Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4380690A499311EF8CFFEC9B762E951A.roa
File: 4380690A499311EF8CFFEC9B762E951A.roa (raw, json)
Hash identifier: R8yMXywIedDczcNsZs1jvLPv2iQuVRATxxoLpmzFBwE=
Subject key identifier: 21:E5:94:B2:9B:67:5D:B0:A3:CB:AC:A4:8A:E2:29:9F:A2:FD:70:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9EE3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4380690A499311EF8CFFEC9B762E951A.roa
Signing time: Wed 24 Jul 2024 08:03:51 +0000
ROA not before: Wed 24 Jul 2024 08:03:48 +0000
ROA not after: Fri 23 Aug 2024 08:03:48 +0000
asID: 202656
IP address blocks: 156.246.224.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40675 (0x9ee3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:03:48 2024 GMT
Not After : Aug 23 08:03:48 2024 GMT
Subject: CN=66a0b567-e149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dd:ee:5f:50:04:3f:8a:9b:76:0f:59:69:df:
43:1d:b9:49:69:2a:a6:1e:a5:68:8c:cc:59:a4:32:
8b:d0:49:bd:c1:bf:85:88:cf:1a:3f:3a:61:bf:46:
28:a6:7b:e4:0f:1f:e1:0f:ef:4b:87:55:d5:79:8f:
5b:5e:52:5b:fe:a7:8c:96:a1:fc:81:3a:bf:e9:26:
77:40:18:b2:8c:8a:fb:90:be:37:1e:7a:04:a3:b4:
96:d9:53:aa:58:21:37:56:2c:37:a7:9a:4a:d5:26:
05:42:32:26:7c:4b:9d:91:1d:69:10:96:d6:74:e1:
05:2f:db:41:c9:4f:b2:28:b7:b8:62:ad:f6:28:fd:
96:4d:ac:35:11:c5:7f:24:27:2a:5d:e7:2c:0d:88:
b8:1b:30:d0:0a:56:8b:bb:e3:b5:13:68:6b:d1:43:
7e:2b:be:09:66:23:e3:4b:38:90:29:48:10:0a:11:
57:67:b9:47:6c:fc:f9:da:07:97:e5:67:f3:8f:b0:
a1:55:54:ae:af:5a:ae:f7:cc:60:df:9c:8f:00:3b:
5c:0b:c7:5c:88:eb:56:9f:e1:b2:58:4c:42:b4:47:
69:7c:a5:fb:f2:e0:bb:5e:4b:01:ce:4e:63:31:78:
85:c4:1f:ed:db:5b:2b:41:92:25:5e:cc:38:49:ee:
65:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E5:94:B2:9B:67:5D:B0:A3:CB:AC:A4:8A:E2:29:9F:A2:FD:70:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4380690A499311EF8CFFEC9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.224.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:cc:86:ec:5a:5c:c3:fc:19:57:4f:74:09:7c:45:6a:f0:aa:
0b:76:1f:98:59:8c:cd:95:d1:f4:47:0e:ba:36:b3:46:03:b5:
68:a4:b8:d4:5d:b2:91:3c:b8:aa:97:35:12:1d:ff:4e:22:39:
f8:c5:17:a8:2a:00:53:af:bb:a1:c8:92:06:1b:38:ad:e6:5e:
95:fb:f6:9d:77:69:a3:e1:be:6c:06:ef:82:f3:e8:0e:d0:e7:
a3:ca:92:f5:66:ff:58:f3:9c:dd:9d:63:37:66:f3:4e:66:10:
cd:c7:b3:8e:a4:8a:8b:f0:e9:35:04:54:94:b9:ce:02:bb:7f:
99:65:cd:3b:76:01:c3:20:c1:70:be:69:30:ad:9d:32:15:1e:
3b:02:1a:12:68:24:fe:51:37:2f:93:12:d2:08:96:e1:e5:b2:
3b:d5:e4:c2:80:b2:63:66:f0:38:dc:bf:85:06:d9:79:03:b3:
56:bc:32:85:1b:c3:74:11:71:ad:7f:78:18:16:ae:95:a3:06:
ce:e7:56:a4:a0:29:ae:5f:c8:74:df:f0:c7:ce:33:85:09:5d:
aa:68:2c:3e:e2:2d:bd:7a:77:50:01:11:27:2a:f8:f0:af:71:
1d:89:ba:f5:8a:89:5e:46:3e:26:35:eb:a2:7b:08:aa:37:46:
79:81:57:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:48 2024 by rpki-client on console-fra.rpki-client.org