Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E676F70B08511EB9ECD6880F8AEA228.roa
File: 5E676F70B08511EB9ECD6880F8AEA228.roa (raw, json)
Hash identifier: pyUz+5nx/Cai8HnSj5z08u56+YrCbyzaBBPAiB/1kSw=
Subject key identifier: E7:77:09:88:A6:96:89:10:0C:5F:14:75:08:D3:4A:A3:76:EF:19:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 05A0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E676F70B08511EB9ECD6880F8AEA228.roa
Signing time: Sun 09 May 2021 05:14:03 +0000
ROA not before: Sun 09 May 2021 05:13:58 +0000
ROA not after: Tue 05 Jul 2022 05:13:58 +0000
asID: 398968
IP address blocks: 156.233.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1440 (0x5a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 05:13:58 2021 GMT
Not After : Jul 5 05:13:58 2022 GMT
Subject: CN=60976f9b-8465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:a3:ce:02:d8:9a:bc:02:fd:8f:bb:5d:d4:
ab:31:e7:84:20:3a:8a:06:1b:1c:04:8c:1a:b7:a7:
40:41:ea:66:ba:62:0e:24:bd:31:54:c5:3d:8c:e3:
49:db:a9:e7:fe:6e:90:b5:e4:ca:2d:09:ee:66:68:
0a:b3:34:83:df:5f:d8:49:5e:41:e3:a6:7e:9d:7f:
d8:de:cd:dd:7b:98:5b:1f:ae:cd:82:6f:69:e6:7c:
94:8c:b1:f5:2c:ac:b3:58:13:68:4b:13:c4:82:d9:
be:ed:f9:3b:8e:c7:43:ad:53:1d:bf:37:ae:f8:73:
eb:a5:dd:1c:6b:40:10:7c:c0:36:95:d3:12:61:89:
38:4c:76:b3:f7:1d:fe:76:56:3b:99:3f:f7:f4:c5:
d6:93:1c:55:07:27:00:e8:87:90:52:0d:8b:b0:1e:
b9:ce:5b:2f:b4:02:8c:68:62:70:28:1b:78:77:d6:
fb:29:8a:91:10:ed:dc:c2:b8:68:7d:78:7a:1d:c5:
d8:80:75:ea:37:75:3f:d8:5d:5e:3c:fe:99:26:91:
a3:32:39:68:86:93:a9:63:2e:96:0c:3b:2f:3c:a4:
d5:43:8c:1a:0b:2d:ea:1d:20:a3:1b:11:3d:99:37:
1d:02:b8:44:28:8d:f3:82:57:19:35:5e:d0:db:e6:
8f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:77:09:88:A6:96:89:10:0C:5F:14:75:08:D3:4A:A3:76:EF:19:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E676F70B08511EB9ECD6880F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.128.0/18
Signature Algorithm: sha256WithRSAEncryption
89:fd:af:51:dd:96:74:82:04:ce:6c:2a:26:d1:65:61:04:aa:
a5:01:df:4e:c4:19:94:e7:28:3f:ae:e0:37:66:58:c8:43:94:
7e:96:d4:c0:40:d6:ab:0c:c9:eb:6e:10:c5:a2:8f:48:18:d9:
66:c4:bf:75:17:e9:f5:1b:71:83:1e:f3:65:f8:81:63:50:00:
ae:47:71:48:d3:54:eb:5a:c0:b6:df:f6:5b:5a:a2:0c:ba:16:
66:29:4a:05:c2:ae:3a:40:9f:c0:5e:1c:e8:9b:57:5f:52:5b:
6e:f6:52:b4:d2:f6:f2:41:df:5b:da:aa:d1:03:e1:f0:d9:80:
83:c6:50:78:51:f7:1d:d4:1c:36:c2:61:cd:ce:83:5c:a2:8f:
84:f8:4c:5e:4a:c5:8f:20:a7:a7:74:ff:11:99:e3:95:1c:b9:
13:b5:93:ed:06:45:db:df:67:b7:0c:a6:76:42:d2:33:0e:91:
4c:33:1b:73:44:67:54:e9:52:97:f3:5f:28:3f:a9:b5:80:ba:
b3:e7:fa:4d:61:85:c2:2c:36:02:68:56:13:76:b3:69:68:48:
90:ae:bc:ff:44:3f:3d:84:d4:1b:ba:2b:c3:93:e1:e9:f9:a5:
63:16:ff:96:b1:d0:64:04:3b:1a:8f:ee:cb:50:8d:aa:86:e4:
e1:c2:f5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-ams.rpki-client.org