Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA078286C21211EC8EDF35F1F1222468.roa
File: FA078286C21211EC8EDF35F1F1222468.roa (raw, json)
Hash identifier: m+jMFiCvNV9g+WMXutn39gg+ub1roT+h06D+5ks2gcA=
Subject key identifier: 3D:20:8A:5E:B8:99:44:DA:D1:9F:29:EC:6F:7B:43:EB:50:A7:0F:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 133D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA078286C21211EC8EDF35F1F1222468.roa
Signing time: Fri 22 Apr 2022 08:05:30 +0000
ROA not before: Fri 22 Apr 2022 08:05:26 +0000
ROA not after: Fri 30 Dec 2022 08:05:26 +0000
asID: 35916
IP address blocks: 156.248.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4925 (0x133d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 08:05:26 2022 GMT
Not After : Dec 30 08:05:26 2022 GMT
Subject: CN=626261ca-3085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:f8:1a:fa:e4:23:77:49:2f:82:a9:de:e6:
7c:93:95:ac:2f:f6:06:ee:6d:6d:9c:b9:d3:2f:f7:
61:94:64:b8:4e:5c:6e:6d:f3:a1:95:db:5c:95:e4:
88:dc:ce:29:09:5b:42:9f:9a:28:ea:3b:8f:f2:5a:
bf:f7:17:2a:fa:d5:4b:aa:42:e2:89:bc:18:55:c6:
9f:7b:cf:bb:15:b6:0c:6b:1e:a2:6f:3f:22:c8:00:
19:be:0c:ba:e3:3e:3f:8a:17:6c:7a:3a:21:b4:01:
aa:14:03:cc:ce:9e:e6:a3:8c:26:0d:31:79:51:fd:
91:db:a3:4d:25:e6:be:b3:76:9b:48:74:9a:f2:ed:
7d:52:98:b5:a4:78:e0:91:23:1b:e8:bd:d0:53:26:
44:5f:12:ff:03:a2:37:f8:ab:98:31:36:f9:cd:59:
09:63:ee:c3:3d:67:23:17:72:c7:c7:5c:5c:36:99:
c9:95:e4:16:61:83:9b:75:b8:5d:f8:b5:1c:4b:89:
ec:aa:4f:4d:0b:19:2b:35:b0:4c:0e:55:11:19:13:
a4:18:fe:27:00:33:14:cc:6e:dd:f8:90:68:9b:c1:
b6:4b:a4:9b:d7:14:e3:42:bc:6e:b3:48:79:fe:bb:
a5:3e:6b:55:0a:53:10:1d:4d:a8:a0:4c:f5:bd:4f:
0f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:20:8A:5E:B8:99:44:DA:D1:9F:29:EC:6F:7B:43:EB:50:A7:0F:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA078286C21211EC8EDF35F1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.0.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:fd:d0:88:3c:18:0f:6c:21:69:54:47:d8:89:9d:6f:8e:9c:
ca:b6:eb:1d:12:b2:77:d6:25:8a:e0:cc:fd:8c:d4:a5:fe:bb:
58:1c:9f:c2:45:0c:1c:57:8e:97:eb:a9:05:7f:78:0b:0a:72:
c6:a7:14:12:54:54:fa:7e:b4:b1:0c:14:07:b5:c9:e7:70:5e:
34:0c:c6:98:bb:9e:8a:07:be:1d:ce:71:2a:a9:ae:d1:1c:2d:
93:1c:f6:59:4e:a0:ff:88:ee:cc:ba:e0:87:5e:33:93:47:b9:
67:c4:50:c2:1c:e8:5e:ae:f4:36:27:a1:20:39:17:48:aa:b9:
22:d4:9f:a2:7b:5e:20:b6:55:aa:34:a8:bb:5f:5f:7d:16:5e:
ce:06:f8:2d:cd:e9:79:b1:ed:7d:2a:a6:ac:1e:47:d9:d3:42:
35:d9:57:d0:61:d0:46:3b:a6:da:3a:62:bf:14:78:80:c6:2e:
d6:92:38:0e:02:b7:a8:9a:67:da:23:82:50:71:0b:26:25:2b:
dc:cd:2e:7b:6c:a4:b4:f2:ef:c6:b1:5d:7d:45:44:a5:de:df:
9b:33:b9:3d:c1:7b:6b:7c:7c:df:a7:e3:9a:58:20:8e:ae:f0:
cd:4e:6a:0d:3b:f6:ea:04:42:ae:5a:7b:aa:c0:fc:75:b9:fb:
6f:14:95:08
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEz0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA0MjIwODA1MjZaFw0yMjEyMzAwODA1MjZaMBgxFjAU
BgNVBAMMDTYyNjI2MWNhLTMwODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1Nfga+uQjd0kvgqne5nyTlawv9gbubW2cudMv92GUZLhOXG5t86GV21yV
5IjczikJW0KfmijqO4/yWr/3Fyr61UuqQuKJvBhVxp97z7sVtgxrHqJvPyLIABm+
DLrjPj+KF2x6OiG0AaoUA8zOnuajjCYNMXlR/ZHbo00l5r6zdptIdJry7X1SmLWk
eOCRIxvovdBTJkRfEv8Dojf4q5gxNvnNWQlj7sM9ZyMXcsfHXFw2mcmV5BZhg5t1
uF34tRxLieyqT00LGSs1sEwOVREZE6QY/icAMxTMbt34kGibwbZLpJvXFONCvG6z
SHn+u6U+a1UKUxAdTaigTPW9Tw/PAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUPSCK
XriZRNrRnynsb3tD61CnD78wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0ZBMDc4Mjg2QzIxMjExRUM4RURGMzVGMUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKc+AAwDQYJKoZIhvcNAQELBQAD
ggEBAAv90Ig8GA9sIWlUR9iJnW+OnMq26x0SsnfWJYrgzP2M1KX+u1gcn8JFDBxX
jpfrqQV/eAsKcsanFBJUVPp+tLEMFAe1yedwXjQMxpi7nooHvh3OcSqprtEcLZMc
9llOoP+I7sy64IdeM5NHuWfEUMIc6F6u9DYnoSA5F0iquSLUn6J7XiC2Vao0qLtf
X30WXs4G+C3N6Xmx7X0qpqweR9nTQjXZV9Bh0EY7pto6Yr8UeIDGLtaSOA4Ct6ia
Z9ojglBxCyYlK9zNLntspLTy78axXX1FRKXe35szuT3Be2t8fN+n45pYII6u8M1O
ag079uoEQq5ae6rA/HW5+28UlQg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-ams.rpki-client.org