Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8E19AF6816911EC83F0C26C5A40D577.roa
File: B8E19AF6816911EC83F0C26C5A40D577.roa (raw, json)
Hash identifier: NQJrMHbWMR6OAjmf4Y1eZBvAECLt6gwx4KgUQu0JYpE=
Subject key identifier: 36:26:4F:CC:4F:BB:25:4E:F8:2D:76:C8:E6:03:78:AD:BF:30:13:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 11BE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8E19AF6816911EC83F0C26C5A40D577.roa
Signing time: Sun 30 Jan 2022 01:12:42 +0000
ROA not before: Sun 30 Jan 2022 01:12:37 +0000
ROA not after: Tue 28 Feb 2023 01:12:37 +0000
asID: 1239
IP address blocks: 156.227.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4542 (0x11be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 30 01:12:37 2022 GMT
Not After : Feb 28 01:12:37 2023 GMT
Subject: CN=61f5e609-0da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:04:71:e7:c5:94:ab:69:fa:3e:52:e0:96:
f8:79:57:d4:1b:c8:e8:6f:1e:cc:d3:37:a5:89:39:
4e:ae:f0:66:62:cd:b5:b9:ac:65:ae:6f:ce:aa:27:
91:67:57:77:56:d1:36:fa:10:96:6d:7d:a6:cf:3d:
04:77:4e:1b:95:de:af:c8:90:17:6f:fb:aa:06:c6:
cf:31:5e:03:19:20:cc:df:c8:c4:4b:2a:4a:4c:42:
25:a9:49:5d:9c:12:bd:eb:13:1f:ac:d4:e0:4b:2a:
6c:13:be:da:fc:d6:93:5d:d5:f6:86:b9:f3:ef:76:
ff:fc:00:25:9b:41:6e:b6:d6:dc:1e:91:38:13:86:
99:ba:b9:d0:20:65:f3:3e:d9:50:a2:c7:d5:9e:68:
96:02:2d:eb:15:a8:e5:57:a1:c7:75:b4:c4:fd:07:
4e:ff:6f:a5:f8:5a:ee:72:bf:4a:3c:21:03:16:97:
40:04:e2:c9:7c:d5:0b:d3:b7:2f:bc:cb:72:93:f5:
78:02:de:f7:27:30:e6:73:f0:3a:ec:98:dc:ab:0b:
40:c4:15:d8:94:8a:c0:e6:8b:ce:87:4c:95:19:ae:
2d:1c:03:f0:92:09:18:4d:0f:88:4c:e5:eb:b5:22:
66:23:17:b7:42:27:30:a6:27:55:9d:ec:21:d8:10:
15:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:26:4F:CC:4F:BB:25:4E:F8:2D:76:C8:E6:03:78:AD:BF:30:13:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8E19AF6816911EC83F0C26C5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.128.0/18
Signature Algorithm: sha256WithRSAEncryption
67:e8:4d:c1:83:4a:a8:0f:d1:6b:2f:56:0b:59:20:42:13:69:
b6:7f:67:0e:31:88:8c:40:6b:9d:24:27:9f:24:a5:11:4a:8b:
73:1c:87:0c:3f:2e:2a:45:ba:18:8c:3e:9b:0c:a9:3e:8e:cc:
0b:a4:52:c6:5f:3a:7e:b2:be:55:02:fe:8a:98:77:66:73:95:
67:7e:28:70:7b:46:85:03:03:25:fd:9a:c1:0a:49:b1:4f:cd:
f8:14:f5:ca:09:5c:3a:a7:82:c7:2e:f5:bc:79:a3:b9:f1:22:
60:18:3c:15:0b:e6:92:0a:9c:a2:ef:c9:3b:8d:e4:e6:d4:33:
9a:ee:e8:ed:0c:92:ca:6a:86:b2:fe:e3:b6:f1:89:6d:34:41:
41:2e:1b:79:d5:d0:71:b1:a6:fa:99:a9:7d:4c:f6:5d:bf:98:
1a:13:76:4a:04:58:a5:8a:38:70:15:25:7e:8f:3c:03:3c:42:
e4:20:d8:5d:47:4b:65:97:d1:ec:68:8e:f2:d6:b6:76:21:03:
44:01:3e:1f:ba:52:c9:ba:2d:67:13:ef:11:f5:5d:a2:c5:97:
55:7d:0d:0d:74:98:3c:8d:8b:0c:68:71:bc:4a:8d:ba:4c:4d:
a9:1f:25:6a:93:f0:17:56:78:02:8e:9d:a9:7b:67:ff:29:7d:
8a:d6:ff:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-fra.rpki-client.org