Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16255340406911EF84F24297762E951A.roa
File: 16255340406911EF84F24297762E951A.roa (raw, json)
Hash identifier: HDqbmUlojuNeDbP1xSCqg9wKsqURT55V7aWzRwEmvbo=
Subject key identifier: 65:C6:CC:B4:A8:E2:94:BB:C9:7B:1A:C9:B1:56:CB:C6:E3:1F:98:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9BF5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16255340406911EF84F24297762E951A.roa
Signing time: Fri 12 Jul 2024 16:09:16 +0000
ROA not before: Fri 12 Jul 2024 16:09:13 +0000
ROA not after: Tue 13 Aug 2024 16:09:13 +0000
asID: 138915
IP address blocks: 156.244.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39925 (0x9bf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 12 16:09:13 2024 GMT
Not After : Aug 13 16:09:13 2024 GMT
Subject: CN=6691552c-ee43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:c1:57:da:f7:ce:ab:67:b9:a0:10:f7:ef:
25:ae:78:3c:df:4a:91:ad:72:f4:34:ae:1c:dd:76:
cb:ca:fb:7a:1e:79:07:08:9c:4a:a7:2a:ac:19:a7:
f6:8d:f1:57:2b:2f:02:87:c1:13:5a:df:14:31:09:
e6:32:44:b7:87:bc:93:66:86:38:4b:9b:54:77:4f:
5b:dd:88:fa:c6:8b:46:ba:83:e4:75:b7:aa:de:47:
19:ac:1b:50:b8:97:7c:e6:1a:51:22:b2:71:40:fd:
87:f8:99:36:f8:0e:1a:15:5b:c9:31:8a:a6:39:86:
60:c5:56:7a:f8:d9:48:7d:22:f7:42:61:d1:6a:92:
5a:2d:35:99:bc:10:81:9f:80:90:7c:a6:34:47:ff:
6f:a3:35:1e:07:5f:e5:be:8b:e3:69:21:06:80:0d:
98:0d:92:d4:58:21:4b:d8:70:e1:71:1c:40:69:85:
90:0b:75:c7:93:fc:e9:82:aa:b4:a8:50:f9:87:77:
62:30:1b:d8:bf:76:a9:ca:1d:48:c7:18:9b:4f:3f:
1c:31:db:e7:bd:90:d0:0b:3e:47:e7:0b:09:d7:84:
d6:38:42:6b:28:66:3c:fe:3d:24:00:a6:b5:81:71:
87:05:83:5b:51:62:0c:1c:fa:43:d4:c4:a8:7c:7c:
8e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C6:CC:B4:A8:E2:94:BB:C9:7B:1A:C9:B1:56:CB:C6:E3:1F:98:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16255340406911EF84F24297762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.14.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:6e:a8:8d:a2:5d:48:9c:80:c3:5b:fc:57:38:14:c0:52:81:
8b:c0:c1:06:ee:3d:6e:39:9c:2f:ae:58:7a:61:6c:13:5d:b6:
37:f0:f4:83:c0:2a:09:fa:2e:79:6a:84:4a:31:6f:29:7b:46:
45:15:f0:74:f4:5e:01:b5:59:0f:d9:a0:72:db:15:0b:95:6d:
90:ed:ec:70:7a:03:55:80:ed:de:57:b6:a4:48:64:30:da:66:
96:e3:aa:36:72:ab:09:fd:9e:6f:fc:a5:41:b1:ff:7a:34:57:
ed:4f:0b:8b:88:e4:ae:32:2e:a9:f0:34:f7:c7:d2:21:df:54:
00:48:dc:c8:3a:1e:97:99:2f:69:57:fe:b4:b9:be:57:15:11:
78:23:c1:64:90:de:c0:a9:1a:33:40:d3:d7:92:4e:5d:49:1a:
fe:98:2f:1c:a1:5e:40:f6:09:60:5c:3c:44:d0:b9:dc:fb:d4:
bf:61:c2:24:0a:4a:36:11:32:4e:f3:a3:ce:70:d0:e8:dc:72:
f6:cd:3f:ad:4b:7b:d3:50:d3:82:06:1a:df:03:bd:c2:7b:9c:
a5:00:a0:c8:fb:11:64:c9:26:bb:76:45:eb:34:7f:95:3a:fa:
6e:6f:be:e2:a1:dc:61:cc:a0:2d:17:a2:40:a3:a3:b2:f7:2b:
2c:d8:cb:43
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJv1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzEyMTYwOTEzWhcNMjQwODEzMTYwOTEzWjAYMRYw
FAYDVQQDEw02NjkxNTUyYy1lZTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyNTBV9r3zqtnuaAQ9+8lrng830qRrXL0NK4c3XbLyvt6HnkHCJxKpyqs
Gaf2jfFXKy8Ch8ETWt8UMQnmMkS3h7yTZoY4S5tUd09b3Yj6xotGuoPkdbeq3kcZ
rBtQuJd85hpRIrJxQP2H+Jk2+A4aFVvJMYqmOYZgxVZ6+NlIfSL3QmHRapJaLTWZ
vBCBn4CQfKY0R/9vozUeB1/lvovjaSEGgA2YDZLUWCFL2HDhcRxAaYWQC3XHk/zp
gqq0qFD5h3diMBvYv3apyh1IxxibTz8cMdvnvZDQCz5H5wsJ14TWOEJrKGY8/j0k
AKa1gXGHBYNbUWIMHPpD1MSofHyOQQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGXG
zLSo4pS7yXsaybFWy8bjH5j8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNjI1NTM0MDQwNjkxMUVGODRGMjQyOTc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPQOMA0GCSqGSIb3DQEBCwUA
A4IBAQCfbqiNol1InIDDW/xXOBTAUoGLwMEG7j1uOZwvrlh6YWwTXbY38PSDwCoJ
+i55aoRKMW8pe0ZFFfB09F4BtVkP2aBy2xULlW2Q7exwegNVgO3eV7akSGQw2maW
46o2cqsJ/Z5v/KVBsf96NFftTwuLiOSuMi6p8DT3x9Ih31QASNzIOh6XmS9pV/60
ub5XFRF4I8FkkN7AqRozQNPXkk5dSRr+mC8coV5A9glgXDxE0Lnc+9S/YcIkCko2
ETJO86POcNDo3HL2zT+tS3vTUNOCBhrfA73Ce5ylAKDI+xFkySa7dkXrNH+VOvpu
b77iodxhzKAtF6JAo6Oy9yss2MtD
-----END CERTIFICATE-----
Generated at Wed Aug 14 05:05:46 2024 by rpki-client on console-ams.rpki-client.org