Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97F8721E427411EFAE6A4169762E951A.roa
File: 97F8721E427411EFAE6A4169762E951A.roa (raw, json)
Hash identifier: Fz/edmykH/gdimWPMor2Bw3qE1DS/Sf5SGkkj1fbcto=
Subject key identifier: 24:59:C8:D7:72:C6:72:AD:C3:BB:BB:60:D5:1C:35:BE:3E:66:39:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9C72
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97F8721E427411EFAE6A4169762E951A.roa
Signing time: Mon 15 Jul 2024 06:36:40 +0000
ROA not before: Mon 15 Jul 2024 06:36:37 +0000
ROA not after: Wed 21 Aug 2024 06:36:37 +0000
asID: 63139
IP address blocks: 156.227.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40050 (0x9c72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 15 06:36:37 2024 GMT
Not After : Aug 21 06:36:37 2024 GMT
Subject: CN=6694c378-bc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:45:7b:d2:5e:34:d5:0c:91:44:ae:fb:77:
22:08:f8:ff:fe:a3:c3:1b:38:dd:2f:4b:f7:81:eb:
c6:1e:00:07:16:e3:49:ea:0c:05:d9:9c:fd:65:51:
cf:53:94:50:59:da:36:89:3c:dc:72:0b:56:da:a1:
19:56:6c:88:19:0f:b1:58:04:ee:b6:2f:c2:7d:88:
a3:c1:72:fb:2b:40:1b:5a:7e:9d:63:f5:8b:ca:72:
46:06:bc:ce:eb:3a:3f:ae:31:26:7a:94:fa:75:cc:
81:72:99:ca:88:45:06:49:c4:03:7e:79:0f:74:32:
0a:d3:c5:78:3d:f2:c6:d5:38:e0:73:a1:aa:d0:2e:
ec:65:22:1f:9d:8b:de:b4:e1:d4:7c:0c:bb:30:02:
b6:ab:1b:69:ca:cf:27:3d:d2:ea:91:a9:46:34:3b:
61:8b:11:4a:ed:7c:36:67:46:76:22:4d:12:9d:aa:
9c:70:9a:13:69:a1:52:74:3c:ac:52:b0:e8:76:ff:
75:c7:ef:f8:13:9b:dd:0f:9e:80:94:8d:b3:f8:b6:
26:8a:49:dc:de:fc:b3:95:ea:ac:42:dc:f2:29:a0:
a9:9a:a0:ba:d2:aa:3f:31:e8:50:16:ae:03:de:6c:
27:09:44:a2:aa:f6:78:55:2f:fb:26:b0:af:38:97:
5f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:59:C8:D7:72:C6:72:AD:C3:BB:BB:60:D5:1C:35:BE:3E:66:39:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97F8721E427411EFAE6A4169762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.198.0/24
Signature Algorithm: sha256WithRSAEncryption
10:10:b0:ef:63:3a:68:a1:46:20:8c:6a:9b:6f:d6:67:8f:6a:
af:ae:b6:13:8b:fd:a0:03:31:54:81:5c:60:0d:bc:99:1c:fa:
15:c3:78:c6:4a:ec:76:c7:a0:34:bb:40:4d:a4:0b:8e:5e:14:
8c:e4:9d:5c:80:68:36:8f:0c:a5:a3:90:a6:ba:ca:00:60:f5:
26:86:b0:9c:34:d1:61:4c:24:c9:58:ba:82:49:1b:3a:37:0d:
07:87:26:ee:6b:84:5e:88:da:ee:eb:9b:1e:92:83:dd:df:ef:
d2:02:59:09:9f:6a:bb:09:b0:57:7e:09:15:fe:f9:9c:40:9d:
da:94:e4:1b:99:50:54:df:d5:32:c1:2d:35:de:fe:ba:75:b4:
ee:04:74:9f:25:32:d3:9b:c1:93:ab:48:96:ae:de:8e:45:63:
60:90:8b:cc:66:a8:5c:e5:94:f4:47:64:9f:44:6b:7c:56:6b:
44:18:74:c3:46:78:f1:2a:ce:ce:42:44:70:63:17:28:dc:0e:
9c:ab:b2:7a:36:c6:94:b5:8e:2d:24:c9:03:8c:98:37:dd:cd:
65:d3:47:69:3c:18:e0:9a:e2:52:4b:43:39:67:69:87:50:8f:
b8:b2:3a:bd:d8:e9:49:bb:c2:f9:11:89:ee:b1:5b:cd:af:c8:
d0:64:f8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 09:45:54 2024 by rpki-client on console-ams.rpki-client.org