Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFF1D1E217B311ED9A01BB80F1222468.roa
File: EFF1D1E217B311ED9A01BB80F1222468.roa (raw, json)
Hash identifier: fHRzqWHIM890S63gQZrgYEFCKTqfrxcn16Vph+szDfg=
Subject key identifier: 6B:5D:45:08:A1:32:41:1B:B5:B6:0A:FC:DC:93:56:64:FE:1D:3D:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 16B2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFF1D1E217B311ED9A01BB80F1222468.roa
Signing time: Tue 09 Aug 2022 07:21:51 +0000
ROA not before: Wed 10 Aug 2022 07:21:48 +0000
ROA not after: Thu 15 Jun 2023 07:21:48 +0000
asID: 136744
IP address blocks: 156.235.28.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5810 (0x16b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 10 07:21:48 2022 GMT
Not After : Jun 15 07:21:48 2023 GMT
Subject: CN=62f20b0f-2402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:72:35:ad:f1:53:a7:50:29:6e:60:fc:5a:
23:16:8b:b6:16:41:f7:ea:3a:33:73:7f:f2:cf:69:
55:f7:65:0e:ea:ce:df:08:5f:2b:83:fa:51:ab:7e:
fc:0a:69:0e:37:cb:39:3f:1e:73:b5:2e:a6:7f:9a:
ce:20:7a:7d:f7:86:17:3c:d0:6c:30:53:29:40:96:
b1:c2:32:d8:81:83:22:44:b1:e2:74:d9:f4:68:8c:
af:4c:67:f1:94:7a:e9:9f:59:43:73:d2:a0:23:10:
1c:9b:5c:34:25:97:51:cf:c0:d0:cd:95:0a:5f:be:
2a:5f:d3:bb:f0:32:46:ec:73:08:df:f4:00:55:47:
0a:fc:43:45:ed:bb:a6:67:be:9d:ab:58:79:15:bd:
c9:7d:a6:24:8c:49:fb:60:5e:60:8b:b2:cb:4c:57:
63:62:ec:90:8a:98:09:57:c2:3c:67:0f:f1:e9:cf:
42:6a:9b:da:64:ab:4b:ff:1f:42:0c:6f:63:0c:c6:
9d:ab:ec:08:87:f3:aa:a3:18:49:0c:bd:52:11:2c:
4e:dd:e5:0a:54:67:ee:36:52:db:07:00:4b:2f:e5:
8f:c2:4a:c5:84:e0:f1:5c:68:06:89:52:e8:96:31:
5a:b5:78:60:d2:c5:13:36:f9:80:9a:94:70:46:b4:
02:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5D:45:08:A1:32:41:1B:B5:B6:0A:FC:DC:93:56:64:FE:1D:3D:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFF1D1E217B311ED9A01BB80F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.28.0/23
Signature Algorithm: sha256WithRSAEncryption
65:32:6f:13:d8:60:ae:c1:fd:b5:33:77:8c:80:ce:d8:e3:00:
88:bc:6d:7b:6c:18:c8:ac:6b:c8:42:ec:b8:ae:66:b9:37:0c:
da:33:54:56:88:44:7b:df:dd:e0:4f:dd:6e:f7:f1:7c:d4:07:
15:b2:0c:2c:76:3d:6c:a4:ac:02:b5:08:1e:da:6f:04:1f:d6:
ed:7b:00:cc:5a:dc:58:07:36:49:c8:ee:54:47:9e:b1:60:bd:
d5:21:d1:a6:0a:a3:c2:cd:90:0e:97:24:1a:3a:e6:1e:8d:96:
54:54:41:4a:28:84:03:81:13:b1:57:13:26:56:36:ce:dc:71:
22:54:05:0f:80:72:f1:7f:f4:dc:5f:f0:2d:2a:52:cb:52:ca:
b3:72:c4:e2:29:bc:1c:cb:cd:91:ef:0b:85:6d:cb:82:82:0c:
08:55:fc:2f:a2:fe:60:d3:66:0e:84:a3:3d:d7:db:7c:7a:a0:
ac:62:0f:63:80:7f:88:6a:e4:55:36:98:cd:ec:19:e1:ef:0d:
47:54:16:c8:14:41:0a:4d:da:0b:7e:cd:15:1f:d3:b8:43:c6:
ed:be:b2:2f:ec:dc:a3:33:f4:be:89:03:d0:bb:33:20:cd:03:
b3:73:4d:7c:de:47:41:74:5c:34:9a:e7:1c:01:78:97:c5:22:
22:99:7a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-ams.rpki-client.org