Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF0215B6488411ECA5A89233D8A014CE.roa
File: EF0215B6488411ECA5A89233D8A014CE.roa (raw, json)
Hash identifier: 8pi91vVYtrAj4VLdlJ10JdwaIzrTO3Y4cIgdbmFsA50=
Subject key identifier: 80:58:4B:31:04:91:19:3D:F6:32:3B:CF:F1:B2:20:AB:CF:E1:DB:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0D0A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF0215B6488411ECA5A89233D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:33:53 +0000
ROA not before: Fri 19 Nov 2021 15:33:49 +0000
ROA not after: Sat 19 Nov 2022 15:33:49 +0000
asID: 139879
IP address blocks: 156.247.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3338 (0xd0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:33:49 2021 GMT
Not After : Nov 19 15:33:49 2022 GMT
Subject: CN=61967261-cda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:0d:3b:2e:b0:ea:47:1e:df:bd:4d:77:4d:
38:34:80:03:e6:da:b6:8a:d1:fe:74:31:36:6b:ab:
9f:8c:9f:5a:51:4a:48:bb:45:97:8f:27:c1:70:c8:
8e:ac:9a:75:d1:fd:0b:e5:fb:d2:19:59:ab:f9:e3:
79:2c:85:36:90:66:7b:d1:34:aa:f4:06:57:55:c9:
ff:b9:0c:00:14:e8:2b:02:50:c2:7e:98:12:1c:55:
52:a5:0b:fe:20:58:02:70:41:51:b5:01:bd:c4:96:
a5:29:5c:ed:7f:d6:de:81:67:9c:8d:33:31:9e:1f:
74:c7:ab:8e:d0:c9:0e:e0:04:27:20:15:5f:53:21:
4b:82:81:26:89:07:28:6d:08:0a:dc:d6:2b:22:3c:
16:f6:b4:96:2b:5b:85:75:a0:c9:a9:f3:68:92:d9:
12:ea:42:71:dc:b9:b1:a8:0c:5a:65:ff:c2:05:e0:
a7:43:3c:a2:6e:73:f1:fb:93:9b:12:fc:ad:22:df:
5a:51:d3:67:bc:92:b9:a0:37:74:13:91:c6:ac:d5:
50:8a:c5:7b:57:10:37:a8:01:52:dd:f0:4f:9c:2a:
0c:9a:d0:25:3e:52:93:63:77:2a:dd:d1:47:64:aa:
67:6c:12:42:d3:fb:dc:33:49:39:15:ce:33:c4:03:
e5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:58:4B:31:04:91:19:3D:F6:32:3B:CF:F1:B2:20:AB:CF:E1:DB:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF0215B6488411ECA5A89233D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.145.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:82:c3:c2:7c:16:99:30:d6:6f:4e:fc:72:42:a6:75:a4:96:
9d:ed:3a:24:4a:08:8a:07:eb:ab:d5:c0:e8:af:87:60:fa:86:
f5:b5:58:22:57:40:a0:99:57:96:ec:9e:7a:36:5a:b2:82:6e:
1c:b0:bc:7c:9b:5f:c8:97:26:94:ce:7f:33:16:19:d2:ef:fd:
60:92:b7:55:a4:ed:e8:ba:9f:09:99:d8:84:52:af:b6:d4:ad:
1c:c9:31:1f:d0:5f:7d:1e:35:2c:b2:87:b8:64:ec:e0:1e:49:
9a:6c:4d:85:40:1d:f2:ad:9e:1e:bc:0c:8f:5f:68:e7:8d:04:
ec:c1:0d:33:92:13:8e:1f:db:d2:87:58:fe:c9:86:a3:c2:d8:
b3:ef:3b:83:86:d2:a8:01:11:9d:e9:3f:50:ef:ee:bc:7d:43:
c8:c6:8c:bb:68:38:b9:e3:7b:a2:f3:e2:ae:0d:f2:92:7f:17:
d2:6c:8c:c1:63:c3:0c:a4:03:62:96:f6:e1:da:47:f3:ae:0e:
da:b3:fa:8b:91:4f:75:87:ae:11:a9:9b:e9:1d:e6:77:3d:1c:
15:9c:47:56:5b:8e:a8:91:8e:55:c3:eb:66:3c:97:93:56:6d:
a0:11:6f:c4:f0:07:ad:da:4e:4c:94:a6:fa:7a:ab:4e:b1:b9:
ab:4a:71:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-fra.rpki-client.org