Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/528410E2435C11EFA44C625A762E951A.roa
File: 528410E2435C11EFA44C625A762E951A.roa (raw, json)
Hash identifier: ZbokZyfxG+JiGTWdUd8EVO5QNwEJejwcuUoUY5zxZNk=
Subject key identifier: C4:F9:79:44:FA:CB:C5:A7:2C:92:12:09:72:5A:67:00:C4:9B:52:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9CBB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/528410E2435C11EFA44C625A762E951A.roa
Signing time: Tue 16 Jul 2024 10:15:27 +0000
ROA not before: Tue 16 Jul 2024 10:15:24 +0000
ROA not after: Wed 07 Aug 2024 10:15:24 +0000
asID: 135097
IP address blocks: 156.241.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40123 (0x9cbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 10:15:24 2024 GMT
Not After : Aug 7 10:15:24 2024 GMT
Subject: CN=6696483f-c838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:be:b2:12:af:ab:f7:24:ff:ea:43:42:7a:
74:0a:dd:74:11:63:74:90:13:ea:67:6d:f6:0c:6b:
b1:3a:ef:e4:9e:10:d8:ab:22:97:ed:8f:1b:09:d1:
9d:b9:cd:79:02:0b:05:c0:69:1d:9e:39:8e:74:40:
b7:d9:21:80:e4:8b:c6:c1:40:67:b5:5d:08:60:73:
55:93:b8:71:e0:82:85:a7:a3:fa:bb:fc:d7:a2:62:
18:f5:3d:cf:af:f8:cd:a0:88:3d:1b:b2:2d:f9:6f:
34:89:19:32:cd:96:fd:11:22:56:75:e3:2b:e6:02:
ad:4d:9f:a6:e1:d7:12:5a:6e:8c:57:05:35:29:62:
31:1b:86:ab:6a:20:56:c3:44:00:71:19:50:ac:1c:
b4:e9:89:df:88:aa:96:0e:5f:c1:b7:1d:02:84:66:
42:fd:a3:36:c4:79:3e:e7:ac:98:ee:c8:3d:6b:a3:
6d:4a:5e:fb:39:48:a5:c3:e7:88:ab:02:9f:06:0e:
a5:89:33:a0:dc:93:10:72:e6:da:00:be:93:23:4c:
ca:07:cb:f5:3b:34:d1:7d:56:a6:55:1f:49:54:57:
4c:3e:44:f4:a0:ba:4f:2f:77:2f:81:74:6d:4b:a5:
08:4e:24:07:9b:21:a0:ec:90:00:ae:f7:3e:15:f4:
05:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F9:79:44:FA:CB:C5:A7:2C:92:12:09:72:5A:67:00:C4:9B:52:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/528410E2435C11EFA44C625A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b0:91:e8:f6:d8:e0:da:80:e5:69:6f:e8:ae:28:7d:c4:fd:58:
ca:ab:c5:1a:62:d8:9b:01:ab:2d:17:3a:de:69:58:e0:e0:28:
39:d0:85:98:71:03:ee:d9:ef:9e:83:a3:01:48:5e:3b:e7:cc:
12:91:af:fb:8e:7e:6a:e9:20:5f:09:e5:65:df:45:de:eb:fd:
24:0b:c6:52:2f:02:61:31:28:e8:ea:fd:a8:7b:fd:79:ec:d3:
6d:82:25:8b:18:0d:34:89:32:d4:f5:a8:11:31:35:8d:ac:7a:
e1:96:56:4d:7f:e4:44:3e:a7:dc:d5:c7:a3:1d:d7:b6:ca:52:
4c:d4:df:4a:66:62:77:bc:66:66:58:1f:cb:84:ef:8e:42:36:
dc:8d:79:17:a9:af:0d:e1:8c:09:73:1c:8e:bf:e0:58:80:ba:
f1:f7:6f:36:cc:f8:54:96:1f:87:b7:00:88:d8:45:49:e6:38:
ba:53:9f:76:b4:92:3c:37:f2:d9:a2:60:38:ae:4c:ed:96:d9:
cf:83:1d:26:a0:6c:68:f6:13:48:d9:f9:bf:47:c2:16:d5:e4:
6b:8f:f8:ef:7b:5b:55:27:0c:7b:37:2c:61:07:fd:56:f2:2c:
ed:e2:6a:eb:2e:6c:d8:d6:f1:85:db:57:28:71:3e:6f:40:f9:
f9:ee:12:1f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJy7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzE2MTAxNTI0WhcNMjQwODA3MTAxNTI0WjAYMRYw
FAYDVQQDEw02Njk2NDgzZi1jODM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz2K+shKvq/ck/+pDQnp0Ct10EWN0kBPqZ232DGuxOu/knhDYqyKX7Y8b
CdGduc15AgsFwGkdnjmOdEC32SGA5IvGwUBntV0IYHNVk7hx4IKFp6P6u/zXomIY
9T3Pr/jNoIg9G7It+W80iRkyzZb9ESJWdeMr5gKtTZ+m4dcSWm6MVwU1KWIxG4ar
aiBWw0QAcRlQrBy06YnfiKqWDl/Btx0ChGZC/aM2xHk+56yY7sg9a6NtSl77OUil
w+eIqwKfBg6liTOg3JMQcubaAL6TI0zKB8v1OzTRfVamVR9JVFdMPkT0oLpPL3cv
gXRtS6UITiQHmyGg7JAArvc+FfQFAQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMT5
eUT6y8WnLJISCXJaZwDEm1JNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81Mjg0MTBFMjQzNUMxMUVGQTQ0QzYyNUE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnPFAMA0GCSqGSIb3DQEBCwUA
A4IBAQCwkej22ODagOVpb+iuKH3E/VjKq8UaYtibAastFzreaVjg4Cg50IWYcQPu
2e+eg6MBSF4758wSka/7jn5q6SBfCeVl30Xe6/0kC8ZSLwJhMSjo6v2oe/157NNt
giWLGA00iTLU9agRMTWNrHrhllZNf+REPqfc1cejHde2ylJM1N9KZmJ3vGZmWB/L
hO+OQjbcjXkXqa8N4YwJcxyOv+BYgLrx9282zPhUlh+HtwCI2EVJ5ji6U592tJI8
N/LZomA4rkztltnPgx0moGxo9hNI2fm/R8IW1eRrj/jve1tVJwx7NyxhB/1W8izt
4mrrLmzY1vGF21cocT5vQPn57hIf
-----END CERTIFICATE-----
Generated at Thu Aug 8 03:13:56 2024 by rpki-client on console-fra.rpki-client.org