Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/270E60A647E011EF81AB2E92762E951A.roa
File: 270E60A647E011EF81AB2E92762E951A.roa (raw, json)
Hash identifier: R4RdqsEw5s4f9vt5gLRpalXIVkKIWC3jMx4EbM7xdLA=
Subject key identifier: BE:CA:03:94:5F:10:12:B8:54:8E:B4:F4:8D:80:EA:C4:75:11:71:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E17
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/270E60A647E011EF81AB2E92762E951A.roa
Signing time: Mon 22 Jul 2024 04:09:13 +0000
ROA not before: Mon 22 Jul 2024 04:09:09 +0000
ROA not after: Sat 24 Aug 2024 04:09:09 +0000
asID: 149440
IP address blocks: 156.235.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40471 (0x9e17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 04:09:09 2024 GMT
Not After : Aug 24 04:09:09 2024 GMT
Subject: CN=669ddb68-74ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:39:12:6e:bf:78:6d:13:73:03:dc:f1:6c:55:
cd:a7:ca:20:d3:36:fe:48:c0:93:75:5e:18:18:d8:
11:03:e4:38:0b:8b:be:b8:ab:af:5e:ab:7f:50:38:
8b:ab:7d:f6:75:87:8c:5e:09:fb:5e:36:c8:d5:5f:
4f:ae:15:b9:56:57:a8:92:bf:cf:fb:fc:41:0e:92:
47:ff:8a:cb:5f:4f:ab:7f:8e:1a:11:02:c0:99:a6:
bd:f0:81:d4:28:cd:7d:0d:7f:10:8d:5c:17:7c:3b:
a9:6d:91:44:0a:fb:11:73:0a:16:c2:d8:b5:8a:f7:
c5:23:75:ce:24:d8:6f:27:c9:99:c4:8a:24:b4:2b:
4a:d0:94:62:7e:9a:b7:cf:39:4d:39:cd:bc:55:db:
59:6e:5f:09:07:d0:4c:1d:97:ea:0e:c0:80:fe:83:
3f:01:ed:97:c5:70:4b:d9:d6:89:53:65:31:b2:a8:
5c:a6:3d:92:81:37:f0:d5:62:da:f9:ce:d9:a3:fa:
2e:4a:69:ae:f4:48:a3:4b:6c:d4:13:1d:0a:72:eb:
b5:f8:6b:91:e9:64:0b:ce:5b:90:92:2e:d5:39:1b:
bb:85:dc:71:c2:a1:a5:5e:f3:50:c8:93:a4:d2:7e:
48:8d:7b:8f:96:d8:e1:2b:22:9a:39:ad:9b:80:b4:
0d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CA:03:94:5F:10:12:B8:54:8E:B4:F4:8D:80:EA:C4:75:11:71:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/270E60A647E011EF81AB2E92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.89.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:d7:35:94:66:4d:2c:38:b8:85:ba:f1:52:65:e7:b5:08:46:
8e:eb:8e:aa:bb:3e:44:d5:8a:06:6a:2d:87:69:89:14:ec:87:
14:72:d8:92:c4:54:c9:bc:2e:bc:9c:08:3e:ea:4f:69:79:99:
34:34:2d:65:9d:11:3b:67:10:53:ee:76:a1:74:22:a3:d2:52:
0e:d8:e5:e9:a3:14:0e:99:b3:8e:30:bc:b9:7b:36:eb:09:3f:
fa:f4:71:09:eb:f0:2d:d8:2d:36:24:95:81:1e:bb:c3:03:f8:
ff:79:c6:40:20:19:d2:44:f6:82:07:c5:b5:c5:42:2a:d4:a0:
56:83:d8:8b:5e:a3:57:f2:cf:8c:8f:18:95:ec:de:0a:9b:b2:
49:45:ec:9d:55:47:28:2d:52:47:28:23:93:24:b7:f9:da:b9:
cb:b1:77:43:11:d7:7b:56:ed:0f:f3:10:24:9f:08:34:f0:a7:
93:67:c2:fb:c0:e4:8d:6b:2c:b5:12:a9:80:c2:d9:56:5b:29:
52:da:8a:66:93:0c:e4:5d:c1:8d:7d:68:44:5d:cf:a2:61:0b:
7b:5f:ad:1a:36:da:b5:25:33:38:26:ba:46:df:99:74:e7:8b:
9e:32:90:7a:ae:d4:28:de:e8:07:98:53:7f:c4:59:5e:91:f7:
b8:09:90:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 04:33:11 2024 by rpki-client on console-fra.rpki-client.org