Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D80FCE83F5B11EF8CB52075762E951A.roa
File: 1D80FCE83F5B11EF8CB52075762E951A.roa (raw, json)
Hash identifier: TrinyNPT/i96R/HH3ouqv1gH/Gr2Rmc0y+c7nsWgM1Q=
Subject key identifier: AC:7F:B2:A3:9F:20:90:2B:9B:D6:17:72:6E:2E:04:2C:1A:B5:4B:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9BB6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D80FCE83F5B11EF8CB52075762E951A.roa
Signing time: Thu 11 Jul 2024 07:56:44 +0000
ROA not before: Thu 11 Jul 2024 07:56:41 +0000
ROA not after: Wed 21 Aug 2024 07:56:41 +0000
asID: 63139
IP address blocks: 156.227.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39862 (0x9bb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 07:56:41 2024 GMT
Not After : Aug 21 07:56:41 2024 GMT
Subject: CN=668f903c-c56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:cc:40:11:2c:95:97:1e:f4:fc:72:10:9e:
53:13:3f:a7:13:a3:44:fd:b2:fc:17:e6:e4:af:df:
02:99:82:c9:6c:b9:e7:a0:f5:76:31:96:06:5f:04:
41:ef:51:af:5e:99:ef:a7:32:7b:ed:9c:26:a7:53:
48:1a:3c:fc:fc:2b:13:15:21:89:55:80:a0:27:34:
cc:f4:ee:4c:85:fe:cd:69:f6:4a:9f:fe:f2:e9:72:
ac:46:d4:9b:4e:0f:07:2c:3e:7f:62:70:79:7b:c7:
4a:7e:e9:24:d3:5c:1c:a5:a2:e8:00:99:5c:16:6e:
50:e4:8c:67:e0:6b:ad:70:ee:22:a3:39:8c:9c:cc:
3c:5d:e3:df:b9:01:95:3c:05:11:da:fc:22:ef:69:
dc:b5:4d:02:4c:15:ce:f7:32:a0:9f:7b:71:cd:f2:
ff:6a:05:39:c7:54:4d:e4:d3:28:86:d7:ed:43:73:
61:c7:cf:a4:4b:3f:e8:5b:79:51:40:d4:6a:46:5d:
f3:42:fd:b7:83:f3:0c:58:46:b5:29:93:72:36:6f:
fa:93:d5:63:07:5f:8d:7b:9a:6d:a0:4b:06:81:fe:
2f:4d:cd:32:67:d1:df:bd:21:b8:fd:71:5e:42:cb:
e4:8d:ea:f1:30:57:41:79:32:46:67:2c:98:3d:53:
0e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7F:B2:A3:9F:20:90:2B:9B:D6:17:72:6E:2E:04:2C:1A:B5:4B:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D80FCE83F5B11EF8CB52075762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.192.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:d6:45:09:c5:cc:96:63:a1:e6:30:50:96:26:1e:bb:7e:41:
a0:5b:d3:51:9e:4b:f5:88:fb:c5:58:90:dd:0d:87:ff:2a:60:
a1:b2:97:07:23:ab:81:1b:9d:10:d7:03:7e:f4:c0:7a:b8:ab:
11:75:b5:22:b6:2b:ec:df:80:18:77:c3:27:61:e7:77:2c:29:
87:7b:b1:c1:c9:ff:99:32:e8:9e:a4:40:56:9d:e8:36:41:ed:
df:3f:4f:8d:31:e9:12:eb:8d:5b:7d:ed:c2:84:9d:80:6f:d6:
ed:05:45:f6:d2:ec:e0:cc:3c:a3:d4:07:17:10:ba:6b:ed:d8:
ae:d0:86:f0:99:47:fc:b9:8b:26:1d:0c:9c:0b:c2:56:f9:b5:
9c:bb:6a:09:d0:b3:5f:96:a7:97:ae:27:6b:15:fb:96:d1:ec:
1e:eb:04:cf:6b:7d:fd:79:ab:4f:18:f1:6d:43:0f:51:45:47:
0f:12:21:16:17:dd:a1:09:2c:67:d9:09:84:bf:82:5a:43:7f:
44:c2:45:06:8e:88:08:f2:5b:c3:9a:c3:5b:50:b0:8e:69:8d:
70:a8:19:da:6b:4c:24:f8:96:b8:01:78:71:21:2e:36:bf:d0:
58:b0:52:24:c1:44:51:18:2f:95:b6:d8:41:c5:c5:2a:08:a9:
82:cb:8d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 16:36:45 2024 by rpki-client on console-ams.rpki-client.org