Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A678E44C47D11ECB462F089F1222468.roa
File: 4A678E44C47D11ECB462F089F1222468.roa (raw, json)
Hash identifier: hJwlpcj9Q6Aa8rTM2fR4w6SQ74dj6VFopUmNl6PB6nI=
Subject key identifier: E3:EE:59:DC:4E:2C:6E:6E:0E:65:FC:AC:35:98:0C:89:FB:0C:77:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1374
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A678E44C47D11ECB462F089F1222468.roa
Signing time: Mon 25 Apr 2022 09:51:34 +0000
ROA not before: Mon 25 Apr 2022 09:51:30 +0000
ROA not after: Mon 30 Jan 2023 09:51:30 +0000
asID: 139057
IP address blocks: 156.251.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4980 (0x1374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 09:51:30 2022 GMT
Not After : Jan 30 09:51:30 2023 GMT
Subject: CN=62666f26-73d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:8b:14:df:d9:45:07:05:e8:5e:ef:4b:59:
22:e6:7d:0c:93:54:f5:12:46:f2:0c:38:70:c6:46:
32:20:61:dc:a5:d8:a7:64:d4:c4:97:47:56:bd:92:
cf:89:d5:7e:6d:28:8a:aa:86:a3:6b:a9:e7:d0:9e:
30:cb:24:e5:3e:37:e2:92:f0:01:85:90:62:84:76:
c2:ff:41:e5:7f:d4:3a:52:0c:e0:2d:a6:c4:15:c4:
ee:33:f4:07:ce:7f:a5:1a:01:50:bb:e8:f6:2e:8b:
93:f7:c0:10:bd:26:ca:8d:fc:76:26:9b:5d:39:78:
bf:f7:13:98:43:39:c7:6b:82:e9:4a:5e:63:b7:2f:
0f:65:37:ec:2d:d1:58:26:af:a8:0b:5a:af:9e:7d:
4c:b0:e7:98:42:b9:98:79:5b:34:1b:85:65:ac:21:
72:6a:fc:c1:7e:cb:ce:4f:ac:61:9f:d4:e9:af:fd:
66:dd:f3:2f:f5:26:8b:f4:7a:6e:4f:ef:12:ce:f1:
2f:63:a9:27:ab:67:dc:8f:d2:92:6c:37:54:d9:98:
1c:63:e6:92:27:1b:8c:6b:a3:31:f1:40:c8:d2:4d:
ba:a0:46:81:ce:0d:6a:3d:0b:04:f0:0e:6d:18:2e:
4e:0e:84:a8:f8:7c:2a:2a:11:40:d7:14:0f:1b:9a:
d1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EE:59:DC:4E:2C:6E:6E:0E:65:FC:AC:35:98:0C:89:FB:0C:77:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A678E44C47D11ECB462F089F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.68.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:62:21:40:27:11:ea:31:17:c3:62:a7:75:bf:ed:c2:23:97:
90:d3:3d:9a:12:29:68:dd:f8:ee:9a:eb:ec:38:6b:53:0b:f3:
c9:a2:49:56:7e:af:e1:b6:d8:f1:e3:18:68:94:45:b5:20:f1:
b1:f1:3a:61:0a:81:cb:22:82:a7:d5:db:d5:b7:ae:f7:9c:fb:
ab:2d:9a:12:53:11:37:93:4e:f4:cb:02:c8:3a:a6:d5:6c:c9:
f5:8e:80:c6:f1:93:d6:93:53:61:06:2e:60:da:f7:9e:cc:45:
d0:04:1f:3d:92:02:2a:a7:6e:81:82:77:a3:67:db:df:a3:8e:
a2:18:56:b0:6d:08:6b:d4:34:7a:82:0b:0d:a4:50:09:6e:35:
c1:dc:c2:37:83:72:e5:b7:0a:09:4b:72:4c:12:ef:96:62:47:
c3:b8:b0:ed:0b:44:a0:91:6e:57:ac:9d:66:41:d4:ed:25:09:
88:63:1b:6f:45:d5:44:aa:90:de:81:78:5b:b9:5d:f4:45:6d:
82:42:02:99:6c:4c:15:6b:65:09:7f:40:97:0b:5a:07:cf:8c:
3d:97:95:ff:e0:28:bf:cf:36:5f:7b:b1:88:22:c6:ab:10:de:
a2:09:45:d1:cf:45:ca:e3:d3:85:0f:ff:b6:6a:10:e6:53:31:
b8:e9:f8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-ams.rpki-client.org