Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBE51488C47D11ECB7B36A8BF1222468.roa
File: BBE51488C47D11ECB7B36A8BF1222468.roa (raw, json)
Hash identifier: 4GKrYsZtYjmhUTMBHQv+B5z38WfEx5fl1q0bxCirzyQ=
Subject key identifier: E9:15:1D:CD:DE:69:A2:0A:8E:65:91:C3:A4:7E:C5:77:13:14:6E:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1380
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBE51488C47D11ECB7B36A8BF1222468.roa
Signing time: Mon 25 Apr 2022 09:54:44 +0000
ROA not before: Mon 25 Apr 2022 09:54:41 +0000
ROA not after: Mon 30 Jan 2023 09:54:41 +0000
asID: 139057
IP address blocks: 156.251.72.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4992 (0x1380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 09:54:41 2022 GMT
Not After : Jan 30 09:54:41 2023 GMT
Subject: CN=62666fe4-72fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:59:d7:c2:17:7f:e6:71:6e:6c:14:f6:2d:
37:83:91:af:00:c9:b8:7d:d0:4d:ec:63:9b:46:d3:
63:6a:c8:5c:bf:3c:95:f5:d0:25:57:68:c6:20:f3:
a2:24:56:51:92:ea:7a:76:12:02:fe:7c:b5:8a:f6:
af:c5:85:f3:4b:4b:32:e5:3e:4d:30:ce:68:2e:19:
d5:77:3f:6f:6c:23:72:96:76:d1:60:32:ba:22:22:
0e:12:cf:7b:c3:29:d8:5a:f8:93:61:39:16:cb:9b:
1b:2e:ce:21:9a:d3:73:8d:a0:75:c3:2b:c8:b7:c4:
70:2a:8b:1d:c8:c5:00:03:56:05:f6:a6:ed:c7:c5:
55:49:89:3d:b4:dd:9d:be:69:1c:78:61:70:6d:0f:
ac:1c:27:6c:66:13:bf:42:d7:f9:33:db:da:e2:cf:
8c:bd:87:34:73:e8:d3:47:b5:e6:fa:4e:bd:76:3d:
56:de:c4:fa:38:f7:68:99:4c:59:e5:5d:e8:83:b4:
41:1a:ee:bd:8a:4c:df:34:cc:b0:04:b4:04:e6:15:
af:a4:8d:16:e7:72:42:f6:3f:4a:f1:7e:2a:16:3c:
c4:4c:a1:b3:78:df:95:d6:64:bf:9e:1e:02:f9:87:
a7:86:dd:a4:07:4b:0e:23:e9:83:5f:3e:c8:90:8d:
40:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:15:1D:CD:DE:69:A2:0A:8E:65:91:C3:A4:7E:C5:77:13:14:6E:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBE51488C47D11ECB7B36A8BF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.72.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:ff:de:66:b5:19:ac:33:b4:32:0b:3e:61:98:85:40:7f:6e:
91:c4:7c:10:93:0c:79:c0:d0:9a:d6:5d:c1:e3:73:2d:e6:b4:
56:7f:16:ee:5a:95:a9:9f:05:cc:f9:8b:28:ff:91:33:a4:8f:
1d:54:fc:56:1e:8f:64:c4:dc:b8:72:8c:a5:a9:a6:c3:8a:25:
4b:13:41:fa:4d:c5:87:38:75:09:5f:d4:fe:75:d8:20:9d:02:
1c:ce:a9:9b:d1:e7:b9:2c:af:98:1d:a3:b1:a6:42:cf:4d:ad:
05:25:4b:e2:55:c4:d1:72:b2:36:d9:82:c6:66:d4:cf:59:6b:
aa:4e:28:a6:12:16:78:e1:d0:7a:5f:fb:cb:68:e7:3b:21:10:
1c:4a:6f:b5:aa:57:1e:5a:47:f8:af:2b:a8:99:87:b6:f4:c1:
55:63:6c:32:a6:22:b5:6d:9d:2f:75:70:a7:59:df:52:ba:22:
00:dd:d6:20:a2:83:22:65:a1:e7:89:62:66:8c:3a:c4:cc:51:
31:41:16:71:37:22:84:5b:71:13:51:6b:99:ac:ba:6f:b3:d9:
48:6c:3d:30:47:8b:16:c9:34:a9:60:9e:41:77:78:ca:d2:70:
3b:02:05:17:6a:72:95:81:41:27:9e:8a:a4:a8:02:84:da:e4:
77:a3:16:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-ams.rpki-client.org