Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D3BADBEF91711ED93767E184AD9E6FC.roa
File: 5D3BADBEF91711ED93767E184AD9E6FC.roa (raw, json)
Hash identifier: 1g6V3QNpPkLU+9VwTZA+C3PAhdny/0JweVH0b0bh8W0=
Subject key identifier: 46:F1:C0:D0:A6:DC:29:7F:33:F8:E8:2E:5F:D0:9C:7E:02:68:16:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 26BC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D3BADBEF91711ED93767E184AD9E6FC.roa
Signing time: Tue 23 May 2023 03:10:26 +0000
ROA not before: Tue 23 May 2023 03:10:23 +0000
ROA not after: Sun 05 May 2024 03:10:23 +0000
asID: 398968
IP address blocks: 156.229.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9916 (0x26bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 03:10:23 2023 GMT
Not After : May 5 03:10:23 2024 GMT
Subject: CN=646c2ea2-8cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:26:77:1e:ec:8a:fc:ac:2c:80:aa:33:b9:
c7:2a:53:c3:cd:89:6a:d2:78:9d:23:1b:ec:ac:3e:
3e:30:70:48:9d:f4:a5:84:93:47:c3:de:28:74:86:
72:85:3c:d1:c3:da:42:d9:05:10:43:cc:ef:a2:af:
ad:d6:bf:2b:d8:f6:a1:df:b0:c8:31:83:5a:4d:21:
f0:91:c1:5c:92:77:32:bd:e2:3c:c7:f3:d2:18:0d:
75:66:68:a1:69:62:8e:13:02:a6:92:f4:ca:ea:43:
5b:bd:f9:43:57:06:68:b7:13:b4:7d:f8:c1:fe:04:
dc:c6:a4:95:46:57:26:86:4d:1c:3e:7d:4e:51:98:
1d:aa:e1:e4:97:90:a6:78:a0:28:8e:0e:4d:6c:57:
87:4d:69:16:c6:13:74:e9:6f:29:7b:f5:60:d5:75:
6d:28:6c:1f:8e:de:45:8d:b5:7d:06:12:77:cc:bf:
ff:97:8d:60:c5:05:6e:7b:97:d4:07:8d:0a:86:f8:
80:88:1f:7f:88:9f:d2:9b:4f:ec:f6:bf:93:b4:1c:
4b:b3:12:2c:63:48:14:a6:4b:a6:c0:f6:eb:10:05:
b3:50:c2:f0:b1:dd:d0:6c:79:2d:1e:f5:09:3d:47:
9d:77:bc:2e:50:d0:b2:c3:57:bc:44:21:8d:5f:c5:
b7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F1:C0:D0:A6:DC:29:7F:33:F8:E8:2E:5F:D0:9C:7E:02:68:16:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D3BADBEF91711ED93767E184AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.160.0/20
Signature Algorithm: sha256WithRSAEncryption
67:32:4d:9b:21:20:0c:b3:fe:5c:1e:8f:16:61:5a:ba:ea:d4:
71:76:07:84:5e:32:08:b2:e5:a3:f4:87:e0:04:9f:77:9c:4e:
8c:d4:f2:d3:bc:27:85:a0:ee:e4:ca:4b:6f:65:d1:fb:50:1c:
c7:57:ae:d4:65:81:df:b2:96:c9:8e:4e:6b:58:63:03:90:41:
8b:a0:fc:cd:2f:9b:08:30:80:6d:3d:36:42:d9:01:7b:02:34:
3f:da:b8:b2:00:34:52:cb:1d:9f:5f:64:7f:01:3d:2f:7e:58:
66:8a:fe:75:dd:bf:df:da:16:7c:77:d4:a1:5a:76:64:96:c4:
21:42:bf:11:fd:7f:a9:05:68:39:cf:ff:f7:6b:9f:13:c8:ae:
ce:cb:e3:93:37:a7:92:32:7e:68:aa:59:81:9b:de:ac:ba:2c:
2f:b2:cb:5f:da:f7:d6:70:96:da:bb:cc:5d:35:3d:1e:d4:f4:
82:24:29:80:50:0c:84:ba:bc:7a:6a:ca:25:49:d0:08:b3:01:
25:64:07:86:3d:b1:1e:6c:c8:99:2a:52:17:7d:c7:f5:55:8a:
0a:d9:01:c3:7e:3f:ac:56:80:49:3c:44:53:81:55:44:49:6a:
c6:27:73:d6:16:f3:ec:1a:98:77:b4:04:c8:7d:e2:e3:f4:a0:
bc:f0:15:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:18:24 2024 by rpki-client on console-ams.rpki-client.org