Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/269A5F1602DB11EFA98BB72E017001B1.roa
File: 269A5F1602DB11EFA98BB72E017001B1.roa (raw, json)
Hash identifier: WzaB5cZqWWjKWPU9mlxmaGINPECxSq52WTGWRTnWk4k=
Subject key identifier: 79:D1:85:32:67:5A:26:95:0F:D1:95:51:9D:7A:01:02:14:9B:FD:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 84F1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/269A5F1602DB11EFA98BB72E017001B1.roa
Signing time: Thu 25 Apr 2024 08:09:34 +0000
ROA not before: Thu 25 Apr 2024 08:09:31 +0000
ROA not after: Sat 04 May 2024 08:09:31 +0000
asID: 996
IP address blocks: 156.236.14.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34033 (0x84f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 08:09:31 2024 GMT
Not After : May 4 08:09:31 2024 GMT
Subject: CN=662a0fbe-000f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:07:6c:92:c1:71:d5:bb:e4:7a:78:3e:56:c3:
b0:10:46:b6:ed:09:da:9e:26:ae:0b:1e:e0:e4:f7:
a6:0b:50:f3:94:44:d4:17:b5:84:3d:fc:7f:be:98:
9b:6a:7a:7c:f0:51:45:45:e6:40:32:40:05:92:e2:
43:ea:ed:60:df:e8:b1:90:f4:bd:e1:c1:af:47:4d:
a5:02:9a:73:9e:a1:f3:07:42:62:e0:e3:bc:04:26:
c1:7d:9c:c6:0c:a2:61:b3:7b:22:04:f1:31:ff:51:
ad:44:2c:0f:13:9b:9d:f2:88:50:41:87:9f:b5:4b:
34:12:c3:03:a4:62:e6:bb:27:dd:c7:45:a6:62:66:
18:16:b4:8d:f4:bf:ac:95:20:51:2f:99:f5:c2:3d:
6d:1b:78:3d:e7:6f:08:3a:c2:a6:70:33:a6:6a:23:
86:45:07:a5:e8:b5:ff:0b:0b:33:1d:ce:22:be:8b:
10:20:a3:fa:52:5d:e7:ee:df:b2:70:fc:c4:ac:fb:
4b:49:86:d6:0f:bb:f4:26:a4:bd:58:c3:a7:7c:1b:
13:2b:17:27:22:1d:a9:39:2f:55:64:fc:55:a5:5c:
e9:74:bb:19:30:0a:68:b1:ef:44:bf:62:33:14:48:
99:40:c5:e6:d5:43:37:81:1c:7c:6c:1a:41:64:b1:
bf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D1:85:32:67:5A:26:95:0F:D1:95:51:9D:7A:01:02:14:9B:FD:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/269A5F1602DB11EFA98BB72E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.14.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:af:f0:19:23:fd:79:19:3f:c5:05:3d:b6:95:9b:10:10:53:
d7:94:50:ae:bb:8f:61:76:74:a9:7c:37:b9:7d:8c:06:bb:b1:
74:2b:fc:3f:62:46:2c:d0:86:3e:30:98:59:f0:01:0a:c0:dc:
7e:d1:ae:5d:b9:6b:a9:aa:7d:fb:e4:e7:ba:27:cf:5c:c6:ba:
56:94:58:17:34:fb:86:7e:d0:cf:8e:62:96:7e:0e:fa:59:ff:
ce:f6:5e:e5:cc:c6:59:ce:d7:a8:f0:40:62:63:16:16:3f:10:
0b:72:13:f6:ef:d4:6b:23:5e:2c:5a:7c:f8:ac:7b:4f:7f:9f:
70:16:1d:39:2e:11:84:c6:9a:72:7b:6a:68:18:be:03:5a:17:
a0:36:0f:06:af:e5:87:b1:1d:ec:2a:6c:8b:ac:37:36:61:38:
f0:77:fe:fc:38:15:f3:91:33:12:4a:ee:a6:03:28:bd:fc:7f:
60:00:ca:6a:49:a8:09:32:56:20:ee:93:85:10:32:11:48:5f:
95:d4:06:fe:9d:8a:8e:b7:fb:e8:38:75:a7:b6:08:c4:02:8e:
0a:0f:f9:8d:d7:56:3b:0e:52:73:3a:b6:25:96:66:ae:be:42:
8a:ee:d3:c9:d5:d8:11:29:12:1a:12:fd:b6:38:38:85:53:e7:
f1:43:1d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:31:43 2024 by rpki-client on console-ams.rpki-client.org