Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE55461CC47D11EC9D62438BF1222468.roa
File: AE55461CC47D11EC9D62438BF1222468.roa (raw, json)
Hash identifier: ZwUe1oubT6aGeZXaGs8UvQKSz5si1SAkxjHbVrGwPng=
Subject key identifier: BA:8F:CB:F1:86:40:10:F8:F9:7D:91:B5:45:C0:6E:D1:C1:AA:E1:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 137E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE55461CC47D11EC9D62438BF1222468.roa
Signing time: Mon 25 Apr 2022 09:54:22 +0000
ROA not before: Mon 25 Apr 2022 09:54:18 +0000
ROA not after: Mon 30 Jan 2023 09:54:18 +0000
asID: 139057
IP address blocks: 156.251.76.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4990 (0x137e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 09:54:18 2022 GMT
Not After : Jan 30 09:54:18 2023 GMT
Subject: CN=62666fce-eb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:d4:ab:f5:9b:f5:37:2a:4b:19:8f:f1:de:
83:94:68:4b:a0:bc:d9:63:bd:e1:0b:47:1f:33:e5:
87:2d:bf:e7:f1:30:67:77:2d:c7:0f:99:5a:5b:b7:
3d:06:e0:41:7d:51:e3:e8:ae:fd:b6:43:15:65:49:
b2:fa:30:8a:46:e5:2d:e6:f4:73:46:55:a7:a6:ba:
b8:2c:a8:ea:b0:4c:11:16:f5:a4:48:78:34:4e:bf:
55:86:44:28:73:fc:2a:69:12:ef:c9:28:7b:0a:b1:
87:12:c7:72:05:f0:1b:ff:6b:bf:e1:fb:ce:d4:63:
b1:86:a9:d0:5a:c7:f0:c2:c3:fc:c9:6e:73:f8:2b:
c3:c9:15:fa:df:68:e6:98:df:b0:d3:34:b6:99:8a:
47:98:01:55:08:dd:e8:0a:e9:20:dc:e7:de:d0:b1:
09:80:e8:30:07:31:53:e3:a0:7e:1e:45:5f:e9:7a:
81:af:b7:6d:14:78:65:b7:0f:4d:fd:16:4a:6a:2e:
6a:40:a3:ec:1b:da:43:86:ef:9a:f9:16:bb:66:91:
e7:39:e5:08:a4:b9:e4:f5:64:4c:ea:84:0d:ae:bc:
b5:78:1d:15:68:90:2a:24:de:c2:94:bc:57:22:eb:
b9:ac:2d:a3:21:d8:d5:14:56:b9:0f:98:7b:e5:55:
ae:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8F:CB:F1:86:40:10:F8:F9:7D:91:B5:45:C0:6E:D1:C1:AA:E1:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE55461CC47D11EC9D62438BF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.76.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:56:2b:d0:66:64:13:92:d4:42:00:28:c1:ff:73:ee:56:50:
d1:b0:87:b4:e6:4b:e6:51:b5:b2:7e:d7:78:5b:5a:00:ce:be:
5e:9a:38:41:e2:31:6b:f6:f9:f1:7a:9c:bb:9c:95:b7:c1:21:
ae:f7:83:86:02:0d:2f:0d:e3:58:86:f0:96:e3:11:cc:c3:cc:
75:bf:9d:1a:05:66:d1:ed:6a:4f:37:86:da:8d:4a:d4:6c:f5:
13:96:98:6e:65:c0:49:b1:68:3e:81:21:59:b0:dc:fc:db:aa:
17:c8:f9:9c:f9:32:c8:53:42:8a:5e:3d:4a:f4:f4:82:19:4c:
8b:74:10:41:a2:14:a8:ca:25:32:37:e3:5c:d3:d0:25:80:bf:
14:8d:83:cf:97:26:54:94:5d:d7:82:71:eb:e5:99:3a:2b:f3:
be:f9:1b:eb:b2:e3:66:c8:40:9d:76:60:ab:52:ed:fa:a8:b4:
6e:be:72:8f:07:6f:07:23:55:30:ad:8d:d7:6f:82:34:c2:e4:
df:27:33:32:85:d0:fe:be:bc:d5:dd:80:51:9e:4f:c6:71:66:
52:99:bc:41:6f:66:73:49:3f:68:97:f4:59:19:97:c3:94:04:
c6:5e:2a:f8:ca:50:46:30:2f:a5:91:07:e8:20:12:35:fb:64:
4b:7c:e0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org