Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67F1A270FD2311EE9829E504017001B1.roa
File: 67F1A270FD2311EE9829E504017001B1.roa (raw, json)
Hash identifier: eHSQ4+4YbqGyJ9bFvB+s/2VJwEHmlA+W2vdSUiU2CJA=
Subject key identifier: 28:46:DD:94:1E:60:90:6F:67:DB:75:DC:D6:0E:3E:B9:0A:95:46:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 82DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67F1A270FD2311EE9829E504017001B1.roa
Signing time: Thu 18 Apr 2024 01:31:41 +0000
ROA not before: Thu 18 Apr 2024 01:31:37 +0000
ROA not after: Sun 28 Apr 2024 01:31:37 +0000
asID: 211392
IP address blocks: 156.239.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33503 (0x82df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 01:31:37 2024 GMT
Not After : Apr 28 01:31:37 2024 GMT
Subject: CN=662077fd-703d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b6:42:de:8b:38:19:68:f4:92:eb:5d:c7:41:
5c:0a:3f:c1:ef:07:4f:92:e4:c2:d8:b9:b4:e4:49:
21:ea:35:2e:82:05:cd:64:aa:26:d6:98:f7:66:12:
b8:4d:5f:e9:8e:ac:72:9d:91:e8:98:7b:36:89:76:
26:90:24:e4:4f:e3:30:cb:70:b7:40:74:51:30:8f:
ea:49:14:45:43:45:dc:53:42:d1:f7:45:ed:e6:b7:
26:a6:17:10:94:a0:d5:2e:6c:c3:92:9e:6b:e1:db:
71:67:79:7b:85:5d:51:ba:f6:67:c0:22:d1:28:9e:
6c:bb:bb:2b:17:25:e8:a8:7a:37:d7:d0:93:d9:f5:
d5:1f:24:c4:b0:64:70:71:e6:df:43:e5:36:45:ec:
a0:20:7d:c4:4f:a6:02:08:9a:49:5d:89:06:aa:10:
a4:b2:c3:54:2e:f0:9c:e1:41:f1:db:4f:84:45:71:
10:1d:4b:d5:93:32:00:cf:42:fc:d6:ac:18:f6:1e:
77:fc:ac:f2:ae:b7:6a:85:14:43:9c:17:de:dc:8b:
89:54:17:f0:9c:5f:b6:33:88:e8:8c:79:95:a9:90:
2e:c1:3f:c3:f8:a9:5e:8f:a1:6d:f4:4a:b1:ab:18:
40:37:83:d4:fd:d3:5d:3e:63:f4:8c:b7:13:ac:a1:
e8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:46:DD:94:1E:60:90:6F:67:DB:75:DC:D6:0E:3E:B9:0A:95:46:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67F1A270FD2311EE9829E504017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.155.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:eb:2d:50:5b:fb:6e:6a:53:c5:bd:13:1e:df:5e:a4:a4:eb:
24:c7:2b:8a:ef:d9:87:15:80:94:85:20:3c:b0:97:80:14:8d:
93:0b:50:31:55:cf:21:d1:e8:ba:c3:8e:a0:8b:11:3f:a5:e0:
35:4b:c1:86:9c:99:97:b7:74:de:2b:91:12:62:a0:36:0a:fb:
e7:dd:36:15:e5:b5:f9:e6:76:e2:57:1d:64:aa:e8:4c:8f:0b:
16:03:c9:c0:35:cb:7d:10:d3:de:5b:6e:55:8d:4e:63:cf:0c:
ee:ad:8a:41:c3:1b:88:bc:d0:02:36:38:25:d8:98:c6:af:e8:
bb:25:52:8a:a8:4d:7c:ef:75:71:8c:76:69:97:d0:4d:06:24:
c5:d6:bd:67:fd:d4:ad:e4:95:0a:95:79:1e:aa:46:63:68:a7:
b1:57:ec:a0:74:6a:d2:ac:00:b4:2d:ff:72:ce:ab:01:f7:81:
31:5e:d8:63:66:f5:fb:b9:ae:a3:a8:3f:13:52:ea:cb:aa:f4:
d3:3e:a9:08:bf:20:3e:36:9c:c5:66:3b:f9:f4:3f:ef:c6:29:
20:79:41:ee:07:d0:bc:d6:d8:28:86:15:c9:34:0a:45:a7:7e:
f8:df:16:2d:c5:2e:9e:5e:7f:51:ce:93:5b:b0:dd:fd:1b:fd:
11:4c:df:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:55:41 2024 by rpki-client on console-ams.rpki-client.org