Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B068187A441011EF8EB96AA5762E951A.roa
File: B068187A441011EF8EB96AA5762E951A.roa (raw, json)
Hash identifier: S/QjXxrAS7WKKhwUCLfKay2WgtPk5vJY6zHKXa+BnjE=
Subject key identifier: D1:23:D9:8D:3D:E2:79:2F:50:DB:D3:DD:44:C9:CE:D8:1B:B4:74:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D00
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B068187A441011EF8EB96AA5762E951A.roa
Signing time: Wed 17 Jul 2024 07:46:34 +0000
ROA not before: Wed 17 Jul 2024 07:46:31 +0000
ROA not after: Sat 27 Jul 2024 07:46:31 +0000
asID: 22773
IP address blocks: 156.238.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40192 (0x9d00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 07:46:31 2024 GMT
Not After : Jul 27 07:46:31 2024 GMT
Subject: CN=669776da-6092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5d:1a:04:51:8d:75:07:ca:8a:34:68:a9:61:
be:f5:13:f9:17:f5:5f:67:90:a5:ca:e6:2d:61:9d:
bc:1e:fe:cc:82:d7:06:8c:d3:37:72:82:a4:dd:0f:
ce:f6:86:61:3b:92:0e:25:55:17:c6:e1:85:13:fb:
c8:ea:56:f2:a6:9b:f2:7e:0e:05:c0:23:a4:a8:e9:
3d:f8:b4:79:21:1e:b3:79:19:dd:ee:9a:9c:91:31:
5e:12:42:16:c5:c9:51:83:fa:37:e0:51:ae:a4:a3:
11:8d:7e:12:06:74:90:99:e3:6d:1c:af:6b:55:3a:
17:e5:69:53:eb:44:b6:33:10:c4:58:1c:7a:56:bb:
54:94:bc:0a:5d:a1:ab:39:68:93:c2:a8:0a:98:23:
85:ce:77:d4:a5:ab:3b:86:7f:f6:8c:0a:99:6d:0e:
27:28:e1:ee:ed:5e:86:4f:12:69:64:69:49:c9:65:
17:df:59:fa:b6:c9:b2:87:13:b9:1b:23:eb:02:3e:
8d:3c:73:a9:82:5a:39:91:a4:87:07:ce:d4:c2:35:
a0:39:7f:8b:2b:76:11:1f:4f:a3:7f:d8:3e:cd:8c:
aa:fe:2b:48:81:6a:67:4a:99:ff:b0:7f:62:a1:b2:
97:95:eb:55:c4:03:c3:bc:0b:67:27:cd:19:de:38:
34:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:23:D9:8D:3D:E2:79:2F:50:DB:D3:DD:44:C9:CE:D8:1B:B4:74:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B068187A441011EF8EB96AA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.13.0/24
Signature Algorithm: sha256WithRSAEncryption
57:86:db:bb:0f:79:d5:27:71:96:3e:30:90:04:63:1e:d0:6d:
5c:cd:a0:40:0d:05:96:34:b5:b8:36:df:01:88:4e:2e:62:0b:
cd:36:be:06:fc:d4:d9:ed:28:f3:75:ce:e0:02:0d:69:5d:7d:
b1:f4:84:b1:4d:96:f7:3a:a9:ca:87:6b:ee:dc:2b:9c:82:ed:
b4:9a:06:1e:06:b9:69:8e:99:af:67:81:2e:3d:9e:75:db:a6:
d4:a0:6c:3c:aa:7f:07:86:5d:36:c0:b4:dc:73:fb:9c:8a:2b:
38:2c:4a:7b:39:f6:73:82:10:a2:c6:2d:bc:a4:8b:bf:91:78:
e3:04:7d:7a:37:43:6b:6c:f0:6f:34:df:83:01:68:3c:ed:1a:
7f:54:1d:16:42:26:d3:b3:ef:61:23:48:d7:6c:8e:b4:ba:34:
74:33:46:bc:68:57:93:ad:ea:d5:80:7b:ee:ed:f9:80:86:a5:
84:97:3a:d8:ac:ed:d5:2f:da:0c:1b:ec:c3:84:da:77:d4:1e:
cd:6f:86:79:20:8e:a0:1a:88:c8:9c:d4:3d:65:f6:0f:be:84:
0d:2f:14:05:44:41:f9:de:e3:3f:6a:0e:83:b7:2d:4a:c6:cb:
7c:8a:68:e6:c2:39:6d:5c:71:b8:13:b9:ff:1c:24:1b:ac:b7:
d6:bd:03:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:03:27 2024 by rpki-client on console-ams.rpki-client.org