Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/634BD07448C811EFB2DD1BB7762E951A.roa
File: 634BD07448C811EFB2DD1BB7762E951A.roa (raw, json)
Hash identifier: ksBB+lk6X/xrygnUkPEVCNwEPnW0/jGu85R1WVRl/9s=
Subject key identifier: 95:64:0B:B0:45:AE:98:18:2E:1A:A5:3A:B2:8F:0F:5C:FC:2A:54:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E78
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/634BD07448C811EFB2DD1BB7762E951A.roa
Signing time: Tue 23 Jul 2024 07:51:37 +0000
ROA not before: Fri 26 Jul 2024 07:51:34 +0000
ROA not after: Fri 23 Aug 2024 07:51:34 +0000
asID: 202656
IP address blocks: 156.246.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40568 (0x9e78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:51:34 2024 GMT
Not After : Aug 23 07:51:34 2024 GMT
Subject: CN=669f6109-6d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:d3:52:f6:49:64:bf:ad:b6:69:69:f2:c9:
9b:44:00:47:7e:14:99:58:6f:fe:78:3c:67:11:42:
ec:9a:8a:0e:58:26:58:e0:cf:13:a7:04:51:75:f3:
30:6a:ae:08:ea:e5:68:c9:d9:4a:ad:88:6b:69:86:
87:67:74:63:2b:4c:de:9b:b7:25:56:0e:40:43:da:
7b:42:a7:9a:66:ab:ea:27:aa:cb:72:7b:d6:af:f5:
aa:df:ef:65:5c:22:9b:83:1e:c8:62:9e:43:f6:00:
e3:2e:92:87:fe:19:a8:25:1c:c7:99:ae:58:ee:77:
07:49:37:8f:5d:0b:9e:b8:03:49:1e:ae:df:ce:76:
f9:df:9c:87:32:10:1a:3e:3f:ae:68:0b:1d:ad:91:
10:0c:c7:8e:f0:61:e6:cf:62:5d:23:8f:d6:b1:70:
1b:6d:50:3a:98:6e:6b:fa:15:99:98:7d:ca:de:07:
8f:9b:9e:69:28:64:d4:1e:04:4c:23:d6:90:b1:ea:
6a:0b:29:48:66:fc:4f:47:d6:4c:28:6e:87:24:c5:
c0:d8:86:eb:72:ab:4c:89:19:ff:be:dd:bb:bd:4c:
fd:9a:5b:8e:aa:97:9c:5e:9a:bb:ff:ae:85:c8:ad:
27:d0:46:84:7d:38:a4:f1:8e:78:e5:df:65:41:cd:
22:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:64:0B:B0:45:AE:98:18:2E:1A:A5:3A:B2:8F:0F:5C:FC:2A:54:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/634BD07448C811EFB2DD1BB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.180.0/22
Signature Algorithm: sha256WithRSAEncryption
86:92:71:74:a0:66:ef:47:76:77:6d:0a:d5:5d:72:d0:19:cc:
2e:04:2c:ba:78:68:31:09:e4:36:18:01:61:31:8a:61:63:eb:
f4:f9:e8:f8:30:50:01:8e:0b:09:5c:18:e9:5a:73:f7:4d:07:
9e:83:f0:cb:87:cd:b1:53:81:d6:c6:da:57:a0:2d:ec:95:bf:
b3:f1:17:84:c9:c8:29:b2:15:8f:ba:2a:cb:73:6e:b3:99:eb:
fe:d9:2a:4f:ac:d9:32:4e:ea:4c:80:9b:16:66:ad:c4:53:41:
eb:31:8a:f7:f8:66:05:b4:34:2f:ee:3d:3f:4b:a8:05:d8:98:
5f:41:22:4b:7e:c8:fa:94:14:62:75:01:18:30:4b:53:8c:d0:
4c:33:88:8a:e1:94:a9:57:cf:d8:a4:b7:4d:91:f5:66:47:8c:
2e:28:46:0a:02:7e:2f:73:f8:af:12:d4:a3:61:35:d9:bb:06:
77:9a:75:79:df:3b:fb:2a:90:09:1f:1c:7b:8f:2c:71:b4:c5:
b7:c6:16:80:24:ce:94:60:51:ee:7c:6f:f0:e9:06:e3:ce:ca:
d3:3b:24:e2:49:5c:d1:0e:98:2f:86:31:e7:26:b0:f6:d3:b9:
5c:cc:e1:0f:cf:84:12:54:27:8d:57:8c:5b:71:4a:40:00:35:
e5:ae:0d:b1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ54MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI2MDc1MTM0WhcNMjQwODIzMDc1MTM0WjAYMRYw
FAYDVQQDEw02NjlmNjEwOS02ZDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAob3TUvZJZL+ttmlp8smbRABHfhSZWG/+eDxnEULsmooOWCZY4M8TpwRR
dfMwaq4I6uVoydlKrYhraYaHZ3RjK0zem7clVg5AQ9p7QqeaZqvqJ6rLcnvWr/Wq
3+9lXCKbgx7IYp5D9gDjLpKH/hmoJRzHma5Y7ncHSTePXQueuANJHq7fznb535yH
MhAaPj+uaAsdrZEQDMeO8GHmz2JdI4/WsXAbbVA6mG5r+hWZmH3K3gePm55pKGTU
HgRMI9aQsepqCylIZvxPR9ZMKG6HJMXA2IbrcqtMiRn/vt27vUz9mluOqpecXpq7
/66FyK0n0EaEfTik8Y545d9lQc0i6QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJVk
C7BFrpgYLhqlOrKPD1z8KlRWMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82MzRCRDA3NDQ4QzgxMUVGQjJERDFCQjc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPa0MA0GCSqGSIb3DQEBCwUA
A4IBAQCGknF0oGbvR3Z3bQrVXXLQGcwuBCy6eGgxCeQ2GAFhMYphY+v0+ej4MFAB
jgsJXBjpWnP3TQeeg/DLh82xU4HWxtpXoC3slb+z8ReEycgpshWPuirLc26zmev+
2SpPrNkyTupMgJsWZq3EU0HrMYr3+GYFtDQv7j0/S6gF2JhfQSJLfsj6lBRidQEY
MEtTjNBMM4iK4ZSpV8/YpLdNkfVmR4wuKEYKAn4vc/ivEtSjYTXZuwZ3mnV53zv7
KpAJHxx7jyxxtMW3xhaAJM6UYFHufG/w6QbjzsrTOyTiSVzRDpgvhjHnJrD207lc
zOEPz4QSVCeNV4xbcUpAADXlrg2x
-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:02 2024 by rpki-client on console-ams.rpki-client.org