:96:26:1c:fd:d7:84:69:1e:fd:e1:2c:42:39:05:
80:7a:75:4e:08:9d:f2:b5:a0:4b:36:71:2a:33:27:c4:22:b3:
90:52:42:ce:5e:4f:60:db:d5:dd:60:12:fa:81:7e:76:c3:8f:
4e:9f:46:ff:3d:35:cf:b6:d5:93:a9:ec:1e:d0:12:f9:04:a0:
0d:52:96:d4:6f:95:68:d3:c3:03:0b:44:a2:d7:ec:db:b8:3a:
c1:ae:8f:68:46:d9:32:57:ee:1a:af:76:71:05:73:97:b9:42:
25:01:14:47:71:4a:24:58:27:93:06:a8:9a:d9:ac:85:3a:20:
c3:3a:7e:cb:f2:ed:f6:11:67:36:be:be:04:0f:b6:de:95:df:
4d:6e:e3:90:d1:23:43:f3:22:be:a3:51:e3:f3:d7:b9:f3:e3:
58:dc:28:15:54:90:3e:cc:77:0b:70:9c:84:81:17:21:57:73:
54:6e:67:d8:4d:8b:88:71:37:c0:d3:b3:77:2a:52:84:a4:4c:
7d:80:e9:b5:3f:fc:01:36:a0:0e:66:3b:af:8d:11:b3:10:66:
42:e3:97:e9:ad:37:36:8f:91:8e:91:b9:8a:e9:aa:86:76:25:
6f:94:7c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org