Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0641569CCFDB11EBB345C047F8AEA228.roa
File: 0641569CCFDB11EBB345C047F8AEA228.roa (raw, json)
Hash identifier: Aq2/HUz5AzdatD1rDocAJxEjBr4Szb4GrHjKkBxdjC8=
Subject key identifier: CE:8A:70:19:3A:EC:0E:09:1E:1C:2F:35:8C:BD:11:39:CA:67:A6:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 067B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0641569CCFDB11EBB345C047F8AEA228.roa
Signing time: Fri 18 Jun 2021 02:15:17 +0000
ROA not before: Fri 18 Jun 2021 02:15:14 +0000
ROA not after: Tue 19 Jul 2022 02:15:14 +0000
asID: 7018
IP address blocks: 156.238.0.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1659 (0x67b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 18 02:15:14 2021 GMT
Not After : Jul 19 02:15:14 2022 GMT
Subject: CN=60cc01b5-0fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bd:31:1b:77:7f:89:f5:49:76:9e:8d:09:e6:
4a:96:f8:b2:05:25:e0:60:f8:2e:fb:4a:79:97:bf:
2d:f3:be:51:84:3b:aa:af:08:7d:8d:b9:2d:6e:b5:
25:4b:40:cb:d3:2c:bd:a9:c7:7f:a3:30:bf:67:85:
ac:ed:69:ba:3b:d7:23:d1:63:64:4f:46:16:4e:c2:
80:26:1c:65:e4:87:35:2d:ce:b1:27:d1:0d:eb:6a:
8c:34:91:b3:22:14:35:18:24:2c:72:9a:4c:cd:a2:
eb:d4:aa:06:44:cc:57:c8:e8:f2:47:13:cb:b2:73:
b7:84:6b:ca:8d:97:06:8a:93:92:4d:33:8e:6c:c0:
04:5c:6e:26:f8:ef:5f:28:62:1b:f7:b7:97:94:81:
fa:9f:e8:8b:aa:62:e9:cc:bd:d8:06:14:2b:c2:c3:
51:fc:7c:66:06:c7:35:ee:48:03:63:83:90:cc:cd:
9a:02:b6:61:35:f0:b5:2c:5b:ad:c3:65:84:ff:4b:
63:83:83:f7:da:83:3b:10:e0:6f:ec:9b:f3:d7:1a:
67:34:1d:43:0e:d2:9c:c5:9c:f0:3b:bb:ab:ad:a3:
cc:bb:1b:22:3d:b1:0c:2f:da:07:a1:99:7b:f1:b4:
87:89:5d:43:9a:b8:52:d1:95:41:92:f6:3e:a9:65:
4a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8A:70:19:3A:EC:0E:09:1E:1C:2F:35:8C:BD:11:39:CA:67:A6:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0641569CCFDB11EBB345C047F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.0.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:c4:2f:89:d6:b9:ce:c5:1e:97:1b:43:87:63:99:5e:c2:2b:
52:e3:82:45:88:1e:d2:59:17:ff:42:93:62:62:d4:66:7c:89:
b9:5f:af:5f:0d:e4:5f:ed:94:84:83:b3:b7:a5:40:8b:a4:1b:
f7:5d:99:21:16:62:8d:3a:de:05:42:a0:c0:9b:30:af:f8:8f:
0c:e4:7e:19:c6:82:f8:d0:0e:31:7e:4e:b1:0d:9b:85:0e:1f:
16:8f:f9:a9:9c:a1:92:97:40:3c:6e:25:67:a5:7b:42:a9:0f:
0f:3d:82:f0:c9:04:cc:42:ba:bb:31:59:59:bd:e9:c3:81:af:
09:67:7b:a8:fa:7e:7c:14:c1:2a:74:92:72:73:14:61:9b:9c:
1b:b1:35:42:ea:7c:6e:03:ec:ec:52:ca:c0:be:b5:33:3d:6f:
75:82:af:5b:68:3a:d3:15:0a:65:db:62:bf:85:3b:bc:c6:91:
38:a0:b1:1c:d9:ca:bb:e0:48:be:16:7d:b5:f0:b1:5a:b4:c4:
99:38:64:8d:f9:91:c3:c8:e7:51:51:85:b6:19:aa:01:22:80:
ff:c0:cf:a9:13:36:9b:45:4b:7c:d6:dd:50:d3:df:f2:3f:01:
16:e3:07:c2:b2:98:dd:ee:f8:7f:70:5c:a0:9c:07:f7:d9:8e:
83:2f:95:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-ams.rpki-client.org