Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EBE5E90200911EC97D6977BD8A014CE.roa
File: 5EBE5E90200911EC97D6977BD8A014CE.roa (raw, json)
Hash identifier: 8ZBt0GBiFXdK5/ZA4s4UDVxk/g43cKQnYuZjcRW33HI=
Subject key identifier: F1:71:B4:A8:E3:CD:04:BA:37:CC:85:C5:4A:F2:C6:CB:D7:D1:E1:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 09B3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EBE5E90200911EC97D6977BD8A014CE.roa
Signing time: Tue 28 Sep 2021 03:08:36 +0000
ROA not before: Tue 28 Sep 2021 03:08:32 +0000
ROA not after: Wed 28 Sep 2022 03:08:32 +0000
asID: 132839
IP address blocks: 156.252.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2483 (0x9b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 28 03:08:32 2021 GMT
Not After : Sep 28 03:08:32 2022 GMT
Subject: CN=61528734-04ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:05:6d:88:38:f7:39:e8:23:93:b3:9d:d0:
93:96:72:54:b5:f8:35:eb:6c:4e:ec:80:16:d1:3a:
d7:d2:e6:c1:46:fb:6e:91:6c:4a:11:64:e5:bf:5e:
13:27:d2:2c:12:95:90:ca:e9:c6:0a:f8:51:56:c8:
59:73:94:37:5a:b1:d1:99:2f:66:a7:f1:0c:ea:3a:
9d:7e:a9:d5:ee:10:b7:ea:9d:00:c1:ea:76:17:3f:
5d:d0:31:f2:df:38:34:9f:bf:35:c5:81:45:37:a0:
73:2d:1c:6b:95:03:f6:18:54:bc:ac:94:d8:c3:f2:
8b:7f:68:a9:2e:bb:39:74:19:cb:16:0c:92:47:84:
3a:99:9f:91:ed:d8:0a:ca:69:89:56:02:64:38:67:
c8:7b:c9:92:31:8f:4b:c0:2e:2d:b4:51:8e:8a:e1:
8e:55:1e:95:53:ac:e7:2c:22:54:ed:0c:eb:19:94:
dd:9b:c9:b8:f7:52:9e:3b:29:46:e3:84:cd:a2:e3:
47:1e:04:fe:3a:85:32:8d:ff:01:b3:61:02:8f:e5:
97:88:1f:fb:4c:0c:de:24:1e:68:b2:f0:0c:8a:2e:
73:d8:17:22:6c:38:a0:03:e0:40:cb:2c:af:6e:fb:
26:06:8d:fc:2c:ac:85:c1:e1:80:93:7a:48:ed:71:
0f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:71:B4:A8:E3:CD:04:BA:37:CC:85:C5:4A:F2:C6:CB:D7:D1:E1:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EBE5E90200911EC97D6977BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.66.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:ac:13:c4:b4:42:e8:11:e3:72:8f:d9:a9:f7:3c:c4:fb:11:
29:bc:59:83:11:4d:d9:c6:24:d8:1a:cf:06:e4:ec:4f:7a:68:
4a:cb:3e:7d:14:0d:ad:b2:2e:80:96:e5:8b:9a:29:42:dc:6f:
65:8b:4d:4d:14:fb:6d:f4:14:de:a0:c5:33:03:fb:fa:76:36:
23:89:3c:82:ae:fa:18:dc:6a:82:4f:e2:08:e0:dc:39:6d:35:
ca:8d:9e:93:2b:22:0f:cd:db:68:90:11:55:b0:aa:24:2e:2c:
51:30:40:c2:82:4d:19:60:9f:da:6b:19:69:fc:c5:5a:5f:8c:
38:44:ff:97:48:87:02:d8:b6:b7:78:9b:66:a4:30:d5:34:43:
63:6d:aa:b9:09:27:30:a9:08:cf:ef:6f:71:85:c7:3e:4b:f8:
42:69:86:fb:b2:9d:a0:c6:f9:6c:6f:88:04:c5:f9:bf:17:6f:
bc:10:b3:74:13:df:cf:3a:5b:c3:0d:bc:5e:05:72:8d:3e:57:
9e:b9:f6:6e:a3:6d:d9:84:3a:0a:22:35:ca:bc:31:c5:54:cf:
de:9f:3c:42:6b:f5:a5:e4:e1:98:3c:e8:7f:ea:7c:26:2e:08:
5f:a6:0d:52:7b:3f:25:16:0b:72:2e:0d:ba:13:0f:2b:c3:6a:
16:ad:45:9d
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCbMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTA5MjgwMzA4MzJaFw0yMjA5MjgwMzA4MzJaMBgxFjAU
BgNVBAMMDTYxNTI4NzM0LTA0ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+4AVtiDj3Oegjk7Od0JOWclS1+DXrbE7sgBbROtfS5sFG+26RbEoRZOW/
XhMn0iwSlZDK6cYK+FFWyFlzlDdasdGZL2an8QzqOp1+qdXuELfqnQDB6nYXP13Q
MfLfODSfvzXFgUU3oHMtHGuVA/YYVLyslNjD8ot/aKkuuzl0GcsWDJJHhDqZn5Ht
2ArKaYlWAmQ4Z8h7yZIxj0vALi20UY6K4Y5VHpVTrOcsIlTtDOsZlN2bybj3Up47
KUbjhM2i40ceBP46hTKN/wGzYQKP5ZeIH/tMDN4kHmiy8AyKLnPYFyJsOKAD4EDL
LK9u+yYGjfwsrIXB4YCTekjtcQ+/AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU8XG0
qOPNBLo3zIXFSvLGy9fR4QQwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzVFQkU1RTkwMjAwOTExRUM5N0Q2OTc3QkQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc/EIwDQYJKoZIhvcNAQELBQAD
ggEBAK2sE8S0QugR43KP2an3PMT7ESm8WYMRTdnGJNgazwbk7E96aErLPn0UDa2y
LoCW5YuaKULcb2WLTU0U+230FN6gxTMD+/p2NiOJPIKu+hjcaoJP4gjg3DltNcqN
npMrIg/N22iQEVWwqiQuLFEwQMKCTRlgn9prGWn8xVpfjDhE/5dIhwLYtrd4m2ak
MNU0Q2NtqrkJJzCpCM/vb3GFxz5L+EJphvuynaDG+WxviATF+b8Xb7wQs3QT3886
W8MNvF4Fco0+V5659m6jbdmEOgoiNcq8McVUz96fPEJr9aXk4Zg86H/qfCYuCF+m
DVJ7PyUWC3IuDboTDyvDahatRZ0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-fra.rpki-client.org