Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7E5D3CE327411EDAF4EABD2F1222468.roa
File: D7E5D3CE327411EDAF4EABD2F1222468.roa (raw, json)
Hash identifier: yffAs0DB6LMzQaqvEEkTp4qTkqXqA1UO3nHC10akugY=
Subject key identifier: 2E:F0:67:6A:38:96:17:64:9C:BE:68:35:D9:F1:53:72:11:01:E5:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 17A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7E5D3CE327411EDAF4EABD2F1222468.roa
Signing time: Mon 12 Sep 2022 08:28:14 +0000
ROA not before: Mon 12 Sep 2022 08:28:10 +0000
ROA not after: Sun 15 Jan 2023 08:28:10 +0000
asID: 1239
IP address blocks: 156.231.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6055 (0x17a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 12 08:28:10 2022 GMT
Not After : Jan 15 08:28:10 2023 GMT
Subject: CN=631eed9e-bcf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4d:55:aa:cb:53:31:19:ed:d3:2f:7e:86:63:
34:d3:87:c6:b7:f5:a0:48:d0:2f:4f:49:6a:42:29:
30:92:af:85:5d:b8:b3:de:98:f6:86:ec:e5:d0:60:
ee:d0:83:96:66:e1:79:a1:40:f9:6e:ba:9a:c7:d0:
36:4e:ba:eb:93:e3:fa:28:a2:2f:a2:97:a7:fd:00:
1d:92:bd:7c:cf:91:ba:0c:84:16:c5:db:78:04:2e:
f0:e5:c8:36:63:5a:72:41:22:d7:7a:f7:5e:d8:1a:
8b:cc:fa:8a:ae:b1:15:5c:ec:d8:aa:1f:8f:3e:2f:
9d:c4:7d:e2:17:b8:54:47:f0:e6:8d:bb:b2:7a:2d:
44:cc:a3:06:6b:2d:5a:e8:8d:a6:93:a4:09:22:c1:
cc:c9:4f:35:e5:fc:4c:45:a5:36:40:22:6d:2d:74:
a3:66:62:c4:48:b2:5a:9b:d5:c2:d8:27:d3:dc:e6:
bb:64:2e:cd:d9:f8:d5:2e:ac:fa:03:54:ac:f7:5e:
d2:08:0e:23:cc:11:0b:f8:3d:cf:91:61:45:db:a1:
d8:b4:7b:e4:95:03:e5:13:fc:a1:0a:49:b3:3e:81:
91:4e:f4:b0:c4:ec:6f:8a:2b:65:8b:59:94:f4:5f:
72:d4:32:11:8f:8f:31:27:36:37:18:c4:8f:5e:2a:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F0:67:6A:38:96:17:64:9C:BE:68:35:D9:F1:53:72:11:01:E5:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7E5D3CE327411EDAF4EABD2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.112.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:85:2e:ac:d9:b1:1e:91:84:22:b4:1a:97:f2:de:b1:5e:88:
59:94:1f:48:d2:08:36:26:56:9a:6d:ec:7c:38:d4:dd:1d:fa:
64:25:7a:aa:a9:33:8a:d7:df:b6:5d:20:4f:58:bb:25:75:63:
27:f3:0a:e6:22:5d:67:72:80:18:15:99:3a:16:ce:d4:7e:19:
8a:fc:e3:94:b2:0c:7b:8f:ac:de:6f:fa:6d:6e:51:06:f8:47:
7c:70:19:11:d7:44:7c:73:b2:7c:f2:e9:b6:7d:7c:41:93:db:
7f:91:a3:4e:b1:35:79:51:00:ea:d2:c6:7c:9c:8a:74:d1:5d:
b9:31:53:45:38:b6:2d:5a:d0:09:f8:98:60:14:0c:98:68:f9:
04:4d:cc:05:90:44:23:a2:2c:96:e8:45:0c:c7:86:9a:90:23:
87:90:10:ce:d5:07:8b:bd:88:dd:7f:70:22:ea:51:57:cb:62:
b3:27:00:f9:d7:ff:09:46:ff:f1:a3:69:be:99:48:08:c4:77:
23:f3:fb:26:36:c4:72:62:de:56:68:7b:10:7a:a4:82:5a:e6:
79:9d:94:a2:f1:16:cb:36:a6:a5:f1:64:80:33:47:f0:1f:2e:
29:dc:bf:b0:ae:d0:86:21:b8:29:a3:36:13:7d:18:19:74:46:
08:e8:e2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org