Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF210216245111ED9FDDCE9AF1222468.roa
File: DF210216245111ED9FDDCE9AF1222468.roa (raw, json)
Hash identifier: fQiC7JiBK7aEaStVUNUfenCKMkcvU4RWCg84G/MIE0g=
Subject key identifier: F2:7B:E6:8E:21:76:79:98:0A:25:32:B0:58:C3:CC:C5:98:7D:16:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 16F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF210216245111ED9FDDCE9AF1222468.roa
Signing time: Thu 25 Aug 2022 08:42:37 +0000
ROA not before: Thu 25 Aug 2022 08:42:34 +0000
ROA not after: Fri 30 Dec 2022 08:42:34 +0000
asID: 35916
IP address blocks: 156.227.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5878 (0x16f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 25 08:42:34 2022 GMT
Not After : Dec 30 08:42:34 2022 GMT
Subject: CN=630735fd-affb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:d9:8a:fb:02:f5:27:16:73:1b:24:6f:c6:
02:5b:68:d8:51:9c:04:55:51:29:76:58:f6:40:17:
e5:ae:35:c8:7a:2f:12:fa:5e:25:f0:51:11:c6:a2:
12:45:b5:33:87:e1:75:08:13:a3:93:e9:90:33:02:
a5:a3:28:d8:6a:68:34:46:34:b9:e9:aa:48:7b:7e:
13:a5:f6:a9:70:1c:0d:9d:c7:fc:78:eb:f7:ad:8a:
2c:fa:b6:b1:30:6f:e1:72:c7:c8:34:09:6b:94:49:
4e:aa:53:a5:cf:72:53:b7:10:8e:a9:6a:ad:10:84:
9b:8a:25:d0:93:76:22:5f:e0:b1:79:c4:9e:0d:01:
b6:65:ff:db:5e:2b:61:6f:7d:ed:e6:5e:ce:96:56:
bd:2c:0a:c8:4a:ed:ba:7e:e2:41:de:77:cb:31:9b:
ce:88:9c:da:71:f6:42:0b:8d:48:83:b1:45:f9:04:
3d:ae:6e:bd:b3:2c:c5:17:7b:2a:d9:48:d0:26:10:
e9:4b:45:9e:16:2d:a3:3b:ed:f6:43:7a:c9:a3:d0:
78:7f:00:30:5d:7b:29:cf:d1:a1:38:6f:36:0e:a1:
ba:e4:21:1b:6c:88:a2:2f:35:82:3b:2f:53:db:e7:
b3:d2:a8:c3:93:b6:7e:db:03:bb:77:69:b3:35:59:
08:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7B:E6:8E:21:76:79:98:0A:25:32:B0:58:C3:CC:C5:98:7D:16:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF210216245111ED9FDDCE9AF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.200.0/22
Signature Algorithm: sha256WithRSAEncryption
10:f7:ef:62:6a:fe:6a:26:70:78:81:88:97:4f:f5:4c:ad:d3:
2b:0d:33:89:17:d2:65:a8:0e:b4:80:c1:ba:4e:53:26:fc:a4:
aa:18:27:1e:8e:de:1c:5b:c8:bf:b6:53:eb:d4:60:49:cd:49:
56:6a:55:36:c0:a0:fe:7b:72:3f:d2:8c:25:17:b4:62:17:0c:
35:88:22:36:c9:bd:4c:33:a8:14:a8:9f:cf:56:5d:f2:01:2e:
9b:67:60:80:90:bc:7e:09:2d:3b:9b:6d:76:fd:69:de:92:34:
ea:80:0a:95:ea:17:d9:c5:71:12:07:c1:48:6c:a3:01:b8:2c:
50:b9:a5:21:b4:1a:24:51:2b:cf:dc:53:af:04:ea:d5:25:96:
1f:2d:02:35:d7:06:10:a9:df:b8:95:b2:c0:f7:50:04:84:3d:
dd:b2:ca:6a:56:53:b8:10:5a:23:d2:80:90:de:bc:56:1c:da:
ca:e6:56:c3:ca:5a:5c:85:21:24:3f:47:ce:41:36:5b:ad:b9:
dd:38:86:92:c9:c9:0b:aa:f6:e2:c3:91:30:d0:6b:1e:f1:7d:
9a:39:a1:23:05:9a:10:9c:c0:66:1d:52:0e:8a:f2:69:8e:ea:
c3:3e:76:74:92:ee:ed:2c:44:2a:b2:fa:e7:ae:aa:39:6c:d9:
10:0b:dc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-ams.rpki-client.org