Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/1FEA6318BCE211ED83049CC6F1222468.roa
File: 1FEA6318BCE211ED83049CC6F1222468.roa (raw, json)
Hash identifier: nd5L4qLBQHq4JCQZsyh+0Yq/MHzyVvuKHsFCVqiesRU=
Subject key identifier: 22:B2:BB:D6:D7:3D:26:12:D5:34:6E:6D:4E:50:9D:B2:A1:63:58:6A
Certificate issuer: /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Certificate serial: 02
Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
Authority info access: rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/1FEA6318BCE211ED83049CC6F1222468.roa
Signing time: Tue 07 Mar 2023 12:18:10 +0000
ROA not before: Tue 07 Mar 2023 12:18:07 +0000
ROA not after: Thu 07 Mar 2024 12:18:07 +0000
asID: 327697
IP address blocks: 139.26.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Validity
Not Before: Mar 7 12:18:07 2023 GMT
Not After : Mar 7 12:18:07 2024 GMT
Subject: CN=64072b82-cf21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dc:f0:0a:5d:91:46:8d:17:d6:b8:24:6c:40:
33:44:5a:13:d3:d9:70:d9:ff:23:93:56:6f:1e:67:
b6:29:c7:36:0b:f5:ab:b0:0b:84:1a:fe:97:0a:89:
52:81:76:d6:14:03:45:dc:50:54:e0:76:db:c2:65:
1a:f1:48:b4:4c:58:69:fa:1e:3e:2d:9f:36:35:87:
27:b3:ba:69:0b:73:b8:4e:cf:30:2f:5b:05:da:af:
37:42:24:9f:f6:3e:30:7d:0f:1c:07:b3:7a:aa:df:
5b:28:34:78:6b:a3:de:a6:37:30:76:c7:f0:81:ed:
fc:56:1f:15:45:08:3b:2b:ce:6f:16:20:3f:23:d4:
34:ff:33:68:02:06:3a:1e:03:7e:26:a4:10:93:c8:
05:bc:c5:7a:c9:3c:31:9b:28:11:98:ea:c1:28:cd:
9a:cd:2c:b6:d3:80:37:aa:90:6d:df:0d:16:16:1b:
bc:8b:01:d8:45:c7:f2:dd:40:df:5e:a7:be:fc:7b:
47:33:3d:8e:93:2f:16:6b:3a:7d:3b:6c:82:51:7f:
4a:35:5c:41:c5:7d:a7:b2:26:7b:f2:73:6c:2d:f5:
07:85:b7:3e:a7:96:4b:fd:59:26:b8:14:4c:a8:99:
99:62:15:e0:3d:d5:98:34:10:0a:66:86:55:ae:88:
89:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B2:BB:D6:D7:3D:26:12:D5:34:6E:6D:4E:50:9D:B2:A1:63:58:6A
X509v3 Authority Key Identifier:
keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/1FEA6318BCE211ED83049CC6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.26.0.0/16
Signature Algorithm: sha256WithRSAEncryption
58:14:04:ab:aa:de:43:23:0a:15:6e:d2:c7:8f:25:9a:8e:79:
8d:eb:af:e1:a7:77:d3:f6:b2:53:ee:42:fa:1d:01:37:44:8d:
fd:d9:15:a2:53:77:3c:ff:d6:9e:75:89:78:5c:90:36:bd:60:
2a:f7:bc:b1:16:46:73:a1:31:29:c5:17:64:78:50:79:e7:73:
8b:ad:b4:7a:85:e6:83:bd:fd:cc:68:0d:a5:1c:1a:b2:48:a7:
0a:aa:03:cb:24:8e:e2:5a:d2:29:7f:50:ca:29:42:92:35:60:
e2:d1:9d:2e:b2:5e:72:69:29:63:9e:2a:83:b7:d3:c6:36:99:
86:06:60:ff:4d:11:df:82:1e:f0:7c:61:46:3a:1b:55:a1:39:
79:b4:b3:e7:84:bf:96:4c:98:8e:86:51:be:ef:4f:59:43:a7:
2f:cb:c7:a1:75:ad:8d:b3:70:5c:c2:ef:02:2d:b1:dd:97:4d:
e9:8d:a9:80:45:6d:33:19:45:c0:fb:b0:9a:98:06:c5:08:c8:
0d:6a:37:73:2c:be:fa:de:95:33:6a:7f:87:7d:38:04:18:01:
5f:f3:8c:b6:77:0a:cd:eb:0c:6c:21:e1:93:bb:4a:b5:ce:67:
46:57:42:dc:c0:26:a8:7e:07:44:44:af:57:58:5d:91:1c:77:
60:59:f4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 03:55:14 2024 by rpki-client on console-ams.rpki-client.org