Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAF4C62E488611ECA14EE937D8A014CE.roa
File: EAF4C62E488611ECA14EE937D8A014CE.roa (raw, json)
Hash identifier: CJnQc5VLT0cjjByqqIM1R74bNjn/w9T0uQWXG/UEoRY=
Subject key identifier: 8B:77:D6:45:33:21:D4:FF:8A:EA:90:27:DD:9A:61:54:F5:23:DA:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D7B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAF4C62E488611ECA14EE937D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:48:05 +0000
ROA not before: Fri 19 Nov 2021 15:48:01 +0000
ROA not after: Sat 19 Nov 2022 15:48:01 +0000
asID: 139879
IP address blocks: 156.249.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3451 (0xd7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:48:01 2021 GMT
Not After : Nov 19 15:48:01 2022 GMT
Subject: CN=619675b5-8209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:96:fc:ec:fd:1e:d9:1b:53:82:6e:93:73:b0:
76:3a:30:fb:c4:2b:bd:68:83:8f:fe:90:f2:de:6c:
fa:50:32:88:ad:23:fa:69:5c:6a:73:4d:bf:55:a4:
f3:d3:d6:29:13:7c:68:6e:fb:6a:20:19:57:06:8f:
48:26:15:ee:df:34:3c:97:a3:c7:a3:c6:85:d0:a0:
88:8c:77:58:30:fc:df:73:b1:e0:c9:75:ee:23:d9:
50:c8:3d:67:86:77:76:ca:8c:6d:a0:c2:b6:95:d2:
7a:d6:ff:60:38:c3:c6:8a:4d:e1:2f:77:a7:9f:bc:
42:29:17:b1:c0:41:ff:28:21:2f:90:63:45:fa:a6:
3f:60:7a:2b:0b:b8:d3:e6:b1:86:9f:86:68:2a:8e:
ce:6e:e8:1c:3b:21:d5:5f:92:34:a5:04:12:8f:d8:
e0:4e:29:8c:d9:34:ea:d6:e0:45:cb:ca:34:fa:42:
fe:6e:2b:6e:b4:72:d6:c6:29:c5:0f:d3:3d:78:ed:
1f:b1:89:0b:60:23:26:e7:94:85:bf:dc:a1:4e:63:
e1:75:8e:7e:47:80:a4:01:e4:89:02:d9:0f:ee:5e:
75:ba:a3:9b:f7:18:94:8f:be:01:4f:17:2c:74:86:
35:03:71:ea:2e:84:69:bc:d2:e7:72:de:21:d8:1b:
cd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:77:D6:45:33:21:D4:FF:8A:EA:90:27:DD:9A:61:54:F5:23:DA:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAF4C62E488611ECA14EE937D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.168.0/24
Signature Algorithm: sha256WithRSAEncryption
17:07:53:59:a2:e5:5c:58:8f:d7:11:46:5d:39:4a:bf:5e:f0:
39:31:15:40:15:3d:4b:6f:c4:8f:10:3d:95:c1:35:d7:d7:1d:
de:fa:c8:8b:4f:a9:08:ef:4e:29:a6:db:ed:3f:a6:6a:fb:bc:
1c:4c:26:c1:1b:5d:8b:22:f3:c7:f2:48:f1:20:0f:68:d8:a3:
fc:8f:44:e8:8c:f0:66:58:31:b0:47:ec:87:e0:12:8c:a5:cd:
be:ef:74:cf:f3:ba:1d:16:51:4a:d2:b5:1b:28:98:c7:ef:60:
4d:b5:bb:68:64:fe:f5:90:f1:a2:99:0e:1b:d0:17:7b:01:2d:
b6:b2:ca:35:93:61:cb:fa:9d:95:de:e0:bb:66:93:34:bd:bd:
73:59:ba:1c:e8:37:d6:a0:65:50:ac:e3:9f:89:1f:d0:3c:84:
18:77:09:92:43:6e:f9:1d:db:77:c1:56:1e:fd:a9:72:88:1a:
43:01:b2:ad:61:c0:f6:a1:89:c3:20:3a:c7:9d:17:42:39:60:
d9:82:ef:7a:04:a1:3c:4a:31:11:f0:a6:3b:c1:dd:8c:2b:4e:
b0:2b:11:6a:55:41:e2:a5:90:69:e0:11:52:99:54:f9:ae:d6:
59:ea:45:8a:5e:be:28:f1:7f:0b:84:57:12:53:43:75:99:5f:
0b:44:c7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-ams.rpki-client.org