Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9F84A92250B11ED93D5DBE8F1222468.roa
File: C9F84A92250B11ED93D5DBE8F1222468.roa (raw, json)
Hash identifier: 2ZSruYWvnAbYTwU/bfv99gtx3iijJJWCTjbZVsC5ryw=
Subject key identifier: 1D:EF:A7:B5:0B:53:5D:B5:AF:19:86:FE:0B:86:3D:E3:37:08:ED:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1705
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9F84A92250B11ED93D5DBE8F1222468.roa
Signing time: Fri 26 Aug 2022 06:53:28 +0000
ROA not before: Fri 26 Aug 2022 06:53:25 +0000
ROA not after: Sun 15 Jan 2023 06:53:25 +0000
asID: 139057
IP address blocks: 156.225.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5893 (0x1705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 26 06:53:25 2022 GMT
Not After : Jan 15 06:53:25 2023 GMT
Subject: CN=63086de8-c138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7b:89:71:da:3f:bb:2a:52:52:49:19:c6:da:
65:ea:dd:e1:c4:60:d6:15:20:05:b2:50:ef:d7:41:
f2:c5:da:2a:1a:20:bb:1b:de:e4:5c:80:71:5f:93:
f9:8f:aa:13:59:84:8e:7b:11:0a:78:dc:67:e1:da:
c6:5b:8a:a1:6d:09:e7:2f:83:81:59:0e:ac:b8:41:
c8:27:dc:86:d6:67:7f:d1:45:8e:6d:0c:d8:16:1f:
ed:11:56:ef:87:87:1a:81:cd:14:53:1e:5e:a1:e6:
22:7f:26:97:d5:88:30:a6:e6:1d:dc:af:f6:54:4f:
77:97:2d:43:ea:5c:88:9b:3e:b7:91:fa:47:52:54:
ff:52:53:86:00:43:f9:3a:05:6b:1d:7c:63:7f:6d:
60:9b:dd:a6:5d:68:e9:b7:d9:89:f7:a7:de:ac:c7:
94:89:25:16:61:7f:3d:f0:23:86:ea:1d:c6:7e:c3:
2b:68:e7:5d:3c:4b:4e:5d:d9:22:23:9c:c9:d0:aa:
4d:6e:d0:79:c9:d0:91:8a:f4:9e:7b:2f:13:cd:72:
01:a6:05:5c:ee:23:09:c2:51:5e:d0:67:04:67:b6:
41:b9:16:b4:c7:c1:68:5d:9f:aa:0f:5b:36:4e:e0:
6d:ce:f3:6b:cb:f5:68:b3:e7:a8:38:53:e1:2b:46:
a4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EF:A7:B5:0B:53:5D:B5:AF:19:86:FE:0B:86:3D:E3:37:08:ED:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9F84A92250B11ED93D5DBE8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.105.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:61:95:3d:1a:7d:18:dc:9f:67:0c:dc:16:83:82:84:a3:3d:
72:f4:86:17:67:ec:b0:1a:b2:56:0e:1c:34:53:3a:bf:b2:3e:
a0:e5:bd:70:3d:04:6b:3f:48:21:fd:36:4e:a9:65:c6:49:b3:
f8:2c:a1:11:1c:9a:36:18:da:96:32:80:70:7a:0f:13:91:2b:
57:dc:3c:2c:69:5d:91:b0:2b:b2:2b:2a:ec:28:6b:80:b1:ac:
50:5e:2e:20:c0:f2:59:90:ea:8a:76:6a:da:76:f3:47:5d:6b:
0e:e7:91:65:92:d2:03:00:23:82:30:5a:ab:a5:1f:29:3f:c7:
ae:29:2c:63:a2:25:b8:9e:52:74:aa:68:6b:fc:c8:e3:fc:f9:
22:cc:2a:6c:3d:f3:44:e8:39:34:a6:82:0c:9e:74:db:37:75:
e1:59:c3:c7:3a:39:5c:86:6b:bd:31:4e:0a:a4:59:71:40:9b:
72:03:b1:57:b6:4f:69:76:ab:8d:d1:07:dc:7c:7f:6e:21:9e:
92:72:06:b7:b5:a4:57:73:9f:19:09:85:8f:47:6a:9d:5f:3a:
04:b3:ab:00:b0:15:f8:64:20:d6:84:c1:5a:a5:e2:4c:b1:ed:
3e:08:89:aa:ce:02:01:af:1a:34:55:7d:34:7c:e6:e3:96:ab:
7c:85:5e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-fra.rpki-client.org