Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD7964183E2911ED858E49F4F1222468.roa
File: BD7964183E2911ED858E49F4F1222468.roa (raw, json)
Hash identifier: yNyRwaaAb9pFSyC7ADsoALGoCEah1KcUfCg6xeJ6nK4=
Subject key identifier: 55:B2:11:A7:0C:10:5B:9A:E8:82:D3:77:0B:FC:18:24:EF:3D:FB:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1874
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD7964183E2911ED858E49F4F1222468.roa
Signing time: Tue 27 Sep 2022 06:00:51 +0000
ROA not before: Tue 27 Sep 2022 06:00:46 +0000
ROA not after: Sun 15 Jan 2023 06:00:46 +0000
asID: 1239
IP address blocks: 156.225.68.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6260 (0x1874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 27 06:00:46 2022 GMT
Not After : Jan 15 06:00:46 2023 GMT
Subject: CN=63329193-54cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:b0:31:c8:4d:bc:1c:09:56:15:be:13:80:
de:dc:6d:44:b3:05:30:14:90:53:03:f5:38:c2:84:
67:bc:da:f7:10:df:35:ef:4e:e9:82:fc:4d:f5:06:
05:00:1d:21:af:6e:af:ea:c9:ca:2e:75:e0:09:2f:
ad:25:aa:62:5e:94:43:cc:d1:6c:5f:4f:3b:2e:c9:
73:ae:59:e9:6d:10:71:23:b4:7c:31:42:79:dd:8c:
57:cc:19:3f:84:8a:36:2a:48:52:ed:f8:d4:50:d1:
d3:31:0b:5e:cd:fe:6e:a4:89:9f:65:eb:59:8a:05:
6a:6a:dc:27:11:51:83:df:7a:ab:71:bb:8c:23:1a:
c9:b7:2c:7b:2f:5c:f7:72:c5:26:6c:15:83:17:85:
fb:12:8a:f6:f0:be:41:aa:4c:15:9e:8c:1f:e3:b3:
97:f8:44:16:c1:85:95:fe:40:97:9d:96:42:54:ac:
c4:cf:b5:96:61:f4:5c:a1:bb:ce:41:bf:aa:2e:40:
32:cf:28:46:5d:07:7d:bc:d1:3c:e4:20:e4:cd:de:
ef:bb:0d:ae:00:f2:97:f5:4b:56:89:76:69:df:18:
c3:98:d3:5d:1d:15:e3:ea:42:7b:f0:f9:77:28:e4:
1b:40:02:68:77:48:76:db:ca:24:80:1f:cd:c5:1b:
68:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B2:11:A7:0C:10:5B:9A:E8:82:D3:77:0B:FC:18:24:EF:3D:FB:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD7964183E2911ED858E49F4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.68.0/22
Signature Algorithm: sha256WithRSAEncryption
45:f1:73:54:f2:ee:10:e2:8b:43:75:81:4b:94:f9:a6:cc:c5:
a1:7d:a1:4e:d8:76:38:c1:a8:2b:08:cf:17:6d:43:73:42:f2:
71:a6:dd:b6:55:a4:77:1c:84:c9:7a:da:70:bd:c1:73:aa:97:
07:d7:7b:42:98:03:12:5a:26:bd:9f:78:be:d4:2f:05:c6:21:
4d:8b:90:1b:f7:ff:b8:43:36:ae:88:e6:83:35:50:30:2e:19:
d2:f7:66:8e:64:a4:ef:0b:b6:2e:d6:40:2d:ab:40:65:b3:88:
f5:f7:9b:78:8b:35:f1:13:80:2f:c6:9a:2c:f6:2b:0c:65:f1:
c5:9b:99:21:d1:7c:fe:a0:57:e5:14:d4:42:00:09:87:11:ac:
fc:b0:e3:10:81:6b:c6:90:79:41:e9:34:75:95:4c:da:92:c1:
58:63:d3:d5:85:62:5e:08:9f:ed:e7:df:1c:b8:e6:a4:01:4d:
ac:2b:6a:cd:08:5e:70:bd:31:a6:ad:53:78:6d:4c:92:2e:26:
1c:60:94:5d:3c:11:6b:32:3b:f4:39:5a:f8:6d:18:5c:5c:28:
3c:ac:ca:d3:fe:d9:e6:a0:0a:de:f7:e6:01:86:c9:0c:7b:eb:
d0:3b:77:2e:e5:12:3f:df:98:35:84:ef:5b:31:6f:59:54:50:
fa:20:38:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:26 2023 by rpki-client on console-ams.rpki-client.org