Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8075350DBD811EC974A5B85F1222468.roa
File: F8075350DBD811EC974A5B85F1222468.roa (raw, json)
Hash identifier: VKoBrYI2BXoQ/KVzfL91CfFdkc3yajDbPF20JYzcDzs=
Subject key identifier: AE:62:7C:2A:6A:F7:B3:8F:19:42:C1:8D:04:8D:C1:CB:CA:E2:DD:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 13FF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8075350DBD811EC974A5B85F1222468.roa
Signing time: Wed 25 May 2022 03:15:46 +0000
ROA not before: Wed 25 May 2022 03:15:43 +0000
ROA not after: Fri 30 Dec 2022 03:15:43 +0000
asID: 35916
IP address blocks: 156.238.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5119 (0x13ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 25 03:15:43 2022 GMT
Not After : Dec 30 03:15:43 2022 GMT
Subject: CN=628d9f62-ac94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c0:f7:bf:48:47:c5:52:d1:65:80:48:b2:71:
82:71:19:db:cc:8f:c0:50:70:db:59:d8:58:f4:37:
b4:9d:0b:ed:08:b0:aa:16:72:47:09:5b:8a:2e:04:
2b:22:35:3c:45:0a:51:f4:0a:83:36:d1:b3:d6:74:
77:74:86:1f:6c:6e:d7:06:74:18:ea:c2:e6:0d:01:
69:ec:52:cb:30:05:b6:80:c8:a2:df:86:75:61:d1:
2b:50:57:fe:47:c9:b5:0a:a4:50:06:a2:e9:ce:2f:
d2:c5:27:90:1d:79:e7:c8:21:68:b2:e3:80:43:d7:
0b:8c:e9:e2:55:28:ad:b0:91:93:5c:0b:cb:7a:95:
be:7a:77:28:b6:41:12:68:58:ae:91:ae:d6:de:c1:
f7:94:82:18:f9:f2:ab:06:2b:fe:e8:42:fa:1f:e1:
6e:65:dd:f1:05:1c:f1:0e:3a:8a:bf:00:13:9f:c8:
1e:4e:52:83:82:91:e8:c5:fc:04:a1:a7:3a:d6:e1:
0b:55:ee:e8:80:75:dd:02:7f:e0:80:49:28:16:4f:
71:f1:53:4e:cc:84:64:bb:bc:1a:e7:fa:d1:c9:7e:
9c:21:de:54:18:14:e4:9d:b4:e7:b7:0a:1f:4d:a0:
5f:89:cf:58:08:e2:76:0f:34:a0:1a:4c:96:c2:9d:
5a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:62:7C:2A:6A:F7:B3:8F:19:42:C1:8D:04:8D:C1:CB:CA:E2:DD:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8075350DBD811EC974A5B85F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.225.0/24
Signature Algorithm: sha256WithRSAEncryption
34:f5:5a:e1:48:8d:8a:7f:7d:0f:5d:6b:f5:74:75:dd:47:fe:
50:50:3f:61:13:f2:b6:c2:8e:9b:d1:da:b9:a0:52:63:9b:15:
b5:1b:85:77:81:3a:e7:55:0c:e4:ed:ff:b9:fe:70:d1:28:15:
22:4f:e1:20:ed:98:ed:ac:3d:33:11:bc:5d:3a:ff:d6:5e:cb:
09:59:57:58:65:e3:81:e9:c9:4d:34:4b:5e:ad:80:5a:e1:c8:
4e:69:c3:0a:c0:a2:8a:e6:d5:de:d8:79:90:df:03:ff:0f:23:
27:09:dd:1e:87:5a:c7:a6:ea:2a:94:ed:6e:72:7a:dd:f6:5c:
e4:10:d8:32:bf:b5:ea:72:9a:5e:58:8c:2b:6a:d2:3c:95:ad:
f1:fc:97:e7:d0:0d:da:46:8c:18:4b:4d:9e:cd:b1:68:28:37:
89:7c:25:a2:57:93:fa:d0:e3:61:90:56:1c:9b:0f:11:27:72:
0f:66:f7:d6:b0:ec:e7:e8:ce:bb:c9:bf:c2:b4:2f:f2:81:e6:
49:f6:23:4a:76:4e:19:6a:93:2c:a6:dc:06:48:ea:14:0c:e2:
f9:12:c4:02:01:71:e3:5b:55:89:ad:68:86:8d:00:fa:6f:19:
75:79:76:0b:27:a6:9e:96:bb:41:67:d5:0e:3b:dd:19:fb:a1:
62:dc:9b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-fra.rpki-client.org