Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B586AC2BEA211EF8BFBE67B762E951A.roa
File: 4B586AC2BEA211EF8BFBE67B762E951A.roa (raw, json)
Hash identifier: R5rZLV5uSeUSF7wGjjZCF3L8R4UGbM0T5dOZV+7JTro=
Subject key identifier: D3:32:43:12:84:4C:23:D8:6E:A1:DC:7C:64:E6:06:AE:B9:47:A8:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E70E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B586AC2BEA211EF8BFBE67B762E951A.roa
Signing time: Fri 20 Dec 2024 07:16:13 +0000
ROA not before: Fri 20 Dec 2024 07:16:09 +0000
ROA not after: Thu 23 Jan 2025 07:16:09 +0000
asID: 202656
IP address blocks: 156.236.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59150 (0xe70e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 07:16:09 2024 GMT
Not After : Jan 23 07:16:09 2025 GMT
Subject: CN=676519bd-2e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:e3:cf:35:73:5d:08:42:fc:df:b2:5e:80:
75:54:28:f4:ce:66:57:83:90:8d:eb:59:11:6d:f7:
01:ac:21:49:2a:f4:e6:08:dd:9f:ac:57:cc:2c:81:
52:14:5e:2f:ee:10:9c:86:0e:55:3e:da:e7:21:e0:
fb:4e:40:c5:9e:a1:b0:e0:75:d5:c6:d4:30:e5:0c:
2e:96:1b:14:94:ac:18:cd:d0:0d:62:53:d5:af:8a:
e3:0c:39:24:15:c8:31:fa:9b:d9:6d:1f:82:36:e4:
30:33:bd:f9:c0:f3:99:47:23:02:b3:53:78:7d:e8:
ef:46:87:a1:c9:f7:61:f5:91:69:8e:57:db:54:44:
93:a4:ff:63:fe:7e:2f:82:43:9c:66:99:28:49:f8:
5c:e2:1d:13:51:8a:a0:cb:49:7d:c3:06:4a:4b:71:
cb:c2:6f:52:21:76:81:40:25:0a:41:94:04:14:17:
f0:40:97:f1:97:57:22:65:8f:10:eb:48:e1:d6:e3:
29:39:19:7c:a8:c2:0f:31:22:f5:79:66:3a:bf:a1:
6a:d1:ee:08:14:55:da:f9:95:14:23:75:a3:55:b5:
6b:30:fd:db:5a:ec:30:21:7a:94:35:13:ed:b2:d2:
7e:50:ca:6b:bc:4f:9b:d2:cf:32:35:32:29:31:33:
0f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:32:43:12:84:4C:23:D8:6E:A1:DC:7C:64:E6:06:AE:B9:47:A8:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B586AC2BEA211EF8BFBE67B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.107.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:9e:8f:e0:6b:ff:e7:dc:cd:29:da:19:35:e0:fe:c8:c2:62:
9b:3f:a7:b1:ec:05:7e:ac:fa:2b:97:bb:4e:41:13:ea:91:07:
3d:e3:58:b3:bd:06:3a:12:a5:ba:ea:f1:06:fe:80:4a:6e:71:
e6:f9:f1:01:00:27:97:8a:56:3b:ef:be:28:b4:21:39:8b:be:
e1:20:eb:18:22:82:e9:7b:e9:6f:a1:41:d3:9c:d3:2f:86:0b:
93:a9:84:10:ff:6e:b9:a7:62:59:e3:11:b6:9d:68:af:08:3f:
4c:ba:d1:a5:03:5b:61:67:2f:a7:e3:20:78:ec:d8:39:56:98:
a2:0c:41:62:bc:3d:4e:85:30:12:f2:55:db:2e:db:a5:a7:0e:
23:bf:81:d8:53:69:79:21:78:4f:74:63:47:9c:f0:18:3d:03:
ec:82:83:d5:94:97:07:8e:da:d2:e7:a8:8f:0e:5f:e5:f7:14:
b9:a5:7a:95:71:f9:eb:bc:a2:13:4d:75:ae:c7:d3:d7:34:67:
c7:dd:a6:b8:7e:45:89:f2:f1:8d:39:a2:d9:69:33:5b:33:9a:
5b:5b:39:da:88:e4:3f:bd:c6:de:16:74:10:0a:04:76:87:e5:
72:fc:da:16:f8:2f:4d:98:30:8c:ce:e4:25:05:91:b0:e2:8a:
fd:17:eb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:15 2025 by rpki-client