Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E300BF4605F311EEA60815314AD9E6FC.roa
File: E300BF4605F311EEA60815314AD9E6FC.roa (raw, json)
Hash identifier: ARyix0iuLJFge3AL495CopEcf1Mrfh4ZuG1CQ7mgfyQ=
Subject key identifier: 5E:53:E5:F1:F1:CA:29:DE:9A:00:58:9F:A8:B2:95:C5:DE:1B:C4:3F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2A6A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E300BF4605F311EEA60815314AD9E6FC.roa
Signing time: Thu 08 Jun 2023 11:59:14 +0000
ROA not before: Thu 08 Jun 2023 11:59:10 +0000
ROA not after: Wed 01 May 2024 11:59:10 +0000
asID: 137443
IP address blocks: 156.227.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10858 (0x2a6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 8 11:59:10 2023 GMT
Not After : May 1 11:59:10 2024 GMT
Subject: CN=6481c292-5a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:23:ab:e7:4d:b0:fd:40:3d:43:53:8f:e8:
7a:d1:e5:78:f8:58:61:b3:03:f4:72:32:af:30:6c:
2a:11:05:b5:09:79:9f:9f:95:b5:d8:04:2d:02:c1:
27:41:1b:66:27:a4:cc:3a:d7:29:98:6b:4d:1f:54:
a4:fc:5d:a2:0f:23:36:10:2f:86:8f:37:17:1a:15:
54:0c:1e:6b:60:db:8a:13:a1:c0:d6:7f:51:5c:9f:
b1:80:17:e3:5f:cb:72:ee:17:a2:87:cf:a5:4e:75:
15:b0:2d:68:30:78:26:7f:9e:fa:5a:55:54:5e:53:
fc:7f:02:1f:19:15:dd:e0:ff:4c:ef:02:c9:9c:3a:
50:03:df:95:04:9b:c3:21:f8:eb:89:ac:1d:ba:c4:
27:09:fb:ee:53:59:db:fd:cf:c6:09:90:89:9d:c7:
94:7b:48:21:94:18:e4:16:b8:07:5b:7e:44:f2:b7:
df:f2:86:be:17:a9:71:7b:de:5f:31:3e:5f:eb:61:
63:d3:be:02:86:d0:bd:06:94:54:48:b7:b5:8e:1c:
ff:2d:b1:86:8e:1a:5b:5d:9f:4f:11:fb:97:17:72:
67:15:48:56:08:b3:e5:79:bd:89:9b:ba:be:65:f7:
a2:b6:60:10:9b:2c:e7:fb:d7:c3:cb:88:a7:af:89:
c4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:53:E5:F1:F1:CA:29:DE:9A:00:58:9F:A8:B2:95:C5:DE:1B:C4:3F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E300BF4605F311EEA60815314AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.1.0/24
Signature Algorithm: sha256WithRSAEncryption
09:9d:fa:ed:29:cd:54:22:31:5d:7d:18:bb:3b:65:0a:39:72:
40:81:1b:fb:0e:77:07:5f:f4:31:d2:55:c7:79:17:fb:72:1c:
0c:3a:da:ee:b6:cd:a3:7d:a3:68:80:9d:3a:f1:00:1b:e7:ea:
50:10:73:38:a8:f3:1a:0b:9a:13:ba:61:bb:e1:21:a8:f8:d5:
da:52:ca:8f:39:52:91:23:dc:ce:1d:a5:30:8b:bf:1a:1d:66:
b9:0b:e5:c6:f1:de:f8:23:5b:2a:ed:3b:ab:59:a7:f9:a5:a8:
25:71:63:75:f0:66:e5:11:7a:79:b1:cf:f8:34:0b:f7:70:3b:
28:88:f8:ce:39:a8:30:d4:f2:dd:e2:12:07:27:0f:ff:6b:dc:
7b:4a:7e:9b:be:51:1a:2a:ba:72:4a:40:72:c8:98:56:92:a1:
a9:7a:77:26:9a:36:75:1d:76:c6:34:2e:bd:07:3b:fa:3f:02:
86:a8:04:aa:7d:d0:58:af:6a:1e:bd:cc:74:12:9d:4e:c1:fb:
9d:b6:b0:da:2b:7f:61:e5:73:a3:9d:26:de:f2:5d:bb:a7:d0:
96:82:72:fa:09:b7:70:c9:40:16:30:f7:70:fd:ed:c5:4b:a1:
89:87:4c:a8:b8:ab:58:42:02:15:07:3a:64:6d:2d:ed:e9:ba:
fc:31:e1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:47:49 2024 by rpki-client on console-fra.rpki-client.org