Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CC0E060412511EFA5834D79762E951A.roa
File: 4CC0E060412511EFA5834D79762E951A.roa (raw, json)
Hash identifier: nxMzVzfyxW2ATvH7iU5zFgSM6DthLfaYY5nCPcwCo74=
Subject key identifier: AE:1F:34:90:38:19:A4:C9:C8:92:DC:FC:9C:0A:40:A9:84:0C:9E:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9C26
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CC0E060412511EFA5834D79762E951A.roa
Signing time: Sat 13 Jul 2024 14:36:33 +0000
ROA not before: Sat 13 Jul 2024 14:36:29 +0000
ROA not after: Tue 13 Aug 2024 14:36:29 +0000
asID: 138915
IP address blocks: 156.244.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39974 (0x9c26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 13 14:36:29 2024 GMT
Not After : Aug 13 14:36:29 2024 GMT
Subject: CN=669290f1-706b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:af:83:cb:ee:ac:3c:3a:25:b1:32:26:60:62:
a3:4a:89:ad:2a:fa:32:2f:90:1e:3e:0e:a0:34:43:
f3:24:90:61:39:86:22:a4:20:92:ae:ce:9d:02:c2:
f9:9b:cc:84:f6:59:c9:f7:8d:2a:ad:2e:0a:73:ba:
48:34:74:cf:a5:48:02:0f:d5:c1:fd:6a:a3:cf:cc:
40:49:d5:87:54:6f:bc:ad:fa:40:42:66:de:62:ac:
f2:38:21:9e:c6:86:ad:7a:43:34:b3:84:1c:50:fc:
7b:05:b6:ff:bc:57:6f:33:2e:0c:c8:e2:97:6d:1b:
52:5e:74:46:dd:69:77:7c:ed:55:7b:1a:b2:23:88:
41:b8:a8:8c:64:25:8a:b8:6e:b2:7c:01:bb:45:26:
40:8e:5f:97:77:4d:c5:2a:6e:5b:2f:15:e6:42:43:
f7:10:40:cf:9e:ba:4c:e7:f7:38:9c:d7:41:20:89:
cf:f6:eb:20:e6:28:3b:0c:e5:6e:ce:80:b0:98:44:
df:4b:c3:e8:83:e8:81:10:99:2a:20:27:3c:39:5c:
bd:c9:fa:ca:18:1b:7a:b2:c0:97:e8:9a:03:0e:82:
1d:65:56:01:4c:fe:98:63:3a:b3:fc:da:c0:ed:34:
75:fb:e7:36:b7:88:eb:56:25:98:d3:ad:b6:17:27:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1F:34:90:38:19:A4:C9:C8:92:DC:FC:9C:0A:40:A9:84:0C:9E:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CC0E060412511EFA5834D79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.13.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:74:2a:9f:90:34:bf:d4:2a:ad:fb:57:29:5d:16:0a:0d:d8:
ab:58:3c:b3:95:7a:97:54:00:a0:83:9f:b4:23:e7:87:71:38:
60:83:0c:f6:ca:de:65:e0:62:e4:1e:20:1c:bd:c7:ee:ad:83:
68:87:62:87:38:ff:9a:2e:4b:68:e9:e0:85:3a:5a:3d:09:0f:
bc:0d:44:55:d5:fe:2e:d9:ee:11:7f:42:5c:18:a6:25:3a:83:
e5:7a:7e:55:d7:7a:60:73:7c:79:24:fa:b9:e8:e6:0a:7c:99:
21:9d:70:04:6a:ab:8e:32:90:45:7c:e8:1c:56:62:00:37:f4:
c2:13:df:18:c9:75:b2:89:2b:99:42:17:40:34:dd:88:ca:60:
0d:74:f8:77:94:b1:2a:32:bd:11:19:fa:da:f0:6a:4f:7c:01:
fd:a6:da:88:24:30:12:3b:62:db:84:3f:1c:ad:9f:ca:89:fb:
2e:26:32:3f:a7:65:8e:5d:18:a8:d1:3a:3e:57:4c:98:d9:11:
90:65:21:dc:80:58:84:c5:c2:da:5f:c8:8a:0a:24:dd:fd:83:
44:36:8c:19:ff:6b:1d:99:49:5a:5b:51:e6:95:b6:7b:d6:c9:
23:86:78:20:01:bd:50:db:47:4b:d5:d1:23:7e:71:71:9b:29:
7b:c6:f9:b1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJwmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzEzMTQzNjI5WhcNMjQwODEzMTQzNjI5WjAYMRYw
FAYDVQQDEw02NjkyOTBmMS03MDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5a+Dy+6sPDolsTImYGKjSomtKvoyL5AePg6gNEPzJJBhOYYipCCSrs6d
AsL5m8yE9lnJ940qrS4Kc7pINHTPpUgCD9XB/Wqjz8xASdWHVG+8rfpAQmbeYqzy
OCGexoatekM0s4QcUPx7Bbb/vFdvMy4MyOKXbRtSXnRG3Wl3fO1VexqyI4hBuKiM
ZCWKuG6yfAG7RSZAjl+Xd03FKm5bLxXmQkP3EEDPnrpM5/c4nNdBIInP9usg5ig7
DOVuzoCwmETfS8Pog+iBEJkqICc8OVy9yfrKGBt6ssCX6JoDDoIdZVYBTP6YYzqz
/NrA7TR1++c2t4jrViWY0622Fyfi4QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFK4f
NJA4GaTJyJLc/JwKQKmEDJ59MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80Q0MwRTA2MDQxMjUxMUVGQTU4MzRENzk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPQNMA0GCSqGSIb3DQEBCwUA
A4IBAQBrdCqfkDS/1Cqt+1cpXRYKDdirWDyzlXqXVACgg5+0I+eHcThggwz2yt5l
4GLkHiAcvcfurYNoh2KHOP+aLkto6eCFOlo9CQ+8DURV1f4u2e4Rf0JcGKYlOoPl
en5V13pgc3x5JPq56OYKfJkhnXAEaquOMpBFfOgcVmIAN/TCE98YyXWyiSuZQhdA
NN2IymANdPh3lLEqMr0RGfra8GpPfAH9ptqIJDASO2LbhD8crZ/KifsuJjI/p2WO
XRio0To+V0yY2RGQZSHcgFiExcLaX8iKCiTd/YNENowZ/2sdmUlaW1HmlbZ71skj
hnggAb1Q20dL1dEjfnFxmyl7xvmx
-----END CERTIFICATE-----
Generated at Wed Aug 14 05:05:46 2024 by rpki-client on console-ams.rpki-client.org