Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F0E992019D511EFA685A16E017001B1.roa
File: 8F0E992019D511EFA685A16E017001B1.roa (raw, json)
Hash identifier: mUqTuve6B0w5Fgm352kraNMr9t6UISDhU+z2UbJUcN4=
Subject key identifier: FE:0F:A5:A5:2D:6D:26:51:D8:AC:79:63:28:44:58:F6:E6:0F:7A:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8BCE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F0E992019D511EFA685A16E017001B1.roa
Signing time: Fri 24 May 2024 13:57:29 +0000
ROA not before: Fri 24 May 2024 13:57:26 +0000
ROA not after: Sat 01 Jun 2024 13:57:26 +0000
asID: 207023
IP address blocks: 156.255.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35790 (0x8bce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 13:57:26 2024 GMT
Not After : Jun 1 13:57:26 2024 GMT
Subject: CN=66509cc9-ac93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7f:51:9d:e7:43:35:54:b7:16:07:6f:87:e9:
87:b1:ab:89:64:ab:d4:8b:47:b9:7d:be:40:cc:24:
e5:19:c3:99:dd:d4:ac:fa:2c:bf:f4:f3:19:1a:16:
eb:b9:95:22:20:20:ee:e7:9c:38:e3:84:43:55:c1:
04:35:06:73:d2:b4:c2:a0:30:be:44:1d:95:fe:39:
0b:7b:44:d5:1d:f3:0f:5e:4a:df:6f:2b:cb:15:b8:
52:e4:0c:e3:4a:f3:02:3a:dd:fb:8e:7b:7f:54:d9:
ff:2d:b0:11:65:8e:2b:38:68:9d:13:d4:44:ee:ae:
59:0a:1b:84:5e:b8:b3:2b:6a:7c:fd:f3:90:60:0c:
d9:0e:a2:bf:61:1f:5f:92:3c:73:9c:37:41:c6:2f:
ca:55:87:84:f5:d3:49:77:7f:bc:9a:ec:e4:12:97:
4c:54:9b:a6:e2:cb:6d:cd:20:c4:74:da:b6:94:02:
e4:93:23:d3:db:9b:39:fa:f3:70:d3:12:36:08:d3:
20:b0:6f:fc:45:3e:ec:45:3a:e5:f7:da:cd:d3:f3:
06:31:50:1c:d1:54:12:ea:b8:2c:50:26:05:15:04:
9f:4d:2a:85:12:c9:08:f0:db:bf:bf:d6:5a:bf:3c:
ba:43:18:be:d6:b9:27:c7:f7:25:38:93:6e:fe:ba:
90:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0F:A5:A5:2D:6D:26:51:D8:AC:79:63:28:44:58:F6:E6:0F:7A:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F0E992019D511EFA685A16E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.28.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:bd:e3:1b:45:52:9f:9c:a9:94:a8:c1:95:8e:60:b3:08:da:
98:66:6a:2b:cd:a1:84:55:6c:ac:43:a3:f3:85:a7:b2:ac:7a:
4b:b1:f0:d8:4b:e8:8e:93:82:52:cd:95:e2:34:34:72:cd:e4:
bc:55:e2:03:bc:9d:90:a9:dc:93:d4:93:bb:25:d3:f1:0a:83:
a9:3e:bf:a1:e9:5b:a4:d7:41:c9:24:ed:92:5f:89:57:2b:bc:
8d:61:e1:16:d2:df:1d:72:15:02:e3:7c:d2:90:ab:0d:02:ea:
13:b1:7d:3f:5f:55:30:20:d6:93:a9:09:eb:08:4f:e4:fd:0e:
f8:0b:bd:98:9e:eb:42:02:a3:b7:da:94:71:98:67:92:32:f8:
bb:98:79:19:c0:f9:ac:b7:c1:d5:52:e9:e0:b5:ed:65:a1:5a:
47:19:0e:38:a7:47:37:ce:b6:6a:85:50:12:ec:33:d4:32:57:
98:46:2f:15:b5:b3:4b:c4:68:c6:7d:fc:62:ca:d7:ef:6e:24:
08:7e:5c:4e:48:40:e5:fc:7e:68:d7:57:12:03:5e:d8:36:6a:
66:88:a4:c5:43:a3:01:2f:b1:d4:a1:38:c4:6f:08:03:3e:92:
be:45:48:e7:df:2c:11:49:df:60:8d:97:c7:1f:f3:db:e6:d5:
63:bc:23:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:17 2024 by rpki-client on console-fra.rpki-client.org