Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C144C47A1EBC11EDACC20BD9F1222468.roa
File: C144C47A1EBC11EDACC20BD9F1222468.roa (raw, json)
Hash identifier: 7eraqP1APY3/l4NHFnZvkLa1WidTbiFmXxQpsSvVak0=
Subject key identifier: D8:9A:06:DA:1E:79:98:A5:79:46:BA:1D:B4:72:4B:86:AA:80:9D:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 16DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C144C47A1EBC11EDACC20BD9F1222468.roa
Signing time: Thu 18 Aug 2022 06:12:36 +0000
ROA not before: Thu 18 Aug 2022 06:12:32 +0000
ROA not after: Tue 15 Aug 2023 06:12:32 +0000
asID: 137962
IP address blocks: 156.225.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5851 (0x16db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 18 06:12:32 2022 GMT
Not After : Aug 15 06:12:32 2023 GMT
Subject: CN=62fdd854-7026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:9a:b1:ef:b3:a0:f4:ec:1a:58:a9:f9:e6:
14:c0:fb:e4:0e:71:f6:27:ca:5c:ea:fc:68:9a:6b:
a2:b3:af:5a:76:de:2c:c9:28:7d:aa:d6:dc:c2:c7:
1b:cd:09:0a:09:68:92:85:fd:8e:fd:9b:da:4b:f1:
8f:17:e0:98:59:7c:4a:f4:64:41:4a:79:ce:72:39:
88:f5:6b:97:a5:22:7b:38:5c:31:1c:f9:ec:26:8a:
f5:7a:21:35:ab:af:d5:73:0e:d5:7c:28:29:a1:d5:
eb:b1:69:9d:e1:e9:39:6c:d2:a1:5f:7d:e8:23:bf:
4a:e6:d5:25:ce:8c:14:1d:66:f1:9c:4e:39:a8:6c:
52:fa:b0:39:43:2a:b1:40:3b:f1:4e:70:2a:4b:d7:
29:c0:a3:32:d0:4e:73:0b:2b:52:f7:9e:c5:0d:f5:
6e:70:b3:9d:61:e1:fe:fc:c2:b0:29:df:08:10:9f:
29:ea:c1:01:a1:66:0d:f6:c8:88:23:e8:15:a8:2c:
df:3c:8c:8c:4f:23:ba:9f:7d:af:e8:a1:ab:53:68:
b2:95:82:e7:e6:1e:f0:db:63:11:36:69:1d:87:7c:
f3:f7:94:59:a8:9c:96:9f:c9:19:2c:6d:d7:3f:ac:
45:97:fd:a8:6e:71:3c:c4:d8:1e:e0:75:b6:b8:9f:
4a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9A:06:DA:1E:79:98:A5:79:46:BA:1D:B4:72:4B:86:AA:80:9D:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C144C47A1EBC11EDACC20BD9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.131.0/24
Signature Algorithm: sha256WithRSAEncryption
80:be:81:71:96:92:44:12:09:a8:06:bd:34:9d:73:12:fe:df:
0a:d6:5b:d6:8d:85:70:0b:14:bd:95:a1:ba:56:61:bf:1b:77:
4f:3b:d0:5d:88:fa:64:52:19:58:d5:b7:e8:91:e2:3a:c3:9b:
60:e8:ca:28:e0:b1:e2:a7:b3:80:e2:63:68:76:26:5a:f8:b4:
2b:4d:d7:c8:73:2e:ab:5c:c4:21:a8:f7:f1:6f:e0:68:c8:ee:
6d:10:b2:0b:14:93:b0:21:8a:10:78:c5:4f:94:a1:40:fb:d0:
e2:41:72:2e:3d:4a:ac:df:d8:9e:c1:cd:3d:55:08:90:fe:7a:
e9:88:74:9b:f5:f5:c5:d7:d7:09:7e:b8:ce:c7:b3:21:1a:fe:
b9:61:98:dd:29:cd:13:46:ad:fd:fa:91:7e:65:33:61:6e:fd:
70:55:58:20:2c:c2:4e:f2:d0:fa:c0:26:35:1c:24:2e:61:5f:
f6:cf:d9:68:68:4a:d7:98:f0:eb:fd:f4:c1:a8:2c:8d:08:77:
f3:0c:08:db:42:d0:da:1d:3a:7b:5e:64:50:b9:84:21:99:93:
29:f4:c6:cd:2a:fc:87:e8:ab:52:95:9f:39:3b:39:37:9f:cc:
86:80:d9:41:72:e0:1d:bf:28:c7:7e:56:2e:d3:ba:13:83:15:
52:07:24:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 15 07:37:36 2023 by rpki-client on console-fra.rpki-client.org