Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2B5DF2E125811EDB66141F4F1222468.roa
File: E2B5DF2E125811EDB66141F4F1222468.roa (raw, json)
Hash identifier: nw6/ceHt+1SnDD8P6OkCXVXJm0J9p8W5oWRVF10qfqc=
Subject key identifier: 37:15:FE:B3:50:F0:DA:57:F9:10:DF:C7:79:03:70:D6:89:D1:DC:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 160A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2B5DF2E125811EDB66141F4F1222468.roa
Signing time: Tue 02 Aug 2022 11:47:29 +0000
ROA not before: Tue 02 Aug 2022 11:47:25 +0000
ROA not after: Wed 26 Oct 2022 11:47:25 +0000
asID: 133861
IP address blocks: 156.245.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5642 (0x160a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 11:47:25 2022 GMT
Not After : Oct 26 11:47:25 2022 GMT
Subject: CN=62e90ed1-3703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:19:86:aa:2f:db:9e:46:21:c5:d5:72:c4:
a7:97:49:03:ca:ca:d6:72:c9:64:3d:7f:2b:27:88:
db:57:4c:ba:ef:b0:db:f4:ec:10:e7:ea:67:81:ce:
b6:6f:92:8c:07:c2:d7:f8:cb:1b:79:fd:be:0a:7e:
ea:44:51:0a:9c:21:6b:7c:04:79:54:41:75:7b:82:
1f:9c:f0:9d:ff:d5:a5:41:7d:ab:fc:51:79:32:85:
17:d0:58:f0:0e:6c:b3:c1:cd:d0:01:9e:16:36:5c:
35:b7:73:77:58:25:45:34:57:50:d7:20:f1:1c:3c:
0a:a1:88:9c:c9:4f:cc:fe:eb:c2:e1:f6:47:cc:b0:
7d:84:d7:73:b8:32:d8:e5:7a:3f:76:b2:7b:12:d8:
91:cc:e5:33:d7:b4:7e:37:f4:b4:88:5f:7e:16:42:
9b:29:de:33:92:a9:95:9c:1e:82:75:52:3a:b4:08:
aa:e0:19:d1:94:ef:5a:01:b7:1f:d6:7c:a2:06:3b:
1f:67:78:1e:f2:2b:24:35:db:53:44:12:7d:57:86:
26:87:22:cb:91:33:9f:04:2f:fc:09:3a:55:fe:8d:
33:cd:b0:92:3d:a3:c6:a4:9d:ce:2a:7e:d8:27:8f:
b2:71:4e:67:0a:55:69:ce:88:6b:dd:d0:ff:4c:ad:
ff:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:15:FE:B3:50:F0:DA:57:F9:10:DF:C7:79:03:70:D6:89:D1:DC:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2B5DF2E125811EDB66141F4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.23.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:aa:98:b0:65:d7:e9:fe:23:e0:1a:82:b9:9b:62:3f:09:0b:
8c:d2:f6:52:24:93:f7:34:f8:cb:76:7b:29:9f:42:47:74:ef:
2a:ce:fe:98:e3:e6:30:6d:54:9f:13:f6:0c:be:1c:9f:f1:eb:
d2:70:8a:52:65:1b:5c:01:b4:6b:22:2f:6e:73:1f:14:c1:7b:
f9:b2:6a:2d:36:0f:b0:bd:a5:a2:7c:f3:62:46:ee:df:ed:d3:
1d:8f:4c:ee:66:8b:83:24:59:51:a2:f8:45:ca:73:8f:66:a5:
8d:4b:7a:ce:a3:b1:4c:ac:ef:92:db:3a:bd:5f:ad:0b:e5:76:
ac:dc:1f:37:01:ce:f4:9d:82:2a:7e:46:5b:f2:90:31:3e:2c:
e0:9d:98:ec:ea:4a:24:52:42:8d:2b:f8:25:95:b0:49:90:25:
4a:82:8a:16:83:57:6a:2a:18:d6:c6:e1:eb:b4:ec:bd:0c:29:
c0:f9:48:ba:01:45:c7:5a:dd:0f:63:da:47:19:2c:07:83:09:
8d:9a:11:ed:15:a3:c2:29:e9:02:fb:5e:c6:6b:50:e1:83:c9:
33:ac:a0:38:b2:d9:6c:1f:ac:c9:76:41:2b:10:20:d8:e2:3b:
34:e2:88:08:8c:b9:2c:9e:a8:21:aa:78:c4:6d:0d:21:4b:f8:
a4:a1:88:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org