Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/B6D493FC412511EA87867A3AF8AEA228.roa
File: B6D493FC412511EA87867A3AF8AEA228.roa (raw, json)
Hash identifier: 6cnFVVB2lWLFPM1sgLM+kXJTK2HLLIXT65Durr6rEHg=
Subject key identifier: 16:AC:5E:C3:EA:4E:61:4C:09:24:F5:87:B7:F3:CD:7E:E6:E8:AD:C6
Certificate issuer: /CN=F36F8DABAR/serialNumber=9233844E12BC7EEDF436CE1CC99EAE2136472647
Certificate serial: 034D
Authority key identifier: 92:33:84:4E:12:BC:7E:ED:F4:36:CE:1C:C9:9E:AE:21:36:47:26:47
Authority info access: rsync://rpki.afrinic.net/repository/arin/kjOEThK8fu30Ns4cyZ6uITZHJkc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/B6D493FC412511EA87867A3AF8AEA228.roa
Signing time: Mon 27 Jan 2020 16:54:43 +0000
ROA not before: Mon 27 Jan 2020 16:54:36 +0000
ROA not after: Mon 31 Jan 2022 16:54:36 +0000
asID: 37314
IP address blocks: 168.155.0.0/16 maxlen: 24
192.157.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 845 (0x34d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8DABAR/serialNumber=9233844E12BC7EEDF436CE1CC99EAE2136472647
Validity
Not Before: Jan 27 16:54:36 2020 GMT
Not After : Jan 31 16:54:36 2022 GMT
Subject: CN=5e2f15d3-b54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:b6:be:45:ab:9a:fe:e2:6c:a2:75:40:f6:
03:82:89:e5:48:19:aa:4c:ae:3b:ee:d1:dd:c0:32:
92:55:cb:c9:8f:2c:0b:b9:ec:a2:15:a7:3c:11:cc:
2c:e9:6d:46:a7:9c:2b:4d:f4:80:56:9d:a8:1d:a7:
d4:dd:70:e6:74:9d:b9:d2:88:07:80:5d:06:60:1d:
1b:56:ba:eb:6d:25:d7:96:6f:6b:99:e1:bc:67:b3:
3f:df:b1:d5:05:fb:b3:14:36:d2:0e:ae:4d:0b:23:
d7:d6:97:df:3b:41:83:9e:40:f4:78:ab:78:60:95:
b6:28:48:7d:ec:57:bc:10:a6:2d:f7:02:ae:af:8e:
fa:99:c4:ed:c1:1a:a5:89:66:ff:23:39:4f:02:f2:
78:d9:89:84:4f:47:0c:cd:24:e1:e6:11:de:dc:ff:
74:da:33:9c:2d:4b:e2:12:4b:05:d5:55:e9:ca:6e:
61:08:74:70:cb:ca:49:f5:18:aa:b9:67:dc:8a:5c:
c0:04:03:1b:6f:43:83:bf:13:99:40:51:22:66:e8:
0a:cc:69:3d:37:39:de:30:e5:55:57:69:16:f7:5e:
b6:70:58:29:e5:0a:35:18:39:38:2d:e1:45:0e:01:
8b:87:8d:52:4a:95:7b:0f:4a:f3:ce:68:2a:95:98:
7b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AC:5E:C3:EA:4E:61:4C:09:24:F5:87:B7:F3:CD:7E:E6:E8:AD:C6
X509v3 Authority Key Identifier:
keyid:92:33:84:4E:12:BC:7E:ED:F4:36:CE:1C:C9:9E:AE:21:36:47:26:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kjOEThK8fu30Ns4cyZ6uITZHJkc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/B6D493FC412511EA87867A3AF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
168.155.0.0/16
192.157.190.0/24
Signature Algorithm: sha256WithRSAEncryption
81:8d:dd:8c:44:5d:81:fe:48:6b:61:96:58:b0:44:63:df:62:
d8:94:b5:b7:79:85:59:3b:bf:ec:35:49:8a:d6:29:5d:14:d1:
18:3f:9e:b7:21:eb:c3:cb:7a:ef:a1:ac:67:c5:ba:5a:8d:e1:
b2:e2:c2:a5:5e:7f:f2:d1:19:d6:57:c4:b5:90:79:c9:e3:8b:
67:2e:19:f8:57:2f:c3:24:79:33:fb:a5:f1:51:fe:2c:44:9a:
87:33:0d:f4:87:bb:e7:7d:e1:fa:96:6d:4f:27:f9:d4:fb:a7:
52:1c:6d:b8:5d:f8:0e:49:e4:e0:61:44:9b:49:01:44:ad:ba:
c1:f0:d8:f0:2f:f5:25:59:05:17:53:80:d3:2d:85:e0:c1:89:
f3:e3:d0:94:50:d3:38:f9:56:d0:5d:0f:52:31:99:8a:23:93:
d2:93:14:ad:2d:18:d5:3d:25:3e:eb:41:8e:5f:68:ff:a7:8f:
2b:63:87:18:73:e4:96:69:f4:de:f8:2f:79:5a:35:e7:8c:ee:
32:c2:37:7f:3b:b7:be:2b:59:39:8b:7d:0b:5e:43:d5:0b:45:
94:3b:61:1d:46:fe:d4:2d:9b:f1:de:23:a1:80:35:d2:18:e1:
6b:44:71:bc:c7:3b:6b:bd:d0:5e:da:36:af:7f:b1:f6:f3:ab:
4b:43:42:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org