Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DE13D4E48E311EF85374A70762E951A.roa
File: 4DE13D4E48E311EF85374A70762E951A.roa (raw, json)
Hash identifier: yFkE9VwPvW3URU/c8NBvafTgyfT+rjOt+6Ktoi0LpR4=
Subject key identifier: 1E:DE:33:A7:E1:00:A5:45:4B:7A:CA:25:08:BD:F1:F7:B5:7F:29:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9EC0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DE13D4E48E311EF85374A70762E951A.roa
Signing time: Tue 23 Jul 2024 11:04:17 +0000
ROA not before: Fri 26 Jul 2024 11:04:14 +0000
ROA not after: Fri 02 Aug 2024 11:04:14 +0000
asID: 204957
IP address blocks: 156.225.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40640 (0x9ec0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 11:04:14 2024 GMT
Not After : Aug 2 11:04:14 2024 GMT
Subject: CN=669f8e31-88b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e7:50:67:cf:ca:41:db:e1:66:b0:ab:dc:76:
e4:37:74:62:06:5f:e5:df:eb:4a:ae:e0:97:93:61:
10:73:db:f8:c0:08:08:24:d4:6e:65:7b:5d:a3:53:
a6:24:1f:f1:50:be:8b:b9:00:9e:43:46:cc:68:7b:
5c:3f:cf:a7:12:82:c9:bb:3f:6d:ff:b7:61:46:a1:
9e:17:2e:cf:f6:03:d5:c4:e5:0e:40:37:d3:61:05:
69:ba:68:3e:55:6f:cd:7a:8f:e4:c8:d4:08:b5:50:
04:74:c9:53:56:87:4a:36:20:3d:2c:74:8e:6e:01:
4e:20:cf:ad:8a:07:fd:6a:36:1e:84:ae:3f:c5:6e:
dd:3c:b8:8c:54:2b:44:7c:ed:59:cc:69:f1:d4:c2:
11:9b:d5:f1:5b:3e:ed:52:c8:28:35:07:13:85:9b:
ad:fa:cf:ab:f4:1e:f8:b4:38:15:50:7b:d1:66:fc:
0f:f5:49:3a:2a:77:50:b8:c8:77:56:fd:60:93:20:
39:56:3b:c3:e8:d3:fd:00:46:57:70:56:8a:e5:ee:
a2:43:5d:69:8a:38:c7:6a:ef:7f:fc:9e:af:0c:b6:
12:1d:77:11:97:ce:98:af:a2:0a:55:12:88:f0:66:
01:07:c8:ad:1f:3f:4a:94:c3:6d:5d:8a:5f:ce:1c:
6e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DE:33:A7:E1:00:A5:45:4B:7A:CA:25:08:BD:F1:F7:B5:7F:29:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DE13D4E48E311EF85374A70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.5.0/24
Signature Algorithm: sha256WithRSAEncryption
19:67:4b:62:b3:56:82:37:b0:d4:33:0d:ee:3d:93:e8:46:12:
32:41:a0:41:1e:70:84:6f:5f:6d:8c:bd:1e:0c:74:cf:f2:3d:
18:d5:46:3f:ed:4b:78:25:87:51:ac:54:95:52:ab:e6:94:ef:
89:24:5b:50:ca:74:60:56:f8:e2:b9:d1:10:1f:f0:c1:6a:27:
5e:1e:22:39:d0:09:a9:f9:5e:9c:97:ec:c0:53:b4:0e:19:52:
fd:1d:25:05:37:f6:60:e7:5a:8e:94:f7:8b:95:06:b0:9a:31:
80:40:9e:0a:e5:99:e0:9c:5e:8e:ef:d9:bf:22:52:41:c7:f6:
8b:68:3d:8a:55:94:20:f2:2c:9c:68:a6:be:5e:71:b4:b9:77:
74:a0:0d:af:26:85:14:65:2e:da:da:9c:dc:4f:5c:a2:31:d5:
e4:d8:46:09:23:22:06:28:5b:05:d6:3c:11:36:d5:3e:10:92:
7b:cd:eb:6b:06:9c:49:0b:3c:e9:0c:4a:36:e4:13:8f:a0:e7:
ae:68:13:20:27:79:37:9b:31:20:62:1c:ab:7a:91:de:34:e6:
e1:2b:48:17:dd:5b:24:6a:0b:83:d2:e1:93:46:0c:b9:9a:11:
e1:34:44:a0:a8:9b:32:cd:a1:ea:93:1c:72:68:53:c2:29:10:
50:7e:06:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 14:56:24 2024 by rpki-client on console-ams.rpki-client.org