Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB8237B2E89411EBA062B42AD8A014CE.roa
File: AB8237B2E89411EBA062B42AD8A014CE.roa (raw, json)
Hash identifier: sHIS0R67OHfu9AmRB5QTX0uOK9BuaBQTVskYM0LUWuk=
Subject key identifier: 62:81:E7:AF:E7:17:16:5D:80:E0:FE:8D:1A:69:9B:D4:CA:00:72:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0778
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB8237B2E89411EBA062B42AD8A014CE.roa
Signing time: Mon 19 Jul 2021 13:24:46 +0000
ROA not before: Mon 19 Jul 2021 13:24:42 +0000
ROA not after: Mon 14 Mar 2022 13:24:42 +0000
asID: 1239
IP address blocks: 156.235.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1912 (0x778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 13:24:42 2021 GMT
Not After : Mar 14 13:24:42 2022 GMT
Subject: CN=60f57d1e-450d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:92:52:00:52:fb:0a:42:ef:c0:8c:02:af:d4:
43:5e:d1:c5:f1:95:28:a3:ff:80:20:27:1f:e0:a7:
ff:6a:ea:34:bb:8e:09:13:fe:3d:38:c3:64:69:fa:
cc:47:56:3b:3d:05:20:8f:08:ed:c0:29:94:c7:c3:
1e:0c:be:38:d9:4c:d0:ee:14:a2:b9:fa:0d:a4:a7:
97:86:5d:1d:cf:8b:82:c6:72:25:f3:2d:39:2d:05:
41:d8:01:a7:94:be:3d:e0:3c:eb:a9:a7:5b:f8:10:
c4:65:9e:de:15:c8:20:09:9e:41:07:e4:09:bb:22:
f7:65:d9:08:9f:13:41:bf:cb:fe:61:3c:dc:ad:42:
ff:33:5f:60:3a:36:b6:64:56:69:38:2d:bc:65:d8:
92:cc:9c:25:12:19:88:3d:76:87:32:05:0a:16:3e:
68:4b:2d:7a:e8:2f:44:f8:b9:ac:0b:61:44:da:10:
90:8a:92:88:fb:ac:da:ee:e8:94:16:dc:5f:3a:21:
cc:28:d4:b7:aa:62:43:e5:54:d1:5c:ef:83:f1:85:
cb:55:d6:be:e2:8f:1e:ab:06:2c:f8:0d:bf:b9:98:
77:61:52:e3:08:7b:b3:42:aa:f5:2a:a8:90:e4:0c:
04:d9:a3:42:65:20:53:7a:07:31:2c:d0:dd:5e:92:
de:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:81:E7:AF:E7:17:16:5D:80:E0:FE:8D:1A:69:9B:D4:CA:00:72:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB8237B2E89411EBA062B42AD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.0.0/24
Signature Algorithm: sha256WithRSAEncryption
28:6c:6e:22:e7:bb:b3:a1:dd:83:ed:f6:d1:8d:04:a7:a6:16:
d7:0f:a1:30:a9:f0:35:83:3b:a1:88:eb:c3:0a:f6:8f:f8:41:
33:e3:13:55:7f:c8:35:68:a1:78:0e:43:df:d3:44:9c:11:85:
cc:53:37:4c:c1:e0:18:76:e6:75:73:d1:8f:03:40:bb:8a:c9:
35:cb:df:da:5f:78:72:57:c4:82:7f:27:cc:16:9c:51:49:d8:
a5:19:60:58:83:de:54:f3:b2:93:61:1d:d5:ea:7f:c5:f0:0f:
d2:da:24:03:12:6a:41:1d:a7:26:40:d7:20:b6:ea:cf:5c:55:
82:65:1f:07:17:61:2f:80:93:1f:1d:a2:15:4a:12:b3:14:e0:
3e:57:90:f1:49:50:32:dc:f8:29:52:08:c9:01:26:03:e9:81:
23:8a:ec:0b:04:42:81:c0:99:52:58:f5:67:89:11:9f:20:7f:
5a:f8:4d:4e:71:95:c9:d2:82:39:8c:58:d6:82:68:ae:80:8a:
40:2b:33:97:3c:d1:a1:e4:1f:be:65:09:00:0e:24:0f:58:4b:
da:9f:11:b6:c7:de:94:9a:f9:13:58:bf:51:2a:22:69:7b:80:
50:b0:da:e1:6d:40:1a:72:56:5c:3c:98:57:cd:d3:1f:24:51:
27:e7:f9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-ams.rpki-client.org