Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0227900CE5C311EEBA1A9772775412E6.roa
File: 0227900CE5C311EEBA1A9772775412E6.roa (raw, json)
Hash identifier: wX5hXvBY+RuIPufIag3X2ifB7Dj1tkfwN4EAfYtoUng=
Subject key identifier: 3E:51:2D:DE:8F:18:68:99:81:80:F9:C1:13:2D:27:0E:EC:79:F5:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7FB4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0227900CE5C311EEBA1A9772775412E6.roa
Signing time: Tue 19 Mar 2024 07:33:41 +0000
ROA not before: Tue 19 Mar 2024 07:33:35 +0000
ROA not after: Thu 18 Apr 2024 07:33:35 +0000
asID: 174
IP address blocks: 156.236.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32692 (0x7fb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 19 07:33:35 2024 GMT
Not After : Apr 18 07:33:35 2024 GMT
Subject: CN=65f93fd5-18c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:9d:57:87:e2:bc:26:fa:21:4b:53:c1:eb:
18:b8:0f:95:ca:07:c8:68:eb:46:2a:c4:74:78:a5:
20:63:4f:9f:98:e4:67:68:6d:38:f6:07:37:35:34:
2f:62:82:33:52:dc:61:39:8e:b4:76:95:f8:e7:b4:
6a:2a:49:82:36:d9:99:ca:12:0d:9d:3e:43:8e:90:
4a:33:00:5f:71:78:61:70:c7:f9:8d:c9:80:68:47:
6f:2e:98:92:f8:a5:cb:2b:c2:8b:17:5a:e2:22:fe:
32:33:e8:59:76:e0:d9:bb:fc:49:ff:ff:8d:95:52:
c6:67:0f:c1:5f:f3:c9:01:78:bb:bc:0c:e2:37:3b:
15:07:ad:04:34:29:5f:a7:00:7b:46:b4:5c:f2:97:
ae:d2:36:f3:dd:c1:01:2b:9c:19:e7:28:b3:62:dc:
77:fd:34:6c:97:c6:6c:4b:a9:fa:97:84:0a:4e:64:
75:20:80:12:b5:7c:06:36:be:86:ef:99:47:88:be:
d1:ce:cf:a1:6d:15:6a:2f:65:4d:fa:7b:ba:cd:b6:
57:46:dc:bc:7f:62:cb:87:c6:67:c5:4d:87:54:60:
5f:9d:1a:57:7a:56:41:ba:fa:c3:4f:e5:c2:cf:7d:
ab:29:45:23:e7:72:ef:86:94:92:e0:e5:d4:2b:0e:
63:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:51:2D:DE:8F:18:68:99:81:80:F9:C1:13:2D:27:0E:EC:79:F5:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0227900CE5C311EEBA1A9772775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.86.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:3e:2d:9a:37:4f:d3:05:04:1d:b4:45:bf:ec:19:e4:a0:d7:
87:ae:10:3a:95:23:3a:ba:f8:1a:74:12:67:21:5f:2e:0d:b9:
00:65:b1:08:05:d7:24:a7:4b:4e:b5:a4:05:a5:c8:6b:00:ac:
0b:01:cd:cc:26:58:e6:c0:d9:ee:6e:91:7b:86:42:a3:58:85:
ec:48:8f:4d:f7:9e:19:1d:b7:16:d7:b4:69:d1:7c:f3:91:9c:
ba:8d:5b:fa:22:ae:03:d9:1d:2f:07:e4:39:e4:58:08:21:d4:
15:43:44:f1:47:a2:54:5a:6f:3d:1d:47:6a:ba:af:c1:ef:59:
13:56:e6:24:7e:a5:41:9c:c3:82:a0:33:a9:34:80:68:07:e0:
8b:61:dd:13:b6:cb:c1:16:cf:0b:b7:5d:cf:7d:47:6d:56:e8:
5d:c6:d3:bb:a3:da:9e:f1:1b:d4:2f:6e:6d:45:0d:26:20:b5:
cc:0f:40:13:31:58:02:a1:9c:39:9a:0a:8e:c6:28:dc:30:9d:
c1:89:c6:da:93:d7:ef:1b:d7:a9:21:23:1a:88:f7:22:e1:b4:
d9:58:f3:00:85:00:97:43:ca:c5:a5:9f:90:40:2d:0a:d7:4f:
a5:fc:7a:33:b0:18:19:99:67:13:70:e5:2c:ef:04:3a:81:3c:
f6:04:e3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 02:06:18 2024 by rpki-client on console-ams.rpki-client.org