Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D77A9612CDC211EBAC334466F8AEA228.roa
File: D77A9612CDC211EBAC334466F8AEA228.roa (raw, json)
Hash identifier: /nUEjdcoaVaOojGLQyVSXJsWTcYMSpoX6QZNQ8D/pAE=
Subject key identifier: C0:7B:C1:24:8A:E8:C8:32:E5:4E:20:C8:06:4E:40:34:0E:FD:0F:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 066F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D77A9612CDC211EBAC334466F8AEA228.roa
Signing time: Tue 15 Jun 2021 10:17:09 +0000
ROA not before: Tue 15 Jun 2021 10:17:06 +0000
ROA not after: Wed 10 Aug 2022 10:17:06 +0000
asID: 136744
IP address blocks: 156.235.28.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1647 (0x66f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 15 10:17:06 2021 GMT
Not After : Aug 10 10:17:06 2022 GMT
Subject: CN=60c87e25-af74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:24:3b:a8:43:e7:2a:5a:db:a0:cb:43:a6:c5:
a4:38:2e:39:1f:9e:e9:4d:c1:e1:07:9a:dc:54:5c:
33:e6:3d:aa:97:38:72:d6:34:c1:c2:6b:42:13:98:
75:3c:04:3c:2d:93:4e:3f:0b:9f:95:b9:93:6c:53:
4e:21:84:4b:43:a6:a1:18:20:2c:a8:f2:8b:16:6d:
05:be:70:97:a8:f6:e6:a7:67:68:40:ce:17:4f:fc:
d6:c8:7f:7f:4b:dc:9e:50:d4:72:0a:3d:19:dd:b8:
a4:0f:24:ad:08:1c:cf:7b:6c:e4:8f:08:c4:ab:70:
05:66:01:e3:a7:7f:11:09:f6:6d:97:b1:09:dc:b7:
79:39:4a:eb:c1:63:13:71:44:ef:c6:a7:a7:4c:e5:
fb:e2:4d:5c:62:93:be:ab:5d:a7:2f:2b:62:67:da:
8d:28:18:89:73:c8:83:00:72:ac:a9:c6:1c:a4:4f:
9e:4d:be:e8:78:e1:f0:23:5b:5f:26:a5:b7:4e:ad:
bb:94:f3:0c:6e:67:89:18:9a:5a:04:49:1a:3e:81:
61:2f:4b:80:96:72:ff:dd:4f:f5:4e:49:d4:2c:83:
e0:fc:cd:ac:1a:4a:d7:4e:4d:63:75:76:80:97:21:
4f:e2:8a:4f:eb:fc:88:8d:37:fe:c0:a7:8f:91:f4:
aa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7B:C1:24:8A:E8:C8:32:E5:4E:20:C8:06:4E:40:34:0E:FD:0F:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D77A9612CDC211EBAC334466F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.28.0/23
Signature Algorithm: sha256WithRSAEncryption
59:c4:3a:2e:48:81:89:71:73:72:20:91:20:bb:a8:34:52:a3:
e6:0d:33:66:2a:61:1f:e7:c4:50:62:03:c4:4c:ed:97:7f:02:
95:96:9c:66:ae:61:25:b4:8c:f1:72:be:6d:6d:36:fd:01:cc:
6a:44:80:4a:44:0b:b2:e5:e3:02:e6:e2:ef:e1:c9:d6:ba:51:
e7:95:ab:94:81:22:a6:61:1c:33:85:36:35:6b:0e:35:6f:7b:
83:c5:ec:ff:af:f4:a8:91:c8:7b:4c:52:39:77:d9:df:9f:24:
69:5d:c2:08:a7:6f:bf:40:4c:2a:c5:44:e6:2c:49:ad:6b:3a:
c1:8a:62:bd:5a:9b:4c:de:35:ca:ad:68:db:d1:9b:48:04:d8:
e7:e2:bf:59:99:93:ef:8f:1d:8f:5f:98:cb:9a:8f:60:52:71:
59:6a:73:c5:46:93:42:b8:37:32:5c:f6:79:6d:5b:44:24:3b:
12:a0:4b:ec:0b:00:3f:d6:4e:63:71:4e:f3:c2:1d:28:3c:49:
99:c5:d5:41:af:eb:e8:fb:0e:6e:97:93:8d:20:a9:cd:04:6c:
35:7d:71:ca:0b:a1:f6:7a:cd:30:c1:b2:69:98:11:ea:80:4d:
f1:de:9f:28:74:16:ea:85:1a:ad:98:35:03:48:c5:a6:38:67:
84:81:14:ba
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBm8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTA2MTUxMDE3MDZaFw0yMjA4MTAxMDE3MDZaMBgxFjAU
BgNVBAMTDTYwYzg3ZTI1LWFmNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCUJDuoQ+cqWtugy0OmxaQ4LjkfnulNweEHmtxUXDPmPaqXOHLWNMHCa0IT
mHU8BDwtk04/C5+VuZNsU04hhEtDpqEYICyo8osWbQW+cJeo9uanZ2hAzhdP/NbI
f39L3J5Q1HIKPRnduKQPJK0IHM97bOSPCMSrcAVmAeOnfxEJ9m2XsQnct3k5SuvB
YxNxRO/Gp6dM5fviTVxik76rXacvK2Jn2o0oGIlzyIMAcqypxhykT55Nvuh44fAj
W18mpbdOrbuU8wxuZ4kYmloESRo+gWEvS4CWcv/dT/VOSdQsg+D8zawaStdOTWN1
doCXIU/iik/r/IiNN/7Ap4+R9KqpAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUwHvB
JIroyDLlTiDIBk5ANA79D9wwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0Q3N0E5NjEyQ0RDMjExRUJBQzMzNDQ2NkY4QUVBMjI4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGc6xwwDQYJKoZIhvcNAQELBQAD
ggEBAFnEOi5IgYlxc3IgkSC7qDRSo+YNM2YqYR/nxFBiA8RM7Zd/ApWWnGauYSW0
jPFyvm1tNv0BzGpEgEpEC7Ll4wLm4u/hyda6UeeVq5SBIqZhHDOFNjVrDjVve4PF
7P+v9KiRyHtMUjl32d+fJGldwginb79ATCrFROYsSa1rOsGKYr1am0zeNcqtaNvR
m0gE2Ofiv1mZk++PHY9fmMuaj2BScVlqc8VGk0K4NzJc9nltW0QkOxKgS+wLAD/W
TmNxTvPCHSg8SZnF1UGv6+j7Dm6Xk40gqc0EbDV9ccoLofZ6zTDBsmmYEeqATfHe
nyh0FuqFGq2YNQNIxaY4Z4SBFLo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-ams.rpki-client.org