Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1CEF03A395E11ED8ADA17ABF1222468.roa
File: B1CEF03A395E11ED8ADA17ABF1222468.roa (raw, json)
Hash identifier: SrTPncf+RVkS90oEd6nze93uf1iJ9yB40tHuZVpyf4Q=
Subject key identifier: 4F:42:A8:8C:64:33:D9:A1:65:44:83:05:A1:A5:E7:9D:56:81:DE:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 181F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1CEF03A395E11ED8ADA17ABF1222468.roa
Signing time: Wed 21 Sep 2022 03:37:19 +0000
ROA not before: Wed 21 Sep 2022 03:37:15 +0000
ROA not after: Fri 30 Dec 2022 03:37:15 +0000
asID: 35916
IP address blocks: 156.225.68.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6175 (0x181f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 21 03:37:15 2022 GMT
Not After : Dec 30 03:37:15 2022 GMT
Subject: CN=632a86ef-e169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:3f:73:9b:6f:81:cb:50:fa:c9:8a:11:34:
b3:9c:5f:30:52:6b:40:fb:53:98:b8:f6:dd:f0:e6:
8a:ae:b7:34:dc:2f:62:c0:08:f0:27:03:58:1a:a0:
7b:05:e6:22:0c:8c:02:74:46:76:f7:5d:d2:74:96:
aa:5d:fd:9f:a7:7b:b6:0e:08:8d:3e:eb:03:0e:82:
56:3b:eb:17:14:ed:3c:1d:47:d5:2f:87:ff:38:b9:
fb:00:fb:09:59:37:b1:b1:16:b3:3a:1c:6b:4b:3f:
ba:39:c1:b0:4b:80:0b:b1:46:23:f4:56:44:f0:1a:
4e:96:6e:e4:d4:f5:1f:aa:cd:1c:2d:fd:e3:83:d5:
ca:cc:52:09:18:ae:c9:6e:3a:cf:ca:06:63:bb:67:
e0:84:11:47:98:dc:ed:a0:24:a1:87:bb:54:03:70:
1b:2e:d6:8b:2d:2d:e9:49:24:ae:9e:9a:df:1c:bd:
d9:31:53:24:42:d2:43:12:a4:9b:b2:44:ab:fa:f9:
e1:c4:fb:46:d8:ee:8b:98:fb:5c:0c:eb:b5:8f:88:
39:11:e0:e8:d3:a7:7e:ac:41:66:55:75:ad:95:13:
30:29:79:2e:84:93:92:44:c0:06:ce:8d:e1:ae:1e:
97:c4:a2:17:67:1d:43:1d:82:9b:fb:76:78:cc:bf:
92:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:42:A8:8C:64:33:D9:A1:65:44:83:05:A1:A5:E7:9D:56:81:DE:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1CEF03A395E11ED8ADA17ABF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.68.0/22
Signature Algorithm: sha256WithRSAEncryption
77:d3:61:e1:38:4c:86:53:8d:03:cf:63:d9:31:e3:d3:fe:0d:
96:d5:62:19:99:0d:11:2f:4f:bd:1a:0a:09:08:3e:be:29:06:
98:06:78:f4:07:9d:56:eb:fd:e4:b5:fa:2f:53:92:3f:9e:48:
88:cf:19:85:80:c5:04:d8:df:d8:ef:8c:9f:cc:dd:66:b9:84:
10:1a:34:00:e9:85:a0:c2:a4:9e:5e:29:33:33:ee:10:63:01:
77:1b:50:8a:d9:98:39:92:5f:4b:19:fa:11:a1:e9:12:8b:32:
ef:41:29:8a:d0:ba:b7:df:e3:21:a2:16:48:c3:d4:06:2d:7a:
5d:cc:80:e0:7e:a7:d6:14:db:47:1c:1b:0c:5a:f9:21:35:50:
87:5b:8b:2c:0e:59:7c:6c:39:76:c5:73:ff:5d:71:11:03:d2:
52:48:b7:7d:7d:c5:ad:9f:a0:21:8a:ec:ef:f3:87:37:f6:2d:
7c:0f:64:71:88:3e:bd:bf:ba:ad:90:12:94:0b:cb:b6:57:74:
b6:94:2b:7e:54:76:fe:73:5a:53:50:5d:66:8f:87:91:9b:b9:
aa:d4:bc:6d:05:e7:ca:d2:0b:c7:da:2c:cf:e6:9a:7d:99:9e:
51:5d:f1:b5:b6:12:49:28:64:ee:0b:95:b3:fb:99:0d:b2:89:
b5:92:93:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-ams.rpki-client.org