Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3073D96FA4011EB8BB04E27D8A014CE.roa
File: E3073D96FA4011EB8BB04E27D8A014CE.roa (raw, json)
Hash identifier: ySz/mzVNkFhXFj00wrNbPzg2GiDYt6gdNLWYa3bigmQ=
Subject key identifier: 3D:6D:F4:E0:6A:0C:3A:C6:29:63:90:74:F0:8F:A1:CE:FC:42:A2:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0884
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3073D96FA4011EB8BB04E27D8A014CE.roa
Signing time: Wed 11 Aug 2021 01:10:56 +0000
ROA not before: Wed 11 Aug 2021 01:10:50 +0000
ROA not after: Sun 09 Oct 2022 01:10:50 +0000
asID: 1239
IP address blocks: 156.235.72.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2180 (0x884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 11 01:10:50 2021 GMT
Not After : Oct 9 01:10:50 2022 GMT
Subject: CN=611323a0-1f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a4:5c:58:db:1b:3c:bc:82:7a:9b:a9:88:da:
ff:3d:dc:6d:30:db:2b:ed:61:ef:6f:41:88:79:67:
e7:19:13:74:8e:1e:2d:3f:a7:1b:f5:58:52:ba:ae:
01:fb:4d:be:55:ae:01:5c:a1:aa:a8:ba:56:23:82:
97:9f:77:33:bf:8a:ce:14:0e:c7:d0:36:cc:5f:e9:
29:6b:79:ed:14:cf:68:07:c5:4b:9c:59:9d:99:67:
b7:38:2b:bc:4d:18:20:e6:ad:0b:d6:c7:94:9f:fc:
c6:9e:1b:a2:80:23:27:d0:6c:54:80:4b:8f:4a:c6:
49:ec:bb:bb:3d:0f:04:57:09:6d:ab:d6:2a:3c:0c:
16:22:45:ba:c5:ae:ef:a2:b8:0f:06:19:ee:52:32:
b1:5a:ce:be:43:32:33:c1:30:eb:b7:4d:c6:9b:ee:
12:fd:63:74:42:f0:1b:b8:cc:08:8d:9c:34:28:20:
ad:6e:24:11:52:c4:55:e9:2e:75:25:27:a0:d1:30:
a6:57:19:1e:be:67:fd:cd:a5:15:65:ac:ad:20:14:
54:cf:bb:47:d5:5c:1e:29:02:50:d4:6d:83:fc:b7:
05:53:fa:ff:e1:4f:69:4c:51:16:a3:24:a2:2b:30:
e3:5e:d9:c8:d4:cb:3d:33:7c:14:98:71:47:19:5d:
15:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6D:F4:E0:6A:0C:3A:C6:29:63:90:74:F0:8F:A1:CE:FC:42:A2:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3073D96FA4011EB8BB04E27D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.72.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:a6:ed:bb:46:71:28:8f:c7:3e:42:e2:e5:8c:be:b7:22:dd:
f8:7b:5d:c4:e7:48:3f:27:67:3b:87:54:ba:15:51:4f:d9:72:
3d:c6:96:d3:04:51:0b:5e:3f:49:d0:c0:0a:38:c2:3e:37:79:
3b:5c:6d:53:6e:60:b0:4d:ea:a9:21:1b:4b:00:b9:b1:1d:f3:
14:82:87:cc:e9:f8:ca:44:fa:60:25:6a:da:eb:26:84:71:75:
5b:22:37:86:38:28:80:c3:47:7b:e1:f3:2c:0e:bc:1e:91:0e:
f2:ae:19:0e:dd:5b:80:08:5c:d9:da:98:3d:97:bb:7e:00:8e:
59:58:f2:b7:63:81:8f:6c:fc:8c:61:50:9e:93:04:35:37:43:
48:a2:81:25:30:92:cb:dd:14:b7:9c:17:41:46:19:a5:52:28:
e4:d1:71:30:5e:f2:56:45:db:20:4b:50:83:b4:0b:0c:e5:b4:
15:24:8b:09:08:a3:bf:65:63:61:d5:fa:31:8b:fe:93:f5:81:
57:70:30:d1:0d:09:12:8d:af:08:34:95:80:90:33:24:49:b8:
39:55:d5:85:0a:a4:cf:db:6b:9c:dd:9a:41:f7:b8:21:b9:fc:
86:bf:00:ee:c9:45:97:c0:07:09:65:42:43:7d:af:ea:ba:1a:
38:08:58:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org