Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE020874AC8511EBB1A7BF53F8AEA228.roa
File: EE020874AC8511EBB1A7BF53F8AEA228.roa (raw, json)
Hash identifier: XMtjaNj5+DxH0jEUHNVFUrpf/SpxhzNRsyTaPWL8utk=
Subject key identifier: BD:32:26:BA:21:91:B7:75:A8:F9:FF:60:F8:0E:E7:D9:DD:8E:4B:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0593
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE020874AC8511EBB1A7BF53F8AEA228.roa
Signing time: Tue 04 May 2021 03:07:59 +0000
ROA not before: Tue 04 May 2021 03:07:52 +0000
ROA not after: Thu 02 Jun 2022 03:07:52 +0000
asID: 135600
IP address blocks: 156.246.72.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1427 (0x593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 4 03:07:52 2021 GMT
Not After : Jun 2 03:07:52 2022 GMT
Subject: CN=6090ba8f-653d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cf:3e:4e:bd:14:bb:f1:72:3d:ee:9a:60:fe:
af:7d:74:62:fb:53:c2:40:e5:8d:83:83:20:a8:0d:
bd:1f:f1:aa:45:0e:01:60:a6:ad:0d:79:f3:d2:6b:
4a:f6:b7:d6:55:8f:7c:54:0b:52:4d:0a:0f:2e:2d:
bc:7c:77:1e:54:64:48:da:1d:95:03:48:5d:5c:70:
7b:ff:1c:fb:7f:f7:50:d5:10:ee:90:8f:4a:15:d0:
bd:1a:39:b2:d4:9b:4c:9a:ab:a8:21:b9:b4:22:d3:
9b:b1:b8:19:44:4e:57:28:ef:47:a7:ee:d3:21:fe:
c3:4f:b7:c0:7c:06:17:fe:9a:96:33:b4:72:6a:9a:
fc:d3:47:6e:f0:5c:33:63:3a:5a:a6:d3:c8:e2:6d:
2c:bb:0c:2e:1a:1f:41:54:ab:e1:21:16:c3:48:b3:
06:8e:9b:81:bc:b9:6d:4c:3e:1e:a6:99:88:91:2b:
db:75:0e:1b:3a:ad:86:de:52:3f:29:58:34:33:8d:
05:5d:a1:35:12:7e:27:19:bd:f9:82:09:c6:8c:c8:
e4:0f:f2:a7:d8:26:0d:2c:f0:e5:ae:e8:9e:6f:74:
00:bf:58:f7:92:00:67:12:bd:2e:f6:af:48:5f:f0:
96:59:36:e6:1a:8c:d5:72:e5:4b:1f:32:1f:fa:e4:
70:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:32:26:BA:21:91:B7:75:A8:F9:FF:60:F8:0E:E7:D9:DD:8E:4B:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE020874AC8511EBB1A7BF53F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.72.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:55:39:a2:d1:1a:a0:b7:fc:60:38:96:c9:da:7d:f4:b9:03:
f2:47:6f:94:00:71:30:1f:0d:91:8b:9e:e9:a1:eb:91:7e:48:
4b:f6:46:d0:14:b5:15:a0:f3:38:9b:ab:1d:07:b8:23:77:4b:
d8:90:ca:69:b9:20:2a:06:f9:b7:77:e5:a5:dc:f1:55:35:f3:
e3:81:29:ff:5c:77:3c:ef:97:e5:c6:7a:d3:89:44:4b:1e:a6:
c0:31:08:e9:69:87:ff:fe:c9:c3:d4:57:a9:ac:c8:1e:11:d4:
f1:46:d8:5f:8a:34:84:28:0c:76:5d:69:97:2c:11:67:b5:e1:
2c:45:06:93:76:69:03:5a:a5:bb:a6:13:34:14:57:67:2c:ce:
b6:13:8e:c8:a3:34:cc:db:2c:11:3b:4d:ee:d6:8e:76:2f:30:
3f:f2:e5:4d:15:f2:66:c3:22:8d:35:85:da:4a:d5:68:a0:f1:
9d:9c:ab:60:f5:8c:6f:81:f6:dc:74:f1:4a:aa:c6:1b:92:1c:
43:d0:4c:90:d4:ad:99:10:9a:3f:d2:63:9f:41:4f:d8:df:f1:
59:ae:b6:73:5c:ae:1b:8b:90:3d:83:a3:21:75:42:54:2d:db:
21:1e:8f:a5:0c:2e:ab:ed:8c:cd:11:ef:fa:d5:31:94:3f:95:
b9:cf:a4:b1
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBZMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTA1MDQwMzA3NTJaFw0yMjA2MDIwMzA3NTJaMBgxFjAU
BgNVBAMTDTYwOTBiYThmLTY1M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQzz5OvRS78XI97ppg/q99dGL7U8JA5Y2DgyCoDb0f8apFDgFgpq0NefPS
a0r2t9ZVj3xUC1JNCg8uLbx8dx5UZEjaHZUDSF1ccHv/HPt/91DVEO6Qj0oV0L0a
ObLUm0yaq6ghubQi05uxuBlETlco70en7tMh/sNPt8B8Bhf+mpYztHJqmvzTR27w
XDNjOlqm08jibSy7DC4aH0FUq+EhFsNIswaOm4G8uW1MPh6mmYiRK9t1Dhs6rYbe
Uj8pWDQzjQVdoTUSficZvfmCCcaMyOQP8qfYJg0s8OWu6J5vdAC/WPeSAGcSvS72
r0hf8JZZNuYajNVy5UsfMh/65HA7AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUvTIm
uiGRt3Wo+f9g+A7n2d2OS/EwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0VFMDIwODc0QUM4NTExRUJCMUE3QkY1M0Y4QUVBMjI4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOc9kgwDQYJKoZIhvcNAQELBQAD
ggEBAG1VOaLRGqC3/GA4lsnaffS5A/JHb5QAcTAfDZGLnumh65F+SEv2RtAUtRWg
8zibqx0HuCN3S9iQymm5ICoG+bd35aXc8VU18+OBKf9cdzzvl+XGetOJREsepsAx
COlph//+ycPUV6msyB4R1PFG2F+KNIQoDHZdaZcsEWe14SxFBpN2aQNapbumEzQU
V2cszrYTjsijNMzbLBE7Te7WjnYvMD/y5U0V8mbDIo01hdpK1Wig8Z2cq2D1jG+B
9tx08UqqxhuSHEPQTJDUrZkQmj/SY59BT9jf8VmutnNcrhuLkD2DoyF1QlQt2yEe
j6UMLqvtjM0R7/rVMZQ/lbnPpLE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-fra.rpki-client.org