Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4F0546EC47C11EC9158D487F1222468.roa
File: A4F0546EC47C11EC9158D487F1222468.roa (raw, json)
Hash identifier: mFtHVX3qGCo+Mc172Nh86yfd065g2M8aqaegh/1iRBs=
Subject key identifier: BE:26:95:03:79:62:B9:A6:B8:47:01:ED:1E:CE:43:D1:7D:9C:A3:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1362
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4F0546EC47C11EC9158D487F1222468.roa
Signing time: Mon 25 Apr 2022 09:46:56 +0000
ROA not before: Mon 25 Apr 2022 09:46:53 +0000
ROA not after: Mon 30 Jan 2023 09:46:53 +0000
asID: 139057
IP address blocks: 156.251.64.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4962 (0x1362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 09:46:53 2022 GMT
Not After : Jan 30 09:46:53 2023 GMT
Subject: CN=62666e10-b4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:ac:ae:85:63:29:63:77:68:ab:e7:e5:ac:
94:8f:ab:82:0e:c8:4f:7d:bb:65:49:aa:65:b1:5c:
27:1a:c1:d9:3e:5d:92:40:75:00:b6:59:15:02:7e:
df:d0:c6:4e:ef:77:3e:e1:df:85:23:7d:6e:01:30:
52:e0:f8:ff:ba:07:84:5b:1e:63:3e:49:22:be:e5:
e8:d5:39:ed:40:ec:60:1a:10:29:8c:be:20:96:a2:
41:2d:d4:9a:3d:00:04:41:a0:b7:05:15:a2:11:0d:
66:ae:2d:fd:99:8e:02:14:2e:37:97:36:34:ed:b8:
93:e8:9e:e3:63:ff:c6:75:bc:17:b4:6e:f7:b0:0f:
93:3a:d7:f7:75:ac:e5:73:04:76:f3:d4:63:9e:6a:
e8:97:a0:01:83:a9:4f:53:84:ab:0d:a6:b7:8b:59:
5e:3f:f4:c0:24:a1:32:10:2e:27:22:aa:f5:a3:03:
cf:8f:17:6d:e8:d2:7b:44:6f:4b:64:8d:d2:33:0b:
9f:19:00:c5:8c:39:e8:25:91:af:82:b2:21:56:14:
d2:a7:c3:dd:16:d6:33:e4:86:98:f6:a0:1f:6e:c7:
50:20:bd:27:33:d1:7c:5a:5c:eb:02:0c:09:7d:72:
8c:fa:ec:89:9e:de:64:c3:91:c0:3e:23:8b:ab:f5:
24:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:26:95:03:79:62:B9:A6:B8:47:01:ED:1E:CE:43:D1:7D:9C:A3:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4F0546EC47C11EC9158D487F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.64.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:a2:d0:7b:ee:cd:e1:66:dd:af:ca:be:73:a8:a8:cd:4b:d9:
c7:bb:a4:57:87:bc:30:00:0d:63:4a:26:5f:62:a0:55:c8:1c:
3e:ff:fd:81:3e:70:0f:b3:14:eb:a5:21:5f:b1:61:df:80:8c:
f4:89:f0:ad:5d:8d:86:1c:8a:ca:f8:1b:7b:e3:9d:e5:38:b2:
bd:52:a2:6e:32:4d:26:a1:67:76:f6:51:94:8f:bf:86:40:c0:
bd:d8:35:9d:37:82:59:01:7f:ce:38:1f:7e:d1:d3:7d:49:09:
9e:10:cf:12:d5:52:73:5f:54:ef:37:54:0a:18:02:5b:cf:33:
76:98:80:92:88:b2:0b:7c:d6:33:03:26:67:1b:b8:6b:4c:4a:
da:85:49:51:5e:aa:0c:6a:3c:48:5e:36:f4:c1:a6:e1:d8:7b:
67:7b:69:c1:d2:f0:22:9c:b5:45:a5:a6:ec:28:0d:a8:e3:d1:
02:c7:a4:e9:fe:84:e1:44:71:39:f9:38:10:27:57:bb:8a:16:
d1:1b:e1:ec:9a:2f:54:63:d6:52:48:ce:00:ab:4a:cc:2f:83:
e5:8c:78:de:69:55:4a:3c:fa:9a:ec:39:e9:35:f3:0a:86:07:
e0:dc:a3:48:37:d9:f9:49:a2:0f:6e:bd:3d:76:16:e7:85:5d:
79:67:64:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org