Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EE90218353A11EF941F1058762E951A.roa
File: 1EE90218353A11EF941F1058762E951A.roa (raw, json)
Hash identifier: FkMVIUzBhLfvQwiz5EobjOgDsQOuVg9gUFqkmWT5bFA=
Subject key identifier: 25:43:04:F5:4B:1B:21:CC:E5:68:DA:4C:C9:50:AF:19:EF:4B:E9:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 95EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EE90218353A11EF941F1058762E951A.roa
Signing time: Fri 28 Jun 2024 10:35:22 +0000
ROA not before: Fri 28 Jun 2024 10:35:18 +0000
ROA not after: Wed 31 Jul 2024 10:35:18 +0000
asID: 48031
IP address blocks: 156.236.22.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38383 (0x95ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 10:35:18 2024 GMT
Not After : Jul 31 10:35:18 2024 GMT
Subject: CN=667e91ea-7a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0c:9a:b1:55:93:86:2f:ab:86:29:15:94:5e:
cb:7c:b8:22:68:f8:28:23:02:20:f6:6f:31:6c:28:
a2:80:60:7b:af:b2:5d:84:ab:9f:e5:b8:d8:12:de:
38:ae:da:c6:a2:0c:c7:02:e2:df:7c:71:e3:e0:5b:
6d:e0:d4:93:da:7a:10:72:80:5d:53:58:2c:6b:a2:
78:d0:62:67:ce:cb:ef:d8:12:13:36:d5:5a:bd:8d:
ed:38:3f:fb:94:02:62:31:d8:48:5e:42:fc:fb:fe:
97:60:82:f9:45:c0:9e:37:29:36:b1:6c:7e:25:07:
86:a6:63:7c:88:c7:b8:3a:4c:a6:a2:57:81:5f:5c:
0f:02:44:9e:7b:c5:cd:e8:2f:f5:6a:a3:29:4b:15:
24:7c:2f:5f:8f:2d:54:f3:41:69:fe:f7:07:4e:9e:
42:38:72:57:79:c5:a5:99:8f:8c:67:02:f7:30:27:
85:51:d1:54:f8:ee:56:af:04:eb:36:66:68:80:67:
42:5d:99:e8:76:87:6c:28:30:2f:22:88:60:cb:dd:
dd:d0:0f:1d:09:6b:8c:a3:77:65:71:f5:92:2a:2f:
1c:3e:ee:27:ce:7e:b1:59:0f:81:a7:0b:f3:bb:0f:
c6:f7:99:f9:44:92:09:8a:5c:6c:98:af:6f:c0:72:
7c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:43:04:F5:4B:1B:21:CC:E5:68:DA:4C:C9:50:AF:19:EF:4B:E9:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EE90218353A11EF941F1058762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.22.0/23
Signature Algorithm: sha256WithRSAEncryption
88:f2:90:6e:f1:cc:6d:10:c6:14:28:21:df:08:f5:d0:6a:fc:
65:3e:74:76:af:2b:6d:fd:2f:2c:2c:93:4c:dc:18:9a:8a:b6:
2a:6a:e0:3b:a5:9c:74:4e:9f:fc:41:12:54:8b:8e:49:01:d7:
07:63:cc:d8:61:91:e2:f2:9a:b0:c7:c6:e7:01:27:e1:00:61:
d9:e1:d2:22:8c:2b:b8:c9:4a:aa:24:86:d5:64:1e:8d:08:1f:
86:5e:5c:85:84:29:59:5a:c7:d4:29:c0:3b:66:23:7b:89:dd:
78:dc:d0:14:55:bf:bf:18:71:e8:d2:d4:e3:60:5a:9c:e3:9e:
40:33:dc:7a:13:a3:7f:8a:91:a8:ae:6a:b1:3e:77:1c:7c:bc:
48:ee:ed:35:4b:d4:6e:41:e5:24:42:83:37:9d:27:05:e3:dd:
b0:a4:73:38:0b:21:10:3d:30:67:b5:15:7b:5e:71:e2:a6:cb:
74:33:f6:04:98:0e:4f:39:91:2b:49:fb:7f:26:3f:a1:d0:c0:
5a:b3:3b:f5:3d:8f:3d:d1:c1:dd:ea:15:4d:10:65:82:11:25:
25:fe:20:ea:99:ca:15:f6:db:d3:1d:fb:37:db:61:bb:5f:d1:
96:bc:8b:1c:72:f3:26:62:82:82:ed:ba:d3:2e:3b:b2:48:e3:
e9:53:91:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 14:18:38 2024 by rpki-client on console-ams.rpki-client.org