Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3156893EF1F711EDA91A28694AD9E6FC.roa
File: 3156893EF1F711EDA91A28694AD9E6FC.roa (raw, json)
Hash identifier: J9cCEDKPaJwfe57LOthamGgq/gJ2JzOteITmVy+dzOM=
Subject key identifier: 8B:C5:5B:06:42:58:44:42:49:92:A0:0B:B2:1F:D0:E4:07:4E:31:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 24EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3156893EF1F711EDA91A28694AD9E6FC.roa
Signing time: Sun 14 May 2023 01:32:30 +0000
ROA not before: Sun 14 May 2023 01:32:27 +0000
ROA not after: Thu 15 Jun 2023 01:32:27 +0000
asID: 138995
IP address blocks: 156.227.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9450 (0x24ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 14 01:32:27 2023 GMT
Not After : Jun 15 01:32:27 2023 GMT
Subject: CN=64603a2e-a18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ad:c9:fd:b6:b8:0c:16:70:d1:0f:d6:ec:9f:
f8:00:4b:d1:32:d5:0a:1e:bf:7a:2a:86:fb:8c:01:
0b:3d:24:48:96:f7:79:9d:39:14:3a:7b:88:0e:71:
55:7c:cf:79:77:9c:be:13:72:a0:e3:a5:59:ed:b7:
92:27:c9:2c:6d:7a:13:8d:86:aa:b5:81:d7:df:2d:
31:c8:d7:f1:9c:56:6a:ab:c9:bf:ee:69:d6:63:80:
d9:1c:89:c6:93:b0:0b:f1:41:16:08:36:02:24:0e:
d0:b2:30:e8:da:a2:7c:0b:e4:46:50:8f:a3:f8:bc:
d2:25:1f:1e:41:99:ad:46:e9:fb:b0:ee:18:9d:7c:
32:30:19:e4:36:81:45:e1:92:f9:2b:e1:ff:f8:4e:
c6:58:2a:78:c0:30:1d:b5:1c:29:73:9e:cb:82:a3:
15:79:25:d4:c8:58:f5:16:79:ad:1a:05:92:4b:d6:
93:d3:a4:3e:97:0e:0e:08:37:b4:55:16:f5:19:92:
21:ba:c1:7e:61:fa:80:04:15:29:f2:13:70:ba:41:
56:2b:bc:21:86:b2:2c:58:1a:1f:92:97:ea:28:2c:
7e:0f:60:d9:23:79:93:6c:a5:e6:95:5e:0f:f4:f1:
24:34:ac:5b:45:48:87:19:e3:0f:95:27:ff:7b:0e:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C5:5B:06:42:58:44:42:49:92:A0:0B:B2:1F:D0:E4:07:4E:31:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3156893EF1F711EDA91A28694AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.28.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:cb:79:da:7c:ef:b3:b7:d5:ef:62:73:a7:90:0a:7e:12:fa:
4f:a8:a2:0e:f4:12:17:5c:b8:a1:73:e6:dd:48:bc:bf:f6:43:
42:c6:3f:1c:51:2b:2d:e4:ec:9d:00:74:7c:91:04:d7:59:d2:
69:58:bf:3a:75:d5:de:a7:fd:30:bb:1f:be:38:dc:17:3a:40:
fc:f0:e5:59:c0:5a:30:5f:1b:58:c8:c4:dc:60:85:02:b5:e7:
6b:77:91:95:ae:e6:c1:65:43:5c:dd:0b:68:ec:34:18:ec:5c:
ad:7b:da:1f:5b:4a:ff:c2:24:78:0d:b6:50:64:c3:3a:2c:9f:
5a:88:12:32:e2:15:05:20:11:20:28:36:64:d0:85:e5:c8:25:
21:05:70:72:ba:ff:1d:a6:4f:ee:68:65:a5:5d:ff:69:6b:54:
bf:b5:a3:aa:5b:d3:33:94:7d:38:86:e5:d8:f1:97:5d:26:63:
47:a7:4b:4c:5d:f4:a4:df:aa:60:39:ed:56:e1:b1:bc:64:d5:
c4:9d:5e:dc:28:eb:57:11:30:bf:0b:91:0c:54:2b:f2:bd:c3:
7a:ec:0e:52:05:98:69:11:12:4d:58:4d:53:25:f4:99:bd:92:
4e:9f:8b:56:83:91:74:b5:a8:08:b5:f6:66:8d:86:6e:90:c4:
ce:21:1c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-fra.rpki-client.org