Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE5BD5F2FA4011EB9A467627D8A014CE.roa
File: FE5BD5F2FA4011EB9A467627D8A014CE.roa (raw, json)
Hash identifier: uZck+FON5Ipc+/jMwy7JdSP4s/B1iXnZ+aUCpIbEH2o=
Subject key identifier: 90:F4:4B:49:BE:C0:01:49:66:7A:C8:56:BA:33:EE:27:F5:A3:F0:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0886
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE5BD5F2FA4011EB9A467627D8A014CE.roa
Signing time: Wed 11 Aug 2021 01:11:42 +0000
ROA not before: Wed 11 Aug 2021 01:11:26 +0000
ROA not after: Sun 09 Oct 2022 01:11:26 +0000
asID: 1239
IP address blocks: 156.235.76.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2182 (0x886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 11 01:11:26 2021 GMT
Not After : Oct 9 01:11:26 2022 GMT
Subject: CN=611323ce-d90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:f4:b6:7a:73:10:e0:d2:37:74:ab:9c:35:
05:c8:65:17:21:3b:3d:3a:3e:8e:6c:a2:1a:34:5f:
42:7a:22:55:46:db:14:42:36:dc:1a:39:66:d5:72:
04:8f:ef:ff:bc:d5:44:20:fe:0a:ce:9c:e3:86:ec:
b5:d8:f3:ea:ac:af:73:e0:c0:45:92:5d:dd:1a:21:
5d:5d:9b:79:21:39:da:10:83:7a:f5:e9:c7:e3:74:
b4:04:9e:9b:79:ce:18:eb:9c:f9:72:69:6f:00:d3:
f9:24:73:31:b6:f6:12:fd:84:8b:de:25:db:82:55:
f3:ed:cc:32:b6:b1:5c:cc:0a:80:9c:df:50:68:ab:
57:91:7e:48:ff:d3:a6:25:80:c9:cd:5e:09:db:22:
e8:77:3c:d6:e3:29:b0:7a:7f:53:ad:c2:bd:39:c1:
86:b9:a0:e5:01:70:f8:b2:76:23:c1:34:9b:07:44:
a6:67:d4:03:d9:84:70:96:a5:ef:8e:8e:0a:b7:c5:
ee:4e:0c:8f:a3:7b:e8:b0:37:8e:62:9e:96:17:b0:
e5:f8:20:97:52:f0:a5:15:09:7b:1e:a1:52:1e:9e:
dc:8f:20:c0:c3:42:14:06:64:a1:53:a4:60:a4:c3:
2c:d1:72:2c:e7:c7:32:ed:bf:bf:a6:80:a3:c8:48:
10:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F4:4B:49:BE:C0:01:49:66:7A:C8:56:BA:33:EE:27:F5:A3:F0:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE5BD5F2FA4011EB9A467627D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.76.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:c5:7d:36:22:43:4c:45:25:f0:5b:84:f4:41:4a:a4:32:ac:
89:0e:99:7b:4e:8c:5b:b4:b0:55:81:85:1d:c1:e3:0e:61:57:
2c:16:ce:b3:84:8a:80:55:90:04:3d:84:89:76:5d:16:60:d6:
9a:9d:ec:e1:e9:1a:34:eb:73:bb:f3:b0:b0:ca:26:dd:f3:39:
30:48:7a:61:b2:2a:e0:cc:41:47:f2:e7:c8:65:e5:0b:b3:d7:
1f:ec:39:24:52:0e:0a:ad:1c:01:29:e2:73:46:63:cd:09:09:
68:a6:7a:22:66:22:0e:07:f4:89:d7:43:a1:cd:be:04:d8:61:
e1:40:93:a5:92:7e:1d:14:99:55:f7:78:86:25:47:c4:e5:46:
b3:8a:e8:78:a8:8a:4c:4b:e1:2e:68:fa:4f:ac:91:2f:31:9b:
49:de:24:20:9e:6b:7c:8d:9d:44:44:2b:ed:5b:e2:90:92:01:
22:83:60:01:5e:1c:78:aa:83:10:53:68:d7:96:fc:b1:9b:12:
99:0c:e2:39:7f:35:32:f5:df:ef:1d:0d:82:f3:00:74:90:5b:
c4:50:66:09:c7:54:12:30:a6:74:57:db:d6:cf:21:b5:b2:4b:
05:7d:51:a0:d7:21:e8:67:b4:97:26:7a:f4:f8:9d:bd:82:e1:
de:bf:65:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-ams.rpki-client.org