Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C76F0C12302711ED98D951B0F1222468.roa
File: C76F0C12302711ED98D951B0F1222468.roa (raw, json)
Hash identifier: u8JgcR/DqTZPng/Tv7OXeB9nVu8raZLQ/c48OE0Uh4Y=
Subject key identifier: 60:A0:7C:D4:0E:9C:52:5E:7F:3E:5F:E0:05:B6:ED:7C:5B:61:2A:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1789
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C76F0C12302711ED98D951B0F1222468.roa
Signing time: Fri 09 Sep 2022 10:11:33 +0000
ROA not before: Fri 09 Sep 2022 10:11:28 +0000
ROA not after: Fri 30 Dec 2022 10:11:28 +0000
asID: 328608
IP address blocks: 156.240.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6025 (0x1789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 9 10:11:28 2022 GMT
Not After : Dec 30 10:11:28 2022 GMT
Subject: CN=631b1155-07c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:43:95:0e:7f:89:a0:83:85:4a:e2:3e:5a:
4e:50:c5:40:ce:09:72:eb:79:ed:dd:ba:46:73:25:
50:b2:33:d8:f6:20:07:b6:7b:0c:14:a7:2d:a2:d0:
35:29:85:a6:1e:9b:e0:b7:3c:4e:ec:1f:33:ab:17:
4b:de:52:0b:23:1c:63:bf:57:45:91:8f:b2:30:47:
cf:98:b2:37:7f:4f:36:22:7c:54:fd:53:6c:17:d1:
5d:86:ed:76:0f:f7:18:cb:da:fd:bf:a2:86:3b:8f:
31:e8:48:99:cd:28:f9:09:0f:c0:8f:a1:66:02:f5:
cc:94:c6:e4:63:e8:82:25:1e:0d:ef:2b:c7:83:b9:
ae:49:b4:66:75:97:17:93:9a:73:97:2c:5b:32:5d:
27:54:e2:c4:7f:dd:c5:6b:c9:bd:9d:fc:21:40:fa:
e8:02:24:94:e6:2d:ed:a0:90:67:49:e5:17:57:99:
4e:54:37:bd:80:83:52:a7:7e:55:41:d0:e7:7f:76:
ad:83:98:84:5c:ab:29:1a:55:da:b8:e6:48:69:be:
b8:0f:df:75:24:7d:ec:cd:f2:9d:88:05:2c:3e:dd:
b7:fd:bc:2c:64:c5:18:ec:a7:93:c6:ff:2f:4f:64:
ab:ef:a9:d9:a7:d5:35:3c:23:e7:ba:4f:79:b6:b7:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A0:7C:D4:0E:9C:52:5E:7F:3E:5F:E0:05:B6:ED:7C:5B:61:2A:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C76F0C12302711ED98D951B0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a3:b0:cf:7c:1b:cd:0f:28:39:0b:a4:60:a5:a8:5a:b1:7d:88:
7c:e4:36:b1:4a:82:55:ff:6e:d7:d4:d7:c6:e0:2f:ec:c4:e8:
26:bb:41:a5:f5:48:1f:d4:46:00:a6:e9:19:37:3d:dd:b4:ef:
b7:e2:46:04:c5:bd:69:57:c4:5a:cc:f9:8a:6f:3a:7d:bc:7f:
60:c2:a0:a1:55:9d:de:07:68:32:9a:1f:87:ed:a0:11:64:3b:
4c:24:6e:9f:d2:dd:dc:fd:f3:47:94:f8:f4:a8:da:70:5d:ed:
7a:c4:d6:49:af:d4:37:e1:53:79:fd:57:b8:02:0f:75:6c:b3:
a5:84:e6:bb:cc:34:70:c6:8b:b3:db:c4:36:b9:1f:ed:7f:70:
78:0f:de:a0:36:46:ba:f9:2e:85:37:bb:c1:2b:ab:85:46:55:
80:74:13:d8:77:bc:f7:44:7b:47:c0:f2:29:31:d2:f9:ef:68:
70:24:77:6b:b3:f2:ee:d9:0e:83:08:f3:58:e0:1f:31:57:4a:
3c:2c:36:5c:ae:50:8c:17:a2:11:37:69:91:d9:8a:11:43:23:
b5:48:bd:8c:58:62:41:12:14:ab:5a:48:08:ec:7d:4c:f0:ba:
03:67:bb:c0:00:b0:52:11:cb:ef:4f:80:74:9d:a0:2c:9e:9d:
31:8d:ab:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-fra.rpki-client.org