Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E683ACE3A4911EE872338144AD9E6FC.roa
File: 8E683ACE3A4911EE872338144AD9E6FC.roa (raw, json)
Hash identifier: fHGn3+do6AiVviQHPoSORAQMwOYPpNWbghYXHDHlz5Y=
Subject key identifier: 0A:7C:59:6F:8E:D2:9F:9E:3D:7F:E9:F5:04:0A:0B:51:69:A3:B3:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3532
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E683ACE3A4911EE872338144AD9E6FC.roa
Signing time: Mon 14 Aug 2023 02:23:29 +0000
ROA not before: Mon 14 Aug 2023 02:23:26 +0000
ROA not after: Sat 13 Jan 2024 02:23:26 +0000
asID: 139057
IP address blocks: 156.251.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13618 (0x3532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 14 02:23:26 2023 GMT
Not After : Jan 13 02:23:26 2024 GMT
Subject: CN=64d99021-234f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1b:21:9d:f0:28:98:6a:36:1c:df:db:2e:4a:
60:d3:98:1a:00:55:e2:06:87:3a:f4:3c:1b:83:92:
44:2a:bc:52:07:af:89:d2:b5:44:06:41:60:cd:20:
7d:3e:12:2b:4e:bc:6f:26:0d:45:4e:1c:20:a3:02:
cb:98:20:f3:ec:ae:fe:4d:2b:4b:93:c1:65:85:f2:
a9:01:17:c4:3c:83:18:8c:95:b7:5c:cf:84:6d:fe:
93:85:24:f1:e3:25:a3:5b:11:0c:f6:68:b4:ca:d3:
23:20:9b:c4:c3:08:c5:0c:68:a8:44:9b:15:04:7d:
0b:df:d4:31:58:c6:2e:c8:50:33:96:ca:11:92:ec:
fa:6b:a2:05:3b:42:cd:e7:9e:f1:b9:0f:2d:79:1c:
9a:2e:1f:e0:df:05:1d:55:d2:5f:b5:34:2e:b4:4d:
68:3f:45:66:87:39:93:b0:ed:3c:ca:0a:e3:cd:05:
38:87:61:33:9c:e8:52:0f:c6:ec:f1:ee:4f:fa:c5:
48:32:f1:3f:e4:ac:b1:89:f3:e8:3d:a8:5a:97:32:
22:25:96:43:59:d0:03:74:ae:e6:47:4b:c8:76:ce:
f5:b1:6b:d3:d5:8f:13:8f:b9:bf:47:dd:12:b1:78:
70:b8:26:4b:c3:df:79:3d:01:60:0a:d8:07:c9:67:
7d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7C:59:6F:8E:D2:9F:9E:3D:7F:E9:F5:04:0A:0B:51:69:A3:B3:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E683ACE3A4911EE872338144AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.77.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:cd:a9:65:17:76:fd:f5:be:4a:00:74:c3:2b:e4:af:c5:0a:
53:4b:31:47:37:a7:24:cf:3a:be:5d:70:e1:45:26:3b:10:03:
df:f1:bd:f4:c7:ad:81:b2:79:80:4e:a5:f5:89:e6:bb:56:b6:
5e:4e:45:b5:37:8f:7b:5b:c3:9d:01:5d:7a:40:dc:ad:79:81:
45:00:68:14:c8:2e:e9:64:ef:96:f7:f7:2e:34:17:43:32:bc:
67:49:20:0a:81:57:c4:59:af:f1:c2:ee:80:4a:5d:34:4c:18:
54:5f:eb:3c:d1:ca:f8:42:eb:25:a2:ca:3a:60:8a:ef:d1:36:
a6:47:e7:ec:6b:5e:48:6e:3a:54:ce:a0:fc:ff:18:ec:ca:80:
78:f1:5d:ec:2e:22:80:2b:3f:7e:42:43:fe:4d:5b:e2:34:3b:
52:a1:78:e1:73:21:16:07:c1:bf:bc:f1:1f:eb:a2:72:7a:9e:
7a:a1:52:e4:63:4d:07:70:66:eb:47:0d:61:0b:2e:22:60:38:
59:73:03:b4:d9:0b:03:05:3c:d8:87:eb:13:2e:31:47:fc:bb:
61:57:ef:81:04:d0:89:24:b8:bd:8c:0a:cd:35:8d:fc:03:1f:
69:16:1d:61:ab:53:56:0c:24:b9:67:a2:9d:2a:06:ec:68:02:
55:08:3b:83
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICNTIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA4MTQwMjIzMjZaFw0yNDAxMTMwMjIzMjZaMBgxFjAU
BgNVBAMTDTY0ZDk5MDIxLTIzNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLGyGd8CiYajYc39suSmDTmBoAVeIGhzr0PBuDkkQqvFIHr4nStUQGQWDN
IH0+EitOvG8mDUVOHCCjAsuYIPPsrv5NK0uTwWWF8qkBF8Q8gxiMlbdcz4Rt/pOF
JPHjJaNbEQz2aLTK0yMgm8TDCMUMaKhEmxUEfQvf1DFYxi7IUDOWyhGS7PprogU7
Qs3nnvG5Dy15HJouH+DfBR1V0l+1NC60TWg/RWaHOZOw7TzKCuPNBTiHYTOc6FIP
xuzx7k/6xUgy8T/krLGJ8+g9qFqXMiIllkNZ0AN0ruZHS8h2zvWxa9PVjxOPub9H
3RKxeHC4JkvD33k9AWAK2AfJZ333AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUCnxZ
b47Sn549f+n1BAoLUWmjszkwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzhFNjgzQUNFM0E0OTExRUU4NzIzMzgxNDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc+00wDQYJKoZIhvcNAQELBQAD
ggEBAD/NqWUXdv31vkoAdMMr5K/FClNLMUc3pyTPOr5dcOFFJjsQA9/xvfTHrYGy
eYBOpfWJ5rtWtl5ORbU3j3tbw50BXXpA3K15gUUAaBTILulk75b39y40F0MyvGdJ
IAqBV8RZr/HC7oBKXTRMGFRf6zzRyvhC6yWiyjpgiu/RNqZH5+xrXkhuOlTOoPz/
GOzKgHjxXewuIoArP35CQ/5NW+I0O1KheOFzIRYHwb+88R/ronJ6nnqhUuRjTQdw
ZutHDWELLiJgOFlzA7TZCwMFPNiH6xMuMUf8u2FX74EE0IkkuL2MCs01jfwDH2kW
HWGrU1YMJLlnop0qBuxoAlUIO4M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:17 2024 by rpki-client on console-fra.rpki-client.org