Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B80BB84EAF411EB9669884BD8A014CE.roa
File: 3B80BB84EAF411EB9669884BD8A014CE.roa (raw, json)
Hash identifier: 39ADKGlyBH4fnO0U4sac5sZ47Bb8Ks00PZzzNIuBDBw=
Subject key identifier: C7:60:BD:97:44:FF:41:1F:DB:45:96:9B:B9:BF:84:DE:BB:31:BD:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 07B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B80BB84EAF411EB9669884BD8A014CE.roa
Signing time: Thu 22 Jul 2021 13:53:57 +0000
ROA not before: Thu 22 Jul 2021 13:53:52 +0000
ROA not after: Thu 22 Sep 2022 13:53:52 +0000
asID: 1239
IP address blocks: 156.236.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1972 (0x7b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 13:53:52 2021 GMT
Not After : Sep 22 13:53:52 2022 GMT
Subject: CN=60f97875-db26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:5d:9a:de:92:2e:95:09:f7:35:be:e2:6d:
80:91:2e:6a:1f:82:51:ba:87:56:ad:df:9a:1a:2e:
bf:f1:72:11:80:37:45:34:af:37:bd:42:cc:9e:88:
82:a3:8f:3b:b4:9e:e9:2c:c0:0b:00:3b:3c:99:9d:
c1:57:06:16:c0:c0:ab:17:a3:5f:43:a0:53:31:80:
91:d1:d1:34:a5:2a:1a:3e:fb:eb:8d:52:75:f4:2d:
e9:e9:94:01:e6:26:cd:d7:06:97:e4:0b:1e:ce:1c:
77:46:13:9d:45:34:36:3c:9a:5a:9e:62:64:eb:a1:
b0:f3:21:01:b8:84:f9:9d:4b:9f:9b:2f:0c:98:05:
6d:3b:a9:9a:57:0c:9f:d3:6e:6e:9c:01:55:c6:eb:
c6:4f:66:c7:0d:ad:a4:01:cc:49:91:8a:aa:b6:e5:
3f:b8:eb:7e:24:45:d0:0a:99:b5:f5:49:fa:34:d7:
30:f5:71:88:8b:65:59:c1:a8:d1:fd:c4:0f:05:2a:
cb:bf:f3:9c:8c:f0:d3:db:51:87:e5:3b:dc:18:9e:
f3:16:8a:cd:01:4a:8c:88:f4:ba:af:1c:bf:ca:51:
55:f2:75:9f:73:bf:03:23:33:db:d0:ae:dc:ea:fd:
50:2a:35:14:d0:68:7a:3f:87:c6:e2:43:b3:22:16:
aa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:60:BD:97:44:FF:41:1F:DB:45:96:9B:B9:BF:84:DE:BB:31:BD:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B80BB84EAF411EB9669884BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.140.0/24
Signature Algorithm: sha256WithRSAEncryption
18:43:5b:0a:90:53:a0:b8:22:23:c4:fa:87:0c:05:61:c7:4b:
b2:74:f8:1a:75:95:56:57:14:a4:e8:03:ba:32:c9:29:4a:76:
df:d6:b6:e5:92:0a:32:9f:d5:39:a1:8d:d9:34:eb:9a:ad:db:
13:7f:49:e7:0c:23:0d:59:75:0b:6c:ff:98:90:ae:f5:5d:e4:
7d:7c:0d:85:16:f1:ea:28:9d:38:0d:e8:4a:f0:67:66:bb:37:
25:ae:93:26:04:5b:70:16:a0:53:3c:9e:88:4e:c3:8d:91:65:
97:54:f9:8c:b6:9d:fd:95:9e:82:98:54:57:1d:8c:dd:08:ec:
1c:76:fb:6a:d8:e2:cd:c0:cb:6c:20:86:b2:8c:83:6c:66:e8:
82:8d:06:1c:0c:bc:aa:3b:b1:4c:bb:39:c3:13:97:5d:2a:16:
cc:26:bb:2c:6a:a6:f0:72:f8:2e:69:65:f8:4f:98:80:ee:c6:
89:45:2c:27:a0:db:29:95:f5:45:f4:62:42:2a:cb:e8:b8:ef:
b6:11:a0:6a:7a:37:0d:bb:32:cc:6c:c7:f4:2a:43:78:bf:35:
c9:77:e2:f2:1a:eb:77:e9:bf:9b:9b:2c:6c:6f:12:4b:7b:18:
f8:1c:60:13:97:8f:5e:47:7f:60:a9:a9:21:87:c1:02:8f:85:
04:e0:f7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org