Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B295FD70031B11ED90C8C888F1222468.roa
File: B295FD70031B11ED90C8C888F1222468.roa (raw, json)
Hash identifier: WXmGT1MNiWyqcfzYSHpLFoqSSJv4mk2CC5bcncL2kHM=
Subject key identifier: 28:ED:D7:9E:81:F5:91:C5:94:1B:3A:5B:75:3A:F8:BA:BC:30:CC:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1562
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B295FD70031B11ED90C8C888F1222468.roa
Signing time: Thu 14 Jul 2022 02:21:41 +0000
ROA not before: Thu 14 Jul 2022 02:21:38 +0000
ROA not after: Fri 20 Jan 2023 02:21:38 +0000
asID: 139811
IP address blocks: 156.240.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5474 (0x1562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 02:21:38 2022 GMT
Not After : Jan 20 02:21:38 2023 GMT
Subject: CN=62cf7db5-20ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c5:f1:0d:72:13:5a:6d:3a:e8:5a:c0:5d:96:
ca:9a:e2:99:1b:e1:af:ae:c5:3f:c1:06:cd:b4:e3:
0f:37:51:f2:cb:06:1a:b4:0f:65:04:43:42:36:9d:
dd:d9:48:df:66:ee:32:34:c0:06:38:8b:9b:a8:e9:
3c:4d:1b:e0:0b:d5:d7:e0:52:7c:ae:8a:6f:92:77:
91:65:49:77:4b:2e:1b:24:c5:35:30:dd:00:73:93:
cd:f2:94:cc:6c:1c:62:8f:87:d3:1a:e2:74:f0:8a:
56:b9:67:32:e4:1b:c1:e9:87:42:0a:45:22:34:58:
bd:2b:3e:bc:fe:2d:59:57:22:a6:ba:d5:4d:ae:ff:
de:c3:8e:9e:eb:6c:b2:9a:4d:82:4a:d7:8c:4d:26:
89:7e:55:f1:22:4b:89:84:61:00:64:2b:e2:77:93:
eb:a0:fb:46:ea:1c:a9:71:03:7a:89:9d:b2:b3:9b:
56:74:c7:fb:53:61:a8:11:89:ac:a3:f2:0c:e5:0e:
09:c9:9a:62:61:59:44:ef:67:e7:72:71:91:8e:78:
24:ea:70:08:18:96:19:7c:0b:be:44:87:2d:55:c4:
cb:75:ec:a2:41:ec:48:5c:3b:b2:2e:14:4c:ed:a9:
49:d4:4c:dd:8f:60:b1:65:3b:62:b0:49:48:2f:d9:
d5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:ED:D7:9E:81:F5:91:C5:94:1B:3A:5B:75:3A:F8:BA:BC:30:CC:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B295FD70031B11ED90C8C888F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.95.0/24
Signature Algorithm: sha256WithRSAEncryption
95:22:dc:0b:ec:1d:81:a4:32:9a:c2:8a:47:1a:1b:f8:33:22:
ee:fb:8f:0f:74:9c:1a:3d:b7:7a:a4:b9:26:82:e1:15:86:eb:
4a:98:ed:9c:b5:18:73:11:6e:94:be:6c:da:5e:5d:1b:54:21:
d3:67:0d:18:cc:da:41:92:b1:89:0c:79:d3:ef:af:c5:30:77:
6a:f5:58:11:77:c1:3e:4c:63:94:27:dd:f3:16:23:9e:1a:e1:
f0:a4:18:18:dc:c7:f6:65:89:e5:80:8a:d8:e3:ed:94:c1:a6:
7e:4e:bd:86:bf:8f:fe:a1:6d:e7:b1:57:75:dc:c2:6b:c0:50:
08:c9:26:ae:36:a0:aa:e8:4d:de:3a:4d:b2:ce:26:82:34:6f:
32:bd:c2:a8:6a:c5:a0:38:e1:1f:9a:20:8b:bc:5a:ad:7c:30:
a6:10:40:61:99:19:a1:54:72:80:e3:ac:0e:87:7d:78:ff:5f:
ca:a1:ae:ef:92:8c:7f:db:b1:d6:af:b1:99:9f:3b:63:2d:b5:
72:bb:f6:3d:a1:03:b8:0f:34:79:e6:2f:85:c9:7b:40:5d:57:
32:74:63:21:c2:4a:4b:cc:f2:1c:66:b9:0c:37:69:24:77:09:
5c:ae:9f:73:ae:b8:c6:df:5e:dd:2b:dd:78:82:08:fa:6e:e8:
af:16:83:fc
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFWIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA3MTQwMjIxMzhaFw0yMzAxMjAwMjIxMzhaMBgxFjAU
BgNVBAMMDTYyY2Y3ZGI1LTIwZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDbxfENchNabTroWsBdlsqa4pkb4a+uxT/BBs204w83UfLLBhq0D2UEQ0I2
nd3ZSN9m7jI0wAY4i5uo6TxNG+AL1dfgUnyuim+Sd5FlSXdLLhskxTUw3QBzk83y
lMxsHGKPh9Ma4nTwila5ZzLkG8Hph0IKRSI0WL0rPrz+LVlXIqa61U2u/97Djp7r
bLKaTYJK14xNJol+VfEiS4mEYQBkK+J3k+ug+0bqHKlxA3qJnbKzm1Z0x/tTYagR
iayj8gzlDgnJmmJhWUTvZ+dycZGOeCTqcAgYlhl8C75Ehy1VxMt17KJB7EhcO7Iu
FEztqUnUTN2PYLFlO2KwSUgv2dVrAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUKO3X
noH1kcWUGzpbdTr4urwwzPYwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0IyOTVGRDcwMDMxQjExRUQ5MEM4Qzg4OEYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc8F8wDQYJKoZIhvcNAQELBQAD
ggEBAJUi3AvsHYGkMprCikcaG/gzIu77jw90nBo9t3qkuSaC4RWG60qY7Zy1GHMR
bpS+bNpeXRtUIdNnDRjM2kGSsYkMedPvr8Uwd2r1WBF3wT5MY5Qn3fMWI54a4fCk
GBjcx/ZlieWAitjj7ZTBpn5OvYa/j/6hbeexV3XcwmvAUAjJJq42oKroTd46TbLO
JoI0bzK9wqhqxaA44R+aIIu8Wq18MKYQQGGZGaFUcoDjrA6HfXj/X8qhru+SjH/b
sdavsZmfO2MttXK79j2hA7gPNHnmL4XJe0BdVzJ0YyHCSkvM8hxmuQw3aSR3CVyu
n3OuuMbfXt0r3XiCCPpu6K8Wg/w=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-fra.rpki-client.org