Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E3272D83E9C11EF9C01ED62762E951A.roa
File: 8E3272D83E9C11EF9C01ED62762E951A.roa (raw, json)
Hash identifier: ccozFQoScK4KwL9L0knTfg/MnEuLhAGcinIfTPi7sEk=
Subject key identifier: 6A:33:0C:13:BB:E8:49:FD:D7:01:8F:83:0D:69:07:55:B0:34:1A:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9AB4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E3272D83E9C11EF9C01ED62762E951A.roa
Signing time: Wed 10 Jul 2024 09:12:39 +0000
ROA not before: Wed 10 Jul 2024 09:12:36 +0000
ROA not after: Fri 02 Aug 2024 09:12:36 +0000
asID: 139646
IP address blocks: 156.242.14.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39604 (0x9ab4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 09:12:36 2024 GMT
Not After : Aug 2 09:12:36 2024 GMT
Subject: CN=668e5087-f962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f4:c1:9b:6b:8a:74:ac:48:e8:ae:a9:5a:23:
d9:30:2b:01:df:1f:c4:9f:1e:53:96:ed:62:54:90:
9a:62:6f:80:82:57:ee:bd:e8:4e:fc:51:09:69:37:
b7:6c:a5:c8:8a:45:c6:6f:d9:96:97:bd:de:bb:89:
b7:39:43:fb:f5:e8:31:dc:e2:4b:8f:5e:1f:b8:27:
22:72:78:d2:98:49:ce:35:0d:c0:14:e7:8e:fd:3b:
37:35:c1:e2:b9:56:6f:38:13:27:6b:a9:59:b9:c4:
a6:e4:70:8b:91:97:18:fe:65:9c:83:43:51:e7:77:
94:7d:ab:90:88:d8:f3:f7:b4:e7:f1:3f:6a:44:0d:
5a:e0:b6:5a:84:06:b0:c0:d0:00:a5:2e:04:dd:63:
f6:32:08:aa:99:11:02:0a:e2:c7:9d:44:90:59:e2:
80:a4:23:d2:82:7c:67:94:eb:db:20:19:48:98:40:
59:1b:68:a1:7d:4f:95:1f:4a:95:3c:49:9f:dc:31:
94:83:85:22:14:58:dd:bb:89:61:90:9e:37:49:2a:
56:db:2f:7e:17:ba:44:6b:52:f6:19:d4:1d:53:0c:
ba:b8:87:cb:d2:24:db:d1:22:5d:11:cf:a6:d8:53:
ec:6c:40:e7:37:3c:e9:ec:46:b7:65:2f:05:cd:df:
40:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:33:0C:13:BB:E8:49:FD:D7:01:8F:83:0D:69:07:55:B0:34:1A:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E3272D83E9C11EF9C01ED62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.14.0/23
Signature Algorithm: sha256WithRSAEncryption
37:78:7b:ca:ca:d4:8a:bd:18:4c:46:86:70:70:ef:4e:14:f1:
db:c8:bd:68:e6:54:61:6e:b6:73:55:2c:53:e3:51:be:52:22:
d2:91:04:8a:00:2e:66:34:d4:28:10:ea:35:3e:f1:fc:ab:2c:
7a:50:82:45:bb:74:8f:1a:38:c1:61:76:c7:3a:12:9a:59:d0:
d4:1f:de:93:92:0c:4e:60:9d:88:a4:4b:3a:40:6b:fa:0e:4c:
f2:62:e3:dd:10:a0:76:50:5c:e1:68:d6:c8:0a:48:7c:7c:e2:
1d:12:d3:be:28:45:e0:10:64:01:92:71:69:df:4b:2c:fe:5e:
6d:ef:0f:80:5e:2a:43:f6:9c:f8:16:a0:0d:18:ac:54:39:63:
d6:e4:da:c3:be:c8:44:df:ca:7c:27:81:c5:88:4a:8d:86:b8:
ab:12:3f:fc:44:0c:31:29:8e:c5:19:28:84:da:96:52:2e:ea:
2e:3b:80:52:d9:fd:97:3a:a1:77:ab:f2:80:84:43:9f:dc:23:
7b:bf:2a:14:09:35:2e:9b:61:1a:d9:10:52:29:47:db:8a:f5:
1d:21:ea:bc:84:2f:7d:64:4a:c4:45:41:76:ea:34:7a:68:b1:
c5:9d:ec:5d:b3:ed:5c:82:9e:18:1a:3f:ff:3b:b4:8e:ff:91:
30:b8:34:db
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJq0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzEwMDkxMjM2WhcNMjQwODAyMDkxMjM2WjAYMRYw
FAYDVQQDEw02NjhlNTA4Ny1mOTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4/TBm2uKdKxI6K6pWiPZMCsB3x/Enx5Tlu1iVJCaYm+AglfuvehO/FEJ
aTe3bKXIikXGb9mWl73eu4m3OUP79egx3OJLj14fuCcicnjSmEnONQ3AFOeO/Ts3
NcHiuVZvOBMna6lZucSm5HCLkZcY/mWcg0NR53eUfauQiNjz97Tn8T9qRA1a4LZa
hAawwNAApS4E3WP2MgiqmRECCuLHnUSQWeKApCPSgnxnlOvbIBlImEBZG2ihfU+V
H0qVPEmf3DGUg4UiFFjdu4lhkJ43SSpW2y9+F7pEa1L2GdQdUwy6uIfL0iTb0SJd
Ec+m2FPsbEDnNzzp7Ea3ZS8Fzd9ARwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGoz
DBO76En91wGPgw1pB1WwNBpdMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84RTMyNzJEODNFOUMxMUVGOUMwMUVENjI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnPIOMA0GCSqGSIb3DQEBCwUA
A4IBAQA3eHvKytSKvRhMRoZwcO9OFPHbyL1o5lRhbrZzVSxT41G+UiLSkQSKAC5m
NNQoEOo1PvH8qyx6UIJFu3SPGjjBYXbHOhKaWdDUH96TkgxOYJ2IpEs6QGv6Dkzy
YuPdEKB2UFzhaNbICkh8fOIdEtO+KEXgEGQBknFp30ss/l5t7w+AXipD9pz4FqAN
GKxUOWPW5NrDvshE38p8J4HFiEqNhrirEj/8RAwxKY7FGSiE2pZSLuouO4BS2f2X
OqF3q/KAhEOf3CN7vyoUCTUum2Ea2RBSKUfbivUdIeq8hC99ZErERUF26jR6aLHF
nexds+1cgp4YGj//O7SO/5EwuDTb
-----END CERTIFICATE-----
Generated at Fri Aug 2 12:40:39 2024 by rpki-client on console-ams.rpki-client.org