Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C70DAA98735911ECBB42E7BC5A40D577.roa
File: C70DAA98735911ECBB42E7BC5A40D577.roa (raw, json)
Hash identifier: 3n59woHgoYF+wdk92aFDFAhZEQOLJVsNh0NqUbae6yU=
Subject key identifier: 1B:35:9E:FC:2D:CD:C7:D8:B8:65:C1:7D:6B:43:4D:C0:20:10:7A:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1159
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C70DAA98735911ECBB42E7BC5A40D577.roa
Signing time: Wed 12 Jan 2022 03:43:17 +0000
ROA not before: Wed 12 Jan 2022 03:43:14 +0000
ROA not after: Sun 31 Jul 2022 03:43:14 +0000
asID: 149009
IP address blocks: 156.241.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4441 (0x1159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 12 03:43:14 2022 GMT
Not After : Jul 31 03:43:14 2022 GMT
Subject: CN=61de4e55-c10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8b:fc:16:5c:97:14:44:45:48:ac:7c:76:cc:
05:a8:33:0b:17:af:74:24:02:01:5f:12:d7:a3:c4:
fd:ac:1d:5b:3c:03:96:68:a5:7d:be:f2:5f:ba:c9:
a8:14:99:34:c3:4a:a9:83:37:2d:e1:6a:a3:3c:37:
a6:6f:58:dd:35:1e:ff:1e:c6:45:8b:ff:fd:c7:b0:
9d:06:a3:5e:e4:55:b6:54:56:68:5a:ef:bf:4e:5a:
ab:5a:3d:35:dd:55:90:6e:c9:37:18:b3:62:cb:58:
0b:b4:35:fa:b7:8d:5e:fe:ed:88:78:1d:b0:d6:74:
f5:ae:95:9a:3f:75:d6:d2:39:3b:86:d4:7d:d8:6a:
f1:e2:ac:28:c1:b2:09:fd:d3:b0:e5:48:33:85:14:
e2:25:bf:e7:45:be:70:92:e4:67:3d:55:c8:86:e2:
f7:48:04:98:2e:7d:9c:84:2e:9b:2f:de:fb:04:ea:
ab:83:31:83:02:a7:14:a4:70:bb:21:cf:d9:94:cf:
2f:1f:d4:e4:89:60:37:76:cf:db:30:b8:33:dc:b1:
6c:51:c3:44:b5:87:30:0e:bf:09:f7:92:9a:99:53:
ab:31:b3:a0:a5:2e:a6:db:1a:fb:8d:e3:d8:24:ec:
12:fb:cd:80:e0:18:f5:ab:d9:81:75:b7:09:f4:a0:
3f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:35:9E:FC:2D:CD:C7:D8:B8:65:C1:7D:6B:43:4D:C0:20:10:7A:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C70DAA98735911ECBB42E7BC5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.193.0/24
Signature Algorithm: sha256WithRSAEncryption
10:39:d5:9e:47:6b:8f:d1:f5:06:62:c5:e4:b9:8f:01:ac:62:
36:44:06:d6:f3:76:b7:17:06:79:cd:26:e0:bc:9e:90:48:66:
fe:d4:d9:b8:71:6e:e0:a0:ea:aa:7f:dd:d7:18:b0:5c:b5:c6:
96:8b:0a:aa:24:6d:8c:fe:95:2e:f1:c7:42:0e:f5:92:3b:ee:
d9:5c:28:2c:fe:6f:b0:b3:ce:b3:f3:0a:18:57:5d:4a:43:d0:
24:7b:0a:e9:b8:e7:b3:c7:27:c0:aa:86:de:a4:12:45:19:8d:
47:5c:01:17:5a:6a:e6:97:ac:24:20:b6:89:90:e1:78:69:9d:
f1:67:ed:6c:35:05:7a:66:0d:38:a9:ad:76:0f:a7:c6:1c:46:
aa:a6:b2:2e:68:7c:bf:bd:fa:76:bd:a3:53:07:77:4b:b7:f1:
49:17:c4:d3:a5:dd:ba:3f:7e:dd:94:ea:29:d9:7c:43:aa:58:
ba:ef:7b:56:86:d5:89:63:0e:b4:dd:41:f0:fb:f5:8d:2e:a3:
42:6e:74:45:c7:e6:f5:01:a1:42:0e:8d:e2:11:c1:b0:cd:1f:
1c:d7:44:16:34:f1:00:0a:dd:b2:ae:d8:e2:cd:1c:4f:7b:29:
4b:7d:4c:05:df:5c:25:d3:03:ac:54:d4:3c:71:c1:c7:00:e7:
e2:5d:15:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-fra.rpki-client.org