Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/086D588C4A6A11EFA73D2451762E951A.roa
File: 086D588C4A6A11EFA73D2451762E951A.roa (raw, json)
Hash identifier: 58bZziJkVHsM2PJOmrYol0g9SG9UfkXWYQyK22iOcsY=
Subject key identifier: 2A:18:C5:C6:C4:6B:D2:39:97:92:96:68:04:25:61:01:35:0C:01:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A019
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/086D588C4A6A11EFA73D2451762E951A.roa
Signing time: Thu 25 Jul 2024 09:41:14 +0000
ROA not before: Thu 25 Jul 2024 09:41:11 +0000
ROA not after: Sat 03 Aug 2024 09:41:11 +0000
asID: 7018
IP address blocks: 156.248.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40985 (0xa019)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 09:41:11 2024 GMT
Not After : Aug 3 09:41:11 2024 GMT
Subject: CN=66a21dba-18e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f2:db:6d:8d:6a:ab:0f:7e:39:94:c4:85:83:
72:5b:8c:08:45:4b:2c:d6:a4:e3:0e:a8:ca:24:6e:
34:05:fd:9c:98:69:9b:c2:dd:17:b6:79:77:bf:b8:
61:5c:10:59:3b:38:d4:bd:60:8e:6e:6a:2f:8c:7f:
56:90:f7:1f:aa:10:b1:71:41:07:69:ae:d8:1c:59:
52:72:d7:c2:14:39:50:93:ee:73:65:65:c2:4c:7c:
ec:2d:84:a2:fe:42:d8:ee:93:46:81:9b:b0:39:7f:
4e:15:cf:08:fb:97:ba:de:7a:c1:f3:d7:cf:2f:56:
1d:3f:e2:17:bb:c3:b5:f6:c4:01:32:d4:a2:a6:95:
50:48:7a:35:45:07:dd:ce:58:ef:32:75:4c:78:07:
b1:41:02:7d:3c:d9:f3:36:ee:03:f0:95:44:d5:89:
f5:d1:ef:0d:eb:7a:b2:f3:32:b5:d4:42:c4:29:8b:
2f:08:89:8b:56:45:9f:83:fb:02:b1:01:f5:32:e6:
c1:c8:fe:ab:24:fc:67:72:ee:3d:ba:1f:a1:38:e5:
1d:ea:7b:94:ab:09:b0:fb:33:62:27:88:49:66:6a:
f2:5e:24:eb:41:65:f5:6c:bb:a0:e0:58:14:30:a4:
bd:5f:fb:94:17:67:1c:5d:b1:e2:d1:53:db:05:ff:
de:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:18:C5:C6:C4:6B:D2:39:97:92:96:68:04:25:61:01:35:0C:01:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/086D588C4A6A11EFA73D2451762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.108.0/22
Signature Algorithm: sha256WithRSAEncryption
90:21:50:8a:70:cb:be:e4:f4:6d:2b:32:33:e1:5e:78:06:78:
27:e7:88:1e:09:80:21:22:9e:47:a7:32:a6:92:03:85:0b:5e:
4e:f7:96:cf:79:91:26:d5:5b:9c:70:c2:99:83:a8:49:ac:39:
9a:ab:61:d5:6a:a6:f4:ea:b6:a8:24:6b:71:fe:1a:7a:98:3a:
c4:45:2d:ab:a4:0a:05:7b:30:ea:2b:c3:d0:cc:60:c5:6f:9c:
7a:8a:df:0c:59:33:75:94:d1:88:36:be:c1:61:a3:11:a4:2e:
f6:16:87:a6:d1:c8:cb:aa:ed:9f:f0:97:5e:61:26:eb:82:90:
f1:a0:1c:5c:c9:e5:e0:73:5d:cc:85:da:dc:8b:8c:a0:5a:ab:
c7:4f:51:cd:e5:db:fc:8c:20:19:64:8e:22:5a:60:58:70:fa:
ba:dd:8e:28:a1:42:ac:60:dd:0a:fe:a5:51:b3:03:c1:60:1a:
e6:87:17:1e:8b:dd:e8:98:bb:71:e2:c9:89:36:2c:3a:4a:a1:
5d:47:6d:d9:86:95:97:1b:bc:48:94:53:41:a4:02:60:27:fa:
b2:cd:c1:3d:81:f2:f3:6a:32:84:57:85:2c:3b:5c:eb:fa:26:
4d:64:68:e2:2d:79:77:bd:75:e1:bd:ca:1a:a5:da:c9:91:e1:
b5:7e:36:2e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAKAZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI1MDk0MTExWhcNMjQwODAzMDk0MTExWjAYMRYw
FAYDVQQDEw02NmEyMWRiYS0xOGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzPLbbY1qqw9+OZTEhYNyW4wIRUss1qTjDqjKJG40Bf2cmGmbwt0Xtnl3
v7hhXBBZOzjUvWCObmovjH9WkPcfqhCxcUEHaa7YHFlSctfCFDlQk+5zZWXCTHzs
LYSi/kLY7pNGgZuwOX9OFc8I+5e63nrB89fPL1YdP+IXu8O19sQBMtSippVQSHo1
RQfdzljvMnVMeAexQQJ9PNnzNu4D8JVE1Yn10e8N63qy8zK11ELEKYsvCImLVkWf
g/sCsQH1MubByP6rJPxncu49uh+hOOUd6nuUqwmw+zNiJ4hJZmryXiTrQWX1bLug
4FgUMKS9X/uUF2ccXbHi0VPbBf/eqQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCoY
xcbEa9I5l5KWaAQlYQE1DAFyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wODZENTg4QzRBNkExMUVGQTczRDI0NTE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPhsMA0GCSqGSIb3DQEBCwUA
A4IBAQCQIVCKcMu+5PRtKzIz4V54Bngn54geCYAhIp5HpzKmkgOFC15O95bPeZEm
1VuccMKZg6hJrDmaq2HVaqb06raoJGtx/hp6mDrERS2rpAoFezDqK8PQzGDFb5x6
it8MWTN1lNGINr7BYaMRpC72Foem0cjLqu2f8JdeYSbrgpDxoBxcyeXgc13Mhdrc
i4ygWqvHT1HN5dv8jCAZZI4iWmBYcPq63Y4ooUKsYN0K/qVRswPBYBrmhxcei93o
mLtx4smJNiw6SqFdR23ZhpWXG7xIlFNBpAJgJ/qyzcE9gfLzajKEV4UsO1zr+iZN
ZGjiLXl3vXXhvcoapdrJkeG1fjYu
-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:52 2024 by rpki-client on console-ams.rpki-client.org