Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE709A1E3B0911EDBC0E029DF1222468.roa
File: EE709A1E3B0911EDBC0E029DF1222468.roa (raw, json)
Hash identifier: qwgghvduBvKrwjIWE4lzQA8vCFi3b3Jusm9HxIjasWo=
Subject key identifier: 2C:48:04:35:12:7C:81:85:DB:E8:CF:2B:61:68:CF:75:81:AA:8E:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1858
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE709A1E3B0911EDBC0E029DF1222468.roa
Signing time: Fri 23 Sep 2022 06:35:36 +0000
ROA not before: Fri 23 Sep 2022 06:35:33 +0000
ROA not after: Fri 30 Dec 2022 06:35:33 +0000
asID: 328608
IP address blocks: 156.241.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6232 (0x1858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 23 06:35:33 2022 GMT
Not After : Dec 30 06:35:33 2022 GMT
Subject: CN=632d53b8-0511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:96:de:70:32:54:3f:4c:57:69:7e:97:26:
7c:82:e1:9b:8f:f7:76:50:b9:7d:51:e3:29:43:59:
81:7f:b7:56:75:01:b0:ec:95:6c:06:78:52:3b:78:
c0:f1:8b:03:c2:3b:93:1e:7c:49:ad:bd:6e:4b:d9:
f2:c6:f5:5b:7f:c2:f7:d1:10:17:4b:26:18:d5:7d:
46:3e:3e:07:1d:ed:80:93:5c:19:f2:76:d3:7b:a9:
5d:f0:42:29:39:b4:70:8c:db:f8:0a:2d:f2:9e:99:
eb:94:25:76:ad:52:5d:83:96:e9:94:f8:2b:00:87:
34:40:04:75:b9:62:2e:c9:54:76:c1:58:25:4d:74:
fe:a4:08:85:f2:21:e8:00:d5:1d:27:c8:58:25:20:
56:02:fe:87:0e:8f:8f:e6:b1:73:7b:0f:1a:d2:4c:
f1:35:44:f5:d6:f5:c9:ed:1d:1c:db:35:0d:ca:40:
78:e4:0f:63:3e:1d:14:f8:ad:3d:39:77:4e:46:dc:
10:26:33:3a:b5:32:67:cd:0e:3b:91:69:dd:03:d3:
57:e0:00:f1:79:13:9a:62:df:f0:b6:26:d6:f7:97:
1d:62:17:27:b3:66:f3:85:06:63:6d:43:d1:28:e2:
3b:7a:59:6a:fa:77:58:c8:46:cd:31:44:15:db:f1:
ba:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:48:04:35:12:7C:81:85:DB:E8:CF:2B:61:68:CF:75:81:AA:8E:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE709A1E3B0911EDBC0E029DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.192.0/18
Signature Algorithm: sha256WithRSAEncryption
0c:1f:8e:4b:c9:e4:e4:e8:3e:29:d6:01:9a:fc:cf:6e:06:5c:
b1:3b:6a:d0:28:63:1c:27:3c:bb:a8:f4:30:21:2e:85:83:9b:
a8:87:88:29:20:2b:7c:c9:2d:36:0e:8d:8d:c3:f1:9a:1a:50:
10:38:16:38:fc:93:6d:6f:71:10:cc:16:37:30:4d:07:94:44:
de:1d:82:58:d7:f1:8d:15:c5:97:24:77:45:a4:18:0f:b2:ac:
6d:1a:e9:ec:08:dc:4a:ed:a4:43:8a:45:0b:e9:4b:d1:fc:8d:
3d:17:3b:c0:81:85:d2:59:15:bf:f8:e1:f6:12:54:1b:96:2a:
f8:73:e2:dc:0f:18:bc:d0:44:ad:3d:3c:76:fe:26:28:4e:5a:
ee:06:f5:be:06:1c:dc:8f:f3:b4:68:41:c6:2d:95:8b:82:af:
f6:9e:93:ef:99:59:1e:92:8c:c0:9e:78:f1:d8:09:98:03:c2:
cb:07:0b:5b:9e:6f:74:68:70:e0:f5:3a:7b:71:a1:79:d3:47:
4b:bb:cd:3e:df:af:cc:90:52:a1:c5:7c:23:a0:64:db:32:8e:
9b:b5:bc:b8:14:dc:bb:b7:57:53:fe:bd:9c:df:7c:6b:5b:08:
4d:e0:c9:19:0a:aa:fc:4a:19:f3:9a:b8:2d:f7:c0:dd:91:e7:
61:0f:3a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-fra.rpki-client.org