Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEB77D8EC5FC11ECA8406DC5F1222468.roa
File: FEB77D8EC5FC11ECA8406DC5F1222468.roa (raw, json)
Hash identifier: Su1p7Mo50mQqLYCCPkP2OuKpltKyprdwHkwPCwYSy1Q=
Subject key identifier: B3:D3:F6:D6:E6:A2:72:F3:1E:61:83:1F:9E:15:0E:BF:3F:C2:8B:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 139B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEB77D8EC5FC11ECA8406DC5F1222468.roa
Signing time: Wed 27 Apr 2022 07:38:14 +0000
ROA not before: Wed 27 Apr 2022 07:38:10 +0000
ROA not after: Fri 30 Dec 2022 07:38:10 +0000
asID: 328608
IP address blocks: 156.237.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5019 (0x139b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 27 07:38:10 2022 GMT
Not After : Dec 30 07:38:10 2022 GMT
Subject: CN=6268f2e6-93c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:14:e2:a5:f8:4a:77:10:7a:d4:50:3a:04:
df:1e:fe:19:23:b8:9d:95:8a:c0:bc:cc:48:2b:f1:
d7:1f:a3:a6:aa:1f:43:f0:ce:57:80:09:9e:0b:23:
a3:e4:45:ff:2b:e4:1f:ab:fa:87:61:cd:b7:5e:d9:
43:4c:e7:e4:2a:66:fc:2e:1f:8d:a9:cf:83:2b:5c:
a4:9f:24:75:9c:f4:0e:1a:43:87:7b:ca:49:21:e6:
d9:9b:54:29:62:8b:85:f2:0f:8f:cc:e0:8e:9f:a2:
ce:e5:8f:be:c8:3c:7a:02:3b:43:81:76:00:13:7e:
fc:ff:b4:17:3d:4e:9d:28:5d:2d:a8:48:77:7b:65:
b8:03:26:65:4b:59:af:be:f8:f2:e5:78:0d:9f:0a:
65:42:e6:cb:d7:b8:f8:a9:53:ff:6d:6c:49:12:34:
c2:bd:71:70:31:4c:05:ea:1d:65:91:fd:f9:3f:c4:
6e:51:d5:3b:1e:30:66:a4:d8:a7:0f:18:82:64:8e:
8a:c5:20:09:7b:d8:ed:ab:21:2f:d5:9d:e4:85:f4:
08:1f:9c:bb:b3:f2:99:50:53:ab:2c:e3:de:6e:06:
a0:a0:e9:24:9e:ef:4e:4d:a5:33:d9:b2:0f:cf:59:
04:bb:ca:1c:5f:e0:e1:6c:fa:48:fd:8f:ae:1c:b5:
91:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D3:F6:D6:E6:A2:72:F3:1E:61:83:1F:9E:15:0E:BF:3F:C2:8B:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEB77D8EC5FC11ECA8406DC5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.7.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b3:9a:ef:93:fb:bf:11:a9:57:63:6e:99:af:20:9e:c0:a3:
4e:9a:9e:1d:89:ee:04:6c:ac:96:27:e0:02:4c:3d:11:fd:bf:
e3:99:ff:b1:8c:4a:4e:cd:42:3c:bd:ed:a3:49:8d:2f:8f:7b:
6f:a7:d8:1c:66:be:68:61:0a:c1:fc:1f:d0:2f:ea:26:42:75:
1f:fe:d8:ad:70:13:bc:96:df:7d:8f:a5:40:58:e3:16:27:5e:
00:c9:34:fc:c3:10:19:be:b3:bd:ea:04:96:be:45:d4:5d:24:
c9:dd:8c:65:d1:56:43:78:02:ae:27:4f:5e:84:d4:05:75:79:
94:6e:9b:e7:98:ee:b3:45:12:a4:b0:7c:95:ee:fa:77:b0:b3:
47:5e:2d:ce:a5:e6:5d:cf:6a:64:9b:81:b2:ba:fe:f8:fa:84:
e5:2a:ec:8c:5f:96:8a:2a:15:b9:71:41:d5:5c:2e:6b:70:60:
87:be:69:56:86:f1:d6:a4:fa:81:59:0e:bd:49:0c:ce:cb:ca:
e4:04:0b:79:a2:e9:7e:6a:a3:9d:56:b7:41:70:49:15:70:5a:
5d:91:fb:33:1e:ce:b3:1f:72:3c:70:3a:1d:95:bf:6c:82:38:
72:d9:8d:b4:88:f2:76:b9:62:fb:d4:3c:f7:c1:86:43:14:92:
58:fb:a0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org