Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58E00968F9D711EB943DCC02D8A014CE.roa
File: 58E00968F9D711EB943DCC02D8A014CE.roa (raw, json)
Hash identifier: 4YJ19ukgilwyuUd5VotL1g7TCqNLtO9Bn2b/geTZHvM=
Subject key identifier: A9:8A:9B:FD:E6:18:13:D8:15:12:2C:7D:3F:D2:54:1F:18:C3:BD:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 085F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58E00968F9D711EB943DCC02D8A014CE.roa
Signing time: Tue 10 Aug 2021 12:35:26 +0000
ROA not before: Tue 10 Aug 2021 12:35:20 +0000
ROA not after: Mon 10 Oct 2022 12:35:20 +0000
asID: 9009
IP address blocks: 156.238.8.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2143 (0x85f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 10 12:35:20 2021 GMT
Not After : Oct 10 12:35:20 2022 GMT
Subject: CN=6112728e-16a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:69:39:67:e7:40:2a:59:30:44:83:eb:65:
fe:b8:60:e1:8c:d5:cc:87:80:1d:e9:f3:77:c8:3c:
ed:4b:3d:c2:9c:e1:8a:73:d7:e8:73:1a:65:45:ef:
b0:5c:4e:94:05:98:87:05:a3:31:34:7c:31:a9:2b:
86:7f:ca:9e:0c:2d:3b:30:09:4f:18:99:d6:f8:65:
ed:b2:9f:c3:18:90:9c:38:c3:4d:d0:16:58:e3:22:
4e:55:68:44:48:a6:53:81:a1:54:f8:2b:21:f7:27:
01:01:6e:e5:a0:81:3a:57:22:02:45:c1:91:70:22:
83:4f:39:74:1d:b3:54:3d:1f:64:33:85:62:ed:73:
f7:e7:68:06:9e:e8:29:de:54:a0:c7:16:16:f5:67:
61:f4:af:47:25:5d:cf:79:86:1e:3f:d1:ee:1a:9f:
70:4b:5c:94:cc:ae:21:06:ce:f1:4c:d8:7c:34:b3:
cb:78:b3:25:2c:b7:57:ba:37:28:c7:f5:46:65:a3:
86:32:c5:1e:39:f5:94:b8:f5:20:07:80:72:0c:95:
d9:e7:51:a2:d9:21:e2:3a:52:c4:7b:76:4f:f7:f3:
90:19:e4:21:a8:3e:15:b0:71:30:ed:cf:e4:5d:44:
b3:c0:09:53:c9:70:34:d1:c7:b9:33:18:18:00:ed:
c9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8A:9B:FD:E6:18:13:D8:15:12:2C:7D:3F:D2:54:1F:18:C3:BD:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58E00968F9D711EB943DCC02D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.8.0/23
Signature Algorithm: sha256WithRSAEncryption
33:fb:51:c6:0e:a4:3c:47:8f:82:ad:11:e2:75:5b:e8:de:55:
f5:05:2c:14:5b:fa:11:32:79:f7:ea:79:d3:48:75:04:90:3c:
2a:18:b3:f0:a0:24:a7:e9:ca:48:1b:cb:1f:c5:40:ba:94:34:
eb:b6:7a:55:27:9c:94:a2:97:90:a8:10:e7:08:10:d2:7b:36:
00:f2:95:3e:53:52:ca:74:f4:3d:cb:d9:d1:aa:14:fb:fc:05:
e6:93:a0:ae:e0:dc:98:2c:4a:3a:9b:ee:f8:84:a8:e4:97:d4:
65:a3:f9:e5:8f:73:84:cf:cf:46:74:d9:49:80:65:fe:4f:23:
69:d2:54:a3:4e:36:76:ec:c9:f5:de:33:7f:d9:8c:76:db:70:
77:41:3c:c5:d9:f2:ff:0f:8d:ae:9c:a2:b1:82:3a:39:de:19:
09:2e:11:7c:e6:63:a1:77:91:26:58:20:ff:e3:b3:03:53:bd:
36:92:c0:44:5e:92:6f:10:8f:74:e2:00:79:1e:13:a9:96:24:
50:b0:bc:c6:9c:26:28:e1:ae:a5:1d:60:1c:73:2b:6e:99:d1:
39:f6:60:1b:2a:0d:86:8a:43:55:bf:11:02:92:d4:a4:71:f3:
4d:2d:e9:fb:51:fb:c8:e9:2a:12:2f:26:c6:5f:56:5b:74:30:
79:69:84:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-ams.rpki-client.org