Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6BC57E4139811ED9A7A0FF1F1222468.roa
File: C6BC57E4139811ED9A7A0FF1F1222468.roa (raw, json)
Hash identifier: xAozVnIl2ELsMAGzDsvxTavr8XZVRhkO0/MsgbxkpoI=
Subject key identifier: F9:FE:0C:42:A6:8A:30:44:80:69:98:93:4B:D3:00:6A:F1:6C:E7:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1614
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6BC57E4139811ED9A7A0FF1F1222468.roa
Signing time: Thu 04 Aug 2022 01:57:21 +0000
ROA not before: Thu 04 Aug 2022 01:57:17 +0000
ROA not after: Sun 25 Dec 2022 01:57:17 +0000
asID: 1239
IP address blocks: 156.235.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5652 (0x1614)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 4 01:57:17 2022 GMT
Not After : Dec 25 01:57:17 2022 GMT
Subject: CN=62eb2781-76a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:02:73:5a:a7:10:fb:f6:29:09:2a:e9:bb:26:
0d:d5:7f:4f:5f:9d:1e:64:1a:5f:f4:89:bf:b8:fc:
6c:1f:83:7a:c6:3a:2c:6f:3a:c9:36:1f:c4:4b:44:
4c:fa:cd:75:91:7f:5a:06:5b:d0:66:22:ff:d6:9c:
36:fa:2d:e8:7d:b1:7d:7d:61:12:5c:d0:1c:c0:e2:
0e:0f:01:b3:63:65:f0:9e:37:20:a5:72:6a:40:23:
bc:cc:f1:a9:4a:a0:8f:66:2a:53:10:d0:c9:9f:e8:
55:a8:11:4f:75:a1:4d:96:fa:35:13:89:5a:01:26:
94:a4:d0:20:89:e9:a3:9d:ac:2f:91:b3:84:e8:23:
e9:ee:c8:98:37:36:cf:7c:5f:21:a9:19:09:d2:36:
f4:72:2b:27:56:c0:64:6f:a6:86:71:41:a8:75:a5:
b7:19:30:73:e2:49:27:9b:20:eb:11:16:cb:2d:2a:
09:84:69:14:a4:94:1f:d5:de:f8:8e:ab:ee:50:c7:
8f:04:a6:2b:c2:9a:34:64:49:f1:d3:e8:37:86:62:
83:79:83:cc:68:70:0b:a9:4c:57:8e:48:0c:a6:7c:
8f:60:4d:65:7e:cb:4f:a6:1a:5c:95:02:81:d6:e1:
29:ef:78:af:88:19:76:5a:b4:57:8e:36:bb:6e:12:
ec:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FE:0C:42:A6:8A:30:44:80:69:98:93:4B:D3:00:6A:F1:6C:E7:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6BC57E4139811ED9A7A0FF1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.24.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:03:4e:69:77:4d:2f:a0:bb:fa:0d:f1:d8:c5:8c:c0:0f:b2:
05:d5:a5:73:c8:6c:d5:36:08:cc:b5:37:e6:4d:76:ac:56:2f:
cb:c8:5a:1b:ac:33:07:1c:cf:98:8c:b9:38:75:f7:12:79:e4:
00:04:0b:76:f9:ec:41:89:b4:73:32:b2:f7:0d:75:39:37:e2:
e1:a3:35:82:9e:fd:ab:58:79:13:30:6e:7c:a7:34:2c:b1:56:
e9:c7:e1:4a:ca:01:95:38:37:90:a4:af:23:46:1a:7a:16:e7:
4b:16:3e:f9:3f:61:ab:b3:08:c9:b3:29:c3:03:53:14:04:d9:
8b:e6:00:98:36:23:62:0d:4f:b7:3b:73:88:4f:a9:be:a7:cd:
af:d2:f2:60:80:bb:66:02:8f:e9:4a:14:38:b2:dd:9a:e5:65:
d4:d3:ab:b8:b9:8e:21:cd:b1:71:2d:77:ab:bf:76:e1:f6:d7:
2c:17:86:08:0c:c5:01:fe:84:22:aa:a5:06:2f:f4:ab:ed:06:
e2:89:6c:c8:19:eb:96:1b:d5:c2:a6:af:fd:52:ec:bb:8a:e2:
a5:b2:4b:5f:c5:f8:b6:e3:60:d0:90:28:60:26:b3:02:13:6a:
b7:2c:c9:f0:32:7d:f7:bd:25:d5:c5:f5:c9:90:f3:9d:bd:42:
60:d4:c1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:27 2023 by rpki-client on console-ams.rpki-client.org