Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3B96650488311EC9E27B230D8A014CE.roa
File: A3B96650488311EC9E27B230D8A014CE.roa (raw, json)
Hash identifier: aQrpgCg6T/7fy2dcQaxXBmG3j2s1ryAP+P3QFwqa7Ac=
Subject key identifier: 67:4B:A5:AA:97:B9:A0:80:34:CE:E8:72:BA:88:8D:59:1E:5D:87:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0CBF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3B96650488311EC9E27B230D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:24:37 +0000
ROA not before: Fri 19 Nov 2021 15:24:33 +0000
ROA not after: Sat 19 Nov 2022 15:24:33 +0000
asID: 139879
IP address blocks: 156.249.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3263 (0xcbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:24:33 2021 GMT
Not After : Nov 19 15:24:33 2022 GMT
Subject: CN=61967035-27f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:28:9c:b7:1e:34:62:69:c8:1a:5f:c6:a2:1f:
4a:46:56:2d:5d:c6:fc:fc:07:99:1f:14:5a:67:ad:
f7:23:1e:9b:d8:5b:3b:63:7c:0e:82:40:4d:9e:ed:
8c:a8:94:ad:28:42:a2:41:71:8e:e7:8c:ba:bf:00:
73:b5:63:e0:1a:a6:b9:a2:86:13:68:6d:39:a6:09:
e0:38:8e:a2:4c:d8:52:5e:08:21:fd:6f:27:71:c5:
1f:89:fe:84:16:c9:6e:5f:9d:4b:25:06:5c:cd:4e:
d4:99:b8:0e:75:0d:27:b2:fc:02:37:08:ba:ae:d0:
b3:f8:ce:3b:bd:19:a8:fb:26:23:c6:80:72:79:ee:
da:6f:ce:d9:1a:77:2c:82:63:a0:9b:f6:e4:4a:76:
86:d8:7f:b4:d1:87:2f:a1:d5:b3:5b:14:f6:d9:87:
66:47:f4:bd:f3:de:6f:ee:82:af:1b:f0:d0:18:6b:
f0:48:68:ee:ff:d9:fd:a0:e6:f8:0a:29:1e:c8:84:
05:d4:53:ae:14:8c:02:85:fd:77:57:6c:6d:02:61:
8e:90:b3:f3:56:c6:b7:fd:7a:f7:f5:68:5e:c9:17:
ca:97:9a:b3:b4:4f:99:6e:b6:0b:2f:98:dd:81:44:
0d:10:cd:1c:2f:96:0e:ae:4a:92:72:cc:52:17:51:
0c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4B:A5:AA:97:B9:A0:80:34:CE:E8:72:BA:88:8D:59:1E:5D:87:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3B96650488311EC9E27B230D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.131.0/24
Signature Algorithm: sha256WithRSAEncryption
89:c5:ab:83:c5:80:10:e7:0e:9a:bf:b6:bd:98:9b:d1:fc:69:
11:72:26:e7:cf:02:85:31:b8:f7:5d:a6:a2:ed:e7:fb:9e:1b:
35:d0:6a:6b:f8:2e:be:e9:7e:8e:40:f5:00:96:16:f2:7a:67:
32:20:e5:a6:c7:4e:dc:ac:2d:09:e7:fa:e2:5d:f3:62:96:25:
e9:3b:9b:73:2a:3f:b8:d5:40:5d:60:cf:0e:41:f3:3f:bd:27:
4e:d4:95:7c:8f:f2:33:ed:7b:6a:a8:92:3c:4a:28:18:82:29:
60:3c:8e:31:83:81:95:53:0d:99:0f:a7:dc:60:d4:40:9d:9d:
8a:f7:b9:7a:1e:34:40:03:a4:30:f8:32:16:d7:56:bc:90:d8:
b0:ee:e7:bc:7d:f3:7b:10:a1:db:a0:76:56:f9:a0:e3:96:cf:
6e:9e:97:82:4c:8e:12:99:ec:6e:51:f3:98:40:b4:a0:d0:0d:
bc:c3:ec:b9:64:f4:d7:00:cb:74:13:ec:6e:4c:61:df:77:ae:
66:5b:42:8d:45:a7:5d:cd:dc:d1:f9:5e:22:86:07:f3:ed:47:
2e:1c:c0:35:91:ca:af:ce:11:9f:1e:fc:87:5a:06:28:57:74:
c1:5e:89:af:3f:87:45:0b:dc:ee:1b:28:a8:86:f9:21:99:d8:
09:9f:61:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org