Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97BE3960735911EC94EC46BC5A40D577.roa
File: 97BE3960735911EC94EC46BC5A40D577.roa (raw, json)
Hash identifier: +M/3kv0gHk0NvRT+tReQGKddRCNumIpYORrqv+dkFXo=
Subject key identifier: 9D:3A:7C:D4:EA:DA:2B:DC:AE:EC:67:76:B5:3E:C1:DC:B7:42:A4:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1155
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97BE3960735911EC94EC46BC5A40D577.roa
Signing time: Wed 12 Jan 2022 03:41:58 +0000
ROA not before: Wed 12 Jan 2022 03:41:54 +0000
ROA not after: Sun 31 Jul 2022 03:41:54 +0000
asID: 149009
IP address blocks: 156.241.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4437 (0x1155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 12 03:41:54 2022 GMT
Not After : Jul 31 03:41:54 2022 GMT
Subject: CN=61de4e06-50c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:75:07:3a:4b:c2:97:09:f7:75:3f:87:5f:21:
3a:f1:6a:48:9e:21:f1:e0:8c:e1:6f:42:b2:24:ab:
a2:01:97:4b:a5:dc:15:c2:f5:77:1d:f4:09:f8:55:
b3:76:b1:f1:95:d6:89:59:99:ab:1d:9b:68:a0:35:
e1:5a:f1:8b:88:33:55:a2:38:6f:59:34:9a:41:93:
da:96:a4:78:c2:01:75:ec:67:af:64:f7:c0:38:bc:
26:89:4a:1a:ad:64:cf:20:4c:1d:1a:90:dc:c7:71:
d0:dc:cd:fe:80:e3:f0:61:31:99:a5:56:c0:ab:c9:
ff:a8:18:3e:d1:4a:21:b6:ed:1c:cc:6a:a3:19:50:
8b:90:c1:90:34:92:33:5e:97:6d:0d:d7:2b:29:58:
f1:6a:c5:e3:de:b7:2d:28:28:10:90:a7:6b:60:f8:
82:23:ef:ef:5a:89:92:5b:27:cb:80:be:16:79:a3:
2f:01:db:8c:d5:1d:92:b5:40:a1:0d:20:0d:d1:07:
a9:bd:4f:8e:fd:b0:3b:76:21:a6:25:04:8b:a1:2b:
cb:10:e6:40:a1:bd:9b:b7:e7:d0:b7:aa:68:0a:78:
86:b0:5a:97:a9:6d:f9:12:96:84:d6:c4:5c:6f:c5:
c8:81:57:7e:46:24:a3:e6:c8:c8:01:38:c1:f7:16:
87:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3A:7C:D4:EA:DA:2B:DC:AE:EC:67:76:B5:3E:C1:DC:B7:42:A4:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97BE3960735911EC94EC46BC5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.249.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:7d:fd:c0:95:bf:af:a6:57:82:21:73:78:3c:fe:24:96:57:
0e:1b:b8:91:d0:c0:32:06:7e:91:88:ea:0d:6b:37:d8:25:fd:
10:21:b2:1f:96:3e:ca:0a:e6:c5:2c:b0:17:1d:94:63:40:ea:
0c:9d:5c:a6:22:e4:d5:b1:59:74:69:6e:b2:f9:14:54:d8:75:
92:fe:e8:22:37:d8:d2:7e:e2:65:0e:17:3b:b6:ae:54:c9:e9:
6d:ee:45:cb:72:f1:8f:e3:f9:ff:3b:35:61:a6:db:05:97:82:
61:63:84:82:db:cc:f5:6a:36:aa:01:e2:43:7b:f0:95:21:ae:
60:c8:95:5e:a7:d0:3d:9c:1e:d9:95:94:0a:d3:56:0d:b6:9d:
c8:95:6d:7b:a0:b7:a2:82:15:3d:2f:79:98:d1:ca:03:2e:a7:
14:93:ea:79:24:f5:43:fa:49:3f:a5:6e:79:ba:92:93:bf:0f:
be:98:a7:c4:fa:df:da:85:fc:bc:59:50:1d:b4:70:3c:99:41:
86:3f:8d:ee:12:35:32:17:7f:74:41:ae:bb:70:5b:d6:e1:38:
31:ca:a8:53:e8:35:cc:a7:09:c1:d3:7a:1d:f5:54:d7:05:6a:
13:c3:95:d6:cd:90:da:7d:d2:84:f3:38:ca:8f:ce:27:22:ae:
9e:9a:d2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-fra.rpki-client.org