Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD852E8A488511EC9B8FA535D8A014CE.roa
File: DD852E8A488511EC9B8FA535D8A014CE.roa (raw, json)
Hash identifier: XvpwgboHDybIOa5Si2vT60jMvi9HJlLE3U3TfcmQUXE=
Subject key identifier: B6:09:D4:CE:49:C9:48:ED:5F:1D:5F:DF:0F:4C:82:33:75:18:CF:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D42
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD852E8A488511EC9B8FA535D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:40:33 +0000
ROA not before: Fri 19 Nov 2021 15:40:29 +0000
ROA not after: Sat 19 Nov 2022 15:40:29 +0000
asID: 139879
IP address blocks: 156.249.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3394 (0xd42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:40:29 2021 GMT
Not After : Nov 19 15:40:29 2022 GMT
Subject: CN=619673f1-c449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:46:ef:9e:f9:c9:a0:4c:a7:bd:e4:1f:f1:
e3:66:e7:b5:61:25:e8:68:af:0f:2a:6a:11:e3:7b:
ee:f3:92:35:83:35:ee:ef:16:a5:43:4f:ff:39:c3:
44:86:a3:64:3a:18:8c:c5:7b:c8:34:7a:7f:48:5a:
f9:3c:a6:32:e2:29:29:07:43:00:35:af:b9:3f:93:
af:77:99:a8:26:76:ea:1d:8c:56:78:ea:aa:2d:51:
a1:97:73:0f:71:76:87:2a:fe:e9:e1:6c:6d:f0:b4:
34:3c:ae:a0:27:74:f4:dc:37:f2:38:0c:f4:70:13:
60:70:d7:4a:01:00:68:2c:6b:3d:16:0c:dc:a9:4a:
3f:3d:38:b5:5b:61:b7:70:cd:83:c0:71:a1:4c:9b:
59:cd:ff:a8:9b:0d:03:16:a0:45:e0:4d:ef:b8:ba:
23:37:1b:ee:99:98:a0:4b:50:ae:07:43:42:c4:fa:
df:9c:92:08:b4:01:46:fa:4f:c4:3c:aa:d6:bf:1c:
ed:a9:09:33:80:fd:80:65:d8:45:61:d6:a6:b1:52:
77:82:ff:64:1a:64:bd:84:38:db:af:92:48:8b:9b:
df:84:e8:a9:2d:ea:2c:83:0b:4f:52:40:ef:55:82:
13:4a:c3:ff:a6:b2:57:85:f6:a9:a6:09:72:4b:41:
03:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:09:D4:CE:49:C9:48:ED:5F:1D:5F:DF:0F:4C:82:33:75:18:CF:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD852E8A488511EC9B8FA535D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.156.0/24
Signature Algorithm: sha256WithRSAEncryption
83:8f:12:e7:40:33:ae:51:bf:e1:5d:c2:68:a1:65:51:9d:2f:
1f:cc:14:c4:0d:ac:63:10:05:a3:37:4d:d9:24:b0:59:24:6e:
33:e6:2b:60:91:bd:22:12:25:7e:1e:2c:93:3f:2f:ea:f0:33:
3f:37:31:f6:50:10:09:3c:f8:0f:c9:7a:5b:13:ea:ce:b4:be:
fb:79:85:6c:1e:0d:db:1b:4e:a6:0c:27:5f:50:aa:e2:e3:6b:
c9:26:dd:15:e6:0a:dd:3a:3f:ea:62:1e:46:9c:7d:54:d4:85:
e6:68:23:e7:88:86:20:b1:cf:56:9b:cc:75:e6:cf:9f:6a:fc:
74:8d:65:a5:41:e6:81:6c:f6:e3:cd:88:d8:b5:d0:9e:84:06:
f0:a3:86:ae:cf:1b:aa:ca:ea:59:d4:43:f0:5a:e8:a8:4d:65:
40:d6:61:80:7c:e6:3d:00:5c:ea:80:0b:99:80:a7:38:a9:64:
26:b6:0a:ea:c7:43:55:62:96:01:34:2d:97:0d:9a:de:c2:92:
d4:72:23:e3:e1:64:d8:dc:70:18:3a:b3:2b:17:04:99:07:80:
7d:a7:b2:22:84:75:29:7c:b4:de:6c:94:6a:4d:94:33:b9:52:
04:88:44:f9:4a:ca:bb:fa:31:7e:e8:43:88:bd:61:4c:b5:09:
51:f0:d5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org