Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B92041C435D11EFA5885B61762E951A.roa
File: 6B92041C435D11EFA5885B61762E951A.roa (raw, json)
Hash identifier: b6FNsFTc3+DeLDhDM1wn/StoBKNdnHkhXIFe5dO0FOA=
Subject key identifier: 8A:8D:21:7A:F7:5D:A9:B5:CB:D0:8B:DE:FB:95:96:41:E3:FF:6F:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9CC5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B92041C435D11EFA5885B61762E951A.roa
Signing time: Tue 16 Jul 2024 10:23:19 +0000
ROA not before: Tue 16 Jul 2024 10:23:15 +0000
ROA not after: Mon 12 Aug 2024 10:23:15 +0000
asID: 398993
IP address blocks: 156.231.88.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40133 (0x9cc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 10:23:15 2024 GMT
Not After : Aug 12 10:23:15 2024 GMT
Subject: CN=66964a17-def8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:ec:37:eb:6c:ed:f7:f5:93:e8:71:e3:1b:92:
96:82:8e:fb:b5:0a:fc:6f:17:6c:70:5f:27:41:68:
a7:02:a5:cc:32:2b:94:08:ef:00:be:40:0e:37:56:
88:f6:bc:f7:e7:62:c1:d8:97:6e:39:ba:7c:90:fa:
97:8c:dc:b9:a1:e5:64:24:fc:17:29:ac:40:18:d3:
e0:94:32:8a:58:71:9d:fc:19:1f:0e:cb:bf:ce:ad:
2a:8c:0a:7e:06:89:57:bc:7c:21:25:d7:46:b8:36:
af:ad:fb:ca:ca:4d:d3:2b:8b:15:6d:ae:72:a3:ba:
96:63:9c:1f:6b:da:a6:25:19:9a:64:5a:40:f4:eb:
0a:d8:fe:46:a6:ba:c3:1e:2c:be:03:74:87:85:25:
be:fb:d7:97:8e:4a:96:95:d1:b9:31:dc:eb:a2:38:
01:66:38:d8:99:2b:b6:50:c2:52:51:53:c3:fc:41:
6f:0d:34:e9:ae:d4:07:47:d3:6e:9b:d3:3e:be:21:
2e:2f:05:64:17:ed:e7:ac:78:f6:88:77:35:ba:88:
77:01:6d:dc:29:c6:27:25:b7:79:11:68:35:27:af:
f0:06:b1:ad:e0:27:9e:a3:3e:c4:35:ae:e6:e0:47:
ac:d9:d1:0d:31:7b:95:56:4c:80:80:8b:5c:35:d1:
35:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8D:21:7A:F7:5D:A9:B5:CB:D0:8B:DE:FB:95:96:41:E3:FF:6F:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B92041C435D11EFA5885B61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.88.0/21
Signature Algorithm: sha256WithRSAEncryption
90:9f:c3:38:1d:b4:e7:5e:71:17:44:9d:71:17:e4:57:81:d4:
5c:4c:d2:b8:0d:5c:f9:91:01:8e:4d:58:1f:71:c1:34:23:ec:
0d:13:a1:58:d5:13:40:c4:54:87:ce:6b:64:51:e6:a6:82:a0:
97:ae:f0:18:bb:4d:44:a2:6f:56:4b:a1:bf:03:6d:56:0a:74:
46:92:53:b7:04:a9:54:e0:c9:25:1a:0b:b5:a5:83:85:c4:fa:
ce:6d:47:fe:bb:48:f3:df:a3:a5:5d:d4:30:ea:da:4f:0f:b7:
e0:03:f5:92:0c:5c:cf:f6:c2:be:43:e3:ea:1a:ae:d4:ef:73:
15:e0:f5:99:88:42:19:d0:e9:4c:b7:7e:ec:ab:c0:42:6e:62:
dd:1d:a9:57:8e:9e:ad:cf:ff:70:35:e6:ad:c1:7b:fa:c9:95:
72:33:cf:5a:e1:62:e0:f1:5d:39:54:e0:c7:9f:27:c6:f0:2f:
c0:8b:3d:05:6f:78:05:ff:a6:1c:6e:a8:89:d4:f4:0d:d7:2e:
26:1f:e1:62:df:64:7a:a7:4c:55:9c:10:12:bd:14:35:b6:28:
2d:ea:3e:b6:81:1c:dc:4b:92:8a:90:86:74:10:fd:fc:9f:da:
55:7c:a3:19:d1:2f:a2:d8:d6:54:55:f3:eb:a4:7f:94:bd:09:
97:fd:6d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 03:10:46 2024 by rpki-client on console-fra.rpki-client.org