Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE5214342CFC11EDA92916BBF1222468.roa
File: DE5214342CFC11EDA92916BBF1222468.roa (raw, json)
Hash identifier: eOXxx5Bc+7hAAupMwcsIa2hGEYDpyyxYVsdUQB2+Pzs=
Subject key identifier: 4F:FE:34:CF:E9:46:4D:17:7B:D4:27:70:3C:C6:16:3A:67:76:B1:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1765
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE5214342CFC11EDA92916BBF1222468.roa
Signing time: Mon 05 Sep 2022 09:26:49 +0000
ROA not before: Mon 05 Sep 2022 09:26:46 +0000
ROA not after: Wed 15 Feb 2023 09:26:46 +0000
asID: 22773
IP address blocks: 156.246.80.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5989 (0x1765)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 5 09:26:46 2022 GMT
Not After : Feb 15 09:26:46 2023 GMT
Subject: CN=6315c0d9-7082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:c6:c5:80:cd:b5:ac:38:d1:d4:49:37:6a:
0a:8d:72:ce:51:a9:22:88:6f:56:fb:97:d0:41:86:
17:68:c7:4c:5d:47:57:86:95:ba:ad:4f:c6:e2:b3:
4c:59:5d:4a:8a:d7:7a:83:26:c3:b1:01:4f:ba:d3:
26:25:fb:43:15:4c:89:10:0f:6c:30:81:72:13:9d:
73:0b:9b:d0:89:84:8a:34:f9:cc:74:80:dc:4e:3c:
b7:d0:43:e0:8e:ff:5a:a4:10:88:fe:ef:75:a8:a8:
03:f4:a6:9e:36:e3:70:d1:fb:66:db:1b:ad:76:d7:
f3:ca:62:4e:17:06:30:47:85:1a:ae:71:27:84:49:
08:a2:b7:4f:a3:82:36:7d:f5:71:9b:76:c4:32:14:
b9:dc:86:23:56:78:1d:ef:40:14:5e:78:5b:06:13:
0e:f1:44:ff:e8:0b:fd:9b:41:6a:5d:34:d3:f3:c0:
c7:35:7b:b3:3f:54:09:4f:b1:aa:20:ec:7f:3f:5c:
89:63:71:04:f9:3a:21:70:ca:19:24:48:13:ce:15:
30:47:93:58:18:0b:b7:c0:f1:11:30:94:0c:5e:df:
26:77:03:c1:7b:b4:f4:3d:29:d5:05:26:d9:2d:f5:
c8:98:8a:11:7c:0b:2c:fe:e0:6f:a8:11:48:0c:1a:
75:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FE:34:CF:E9:46:4D:17:7B:D4:27:70:3C:C6:16:3A:67:76:B1:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE5214342CFC11EDA92916BBF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.80.0/20
Signature Algorithm: sha256WithRSAEncryption
71:00:5e:cf:e6:30:e4:b8:9f:59:3e:67:93:f9:9f:88:41:f8:
c4:6a:a6:35:08:ed:a3:0e:ea:cf:e5:95:0a:2f:ed:0f:cc:37:
19:13:7b:8b:de:a7:e6:64:61:56:8e:05:07:8d:13:1f:0b:9f:
7d:ac:f6:9e:3b:a5:8f:39:d7:02:8c:1c:28:1a:70:2a:a7:48:
8c:46:25:68:8d:51:0f:e7:6f:4b:52:20:ba:f8:5a:26:cd:cc:
e9:98:ec:c2:2d:89:cc:7b:c2:dc:b3:51:2c:3a:9e:3f:5e:84:
29:70:81:71:b2:85:79:77:e1:4f:f0:b8:7b:05:11:58:b8:23:
4d:08:05:c1:bf:7d:8d:4b:9b:ab:c1:03:ab:40:69:73:d1:41:
3c:ce:ba:72:cc:e4:32:d8:f1:9d:a8:1b:53:b9:b9:d7:e4:35:
f4:ec:45:a4:00:2e:ee:02:4c:14:28:1d:ef:94:41:d7:4e:54:
ca:d4:ad:3d:22:d5:2e:78:f8:ed:66:99:9c:0d:5f:c8:85:32:
6e:28:f5:7e:52:50:ca:86:e5:7d:c7:52:73:81:55:29:1e:9d:
9d:c8:bf:5c:74:59:d4:91:4b:8c:4d:52:20:cb:47:c6:b1:38:
15:ff:ef:c9:a3:e3:a3:61:d5:b4:85:eb:28:e1:81:cc:53:0c:
9f:4a:25:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org