Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE30DE76403F11EC831CC42ED8A014CE.roa
File: EE30DE76403F11EC831CC42ED8A014CE.roa (raw, json)
Hash identifier: zr7JyNtMHbiEmnvKmvEqlZ9DQWK8BlAYasyY1MlVITE=
Subject key identifier: 98:D9:EB:83:0F:9D:6F:EC:B7:50:41:01:12:61:53:37:C9:D4:13:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0C80
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE30DE76403F11EC831CC42ED8A014CE.roa
Signing time: Mon 08 Nov 2021 02:59:46 +0000
ROA not before: Mon 08 Nov 2021 02:59:43 +0000
ROA not after: Wed 10 Aug 2022 02:59:43 +0000
asID: 136744
IP address blocks: 156.235.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3200 (0xc80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 8 02:59:43 2021 GMT
Not After : Aug 10 02:59:43 2022 GMT
Subject: CN=618892a2-f209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2e:d2:eb:17:a3:9b:9d:fc:94:65:cc:55:11:
50:01:83:c8:22:42:81:76:d6:a7:8f:fb:7b:94:23:
90:ed:29:2d:49:b2:f8:bd:93:11:da:7b:03:fb:9b:
6e:22:7d:a7:f1:0a:4b:79:d3:80:ad:29:52:17:5b:
a3:6b:a4:50:ff:bd:5b:e8:94:2c:71:8a:38:bc:8d:
d4:90:9d:62:0a:9d:13:82:27:e9:1c:4a:b3:82:c2:
7e:62:c2:ee:84:8a:33:6b:92:b1:ec:d6:81:2a:21:
25:3b:b6:3a:a9:ac:45:2d:0b:a7:23:a5:7b:b3:b9:
96:e3:97:ab:19:09:2c:dc:48:ca:d5:33:4c:42:b8:
36:28:86:cc:2b:6b:24:4c:c8:2d:a2:25:ef:78:3c:
eb:21:e6:c9:62:85:28:76:38:b7:93:91:23:0e:97:
ac:e7:c6:61:89:80:9e:3a:21:bc:4e:bc:53:c4:3b:
61:8d:0b:a0:1b:01:0f:31:3c:29:83:38:b1:cc:9b:
6b:27:20:51:2f:f1:58:a5:54:a8:01:02:f8:07:01:
9b:16:38:53:c3:7e:1a:c9:93:dd:80:01:22:82:01:
40:cd:07:5e:de:43:a0:8d:10:b3:b6:84:9b:98:c5:
d3:e0:81:9b:57:39:ff:3e:84:7f:54:f7:3b:07:bd:
09:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D9:EB:83:0F:9D:6F:EC:B7:50:41:01:12:61:53:37:C9:D4:13:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE30DE76403F11EC831CC42ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.30.0/24
Signature Algorithm: sha256WithRSAEncryption
87:90:d6:06:d4:ff:6f:11:ef:f9:81:d9:66:f7:68:39:27:e6:
65:3e:68:bf:a3:e3:a5:cb:18:7f:63:bf:4a:8f:56:70:20:21:
18:74:7b:79:f8:93:d3:e7:91:d7:28:5a:ff:d5:b2:0a:99:80:
0b:ae:f5:ee:41:8f:b9:30:a5:4e:58:46:e3:76:12:d0:40:76:
74:d7:41:33:80:4a:f6:bc:cc:1f:c4:55:15:90:23:00:06:68:
bb:6c:2d:1f:04:ba:1d:41:3a:69:06:4f:71:d0:a8:da:79:46:
ed:4d:e5:4f:55:6e:ad:ff:b2:ec:4f:79:44:e9:c2:fa:f2:36:
49:f7:b1:86:5a:2f:36:97:2a:fe:70:ad:cf:af:b8:a9:7d:7f:
6c:f9:70:8b:27:67:80:8d:2d:c6:8e:98:0f:a7:78:49:b4:f7:
b9:ca:39:cc:77:3b:5d:9f:3f:fe:90:36:d0:fa:2c:90:27:c9:
d9:e6:24:08:94:3a:a7:6c:6f:f5:da:b2:a2:98:46:d5:7b:87:
fd:6e:0a:27:13:82:03:76:2f:cb:96:48:98:1d:bd:16:ef:96:
a5:56:03:39:2c:5d:18:31:52:a4:18:61:e2:7f:80:d6:d8:1d:
dd:e8:1c:37:4f:86:0c:14:22:ad:76:9b:c6:61:ec:df:b7:7e:
15:97:ea:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-fra.rpki-client.org