Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C307814C4A6811EFB19EE447762E951A.roa
File: C307814C4A6811EFB19EE447762E951A.roa (raw, json)
Hash identifier: 5aVj/Gt/zT7AsVG6UrlHZp7BlnWwbjwT6QBnfImhdTk=
Subject key identifier: 6B:36:EA:EE:2E:27:7D:72:15:39:1F:C6:15:0B:6F:A2:A1:91:71:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A00F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C307814C4A6811EFB19EE447762E951A.roa
Signing time: Thu 25 Jul 2024 09:32:08 +0000
ROA not before: Thu 25 Jul 2024 09:32:05 +0000
ROA not after: Sat 03 Aug 2024 09:32:05 +0000
asID: 5065
IP address blocks: 156.233.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40975 (0xa00f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 09:32:05 2024 GMT
Not After : Aug 3 09:32:05 2024 GMT
Subject: CN=66a21b98-6843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a3:60:ed:ad:25:ee:5e:30:80:6c:ed:b5:ec:
cb:6a:c0:7c:22:7d:aa:ce:ea:1e:e7:3d:c8:ee:f1:
ba:a2:f2:23:9b:f0:09:4c:22:81:2f:c4:40:6a:8e:
70:e5:2c:60:13:57:60:21:af:83:43:da:b7:60:97:
cc:06:88:5d:5b:15:30:d6:e7:eb:45:af:3e:f5:e6:
0e:5b:5f:86:9c:b8:d8:e7:7c:14:e6:b7:e6:9c:d8:
a3:66:0e:11:85:76:78:27:1e:34:ac:8c:45:69:d7:
71:77:75:c4:ba:07:c7:6b:78:98:28:b0:f8:b2:5d:
93:96:36:54:05:73:46:de:c6:bb:34:16:f5:cf:82:
b6:db:35:a9:b2:b4:8f:cd:25:9f:fd:55:59:a1:95:
f6:04:ca:1a:b1:dc:32:59:b8:97:73:0b:33:91:48:
f3:33:26:b3:b2:a9:42:cf:58:74:36:c5:5e:76:db:
5a:00:b2:aa:af:49:9d:2c:d4:8b:9d:b5:c1:aa:f3:
55:40:0f:7e:c1:a3:67:3c:b2:2a:d7:01:4c:8e:6d:
cd:dd:47:a3:7f:76:55:ae:8e:e5:66:47:d8:7b:dd:
5f:36:b3:1e:79:75:c0:c5:94:d5:d8:ce:38:d7:78:
b5:ba:28:43:fe:a6:91:06:bd:16:fb:05:ce:b7:34:
6c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:36:EA:EE:2E:27:7D:72:15:39:1F:C6:15:0B:6F:A2:A1:91:71:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C307814C4A6811EFB19EE447762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.22.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:e4:15:5c:b0:29:c7:0b:00:1d:a4:0c:19:c9:8b:27:80:37:
98:81:8d:47:ef:b2:6e:66:f0:d9:d8:94:06:f9:e2:9d:07:ba:
75:7d:eb:03:cf:57:4f:ba:93:6d:e0:0b:5f:c9:50:09:4f:04:
11:1d:64:4f:f6:7d:e7:7e:d7:c4:0c:f9:b5:7d:33:47:c1:57:
ea:d0:f6:ef:92:a3:48:6e:26:d7:78:dd:ba:74:2d:bf:06:c7:
41:5f:7d:44:56:b7:ee:f1:2b:75:31:d1:67:49:0d:d1:06:84:
61:b0:32:fe:93:73:5f:80:c6:bd:58:99:93:6b:5a:28:f6:82:
c3:11:d5:61:4a:b3:0d:ca:b4:18:ff:55:de:f7:f7:41:e8:5e:
0c:b8:22:94:ec:4b:7b:9c:59:d3:b6:a1:19:8f:ff:d9:91:19:
ae:7b:ef:75:b1:f5:f3:fe:50:a9:34:b3:2a:44:b1:14:12:b8:
f5:d8:46:36:bd:7a:b3:37:b8:bc:d1:e9:59:66:bb:f3:96:fc:
8a:24:35:bf:65:1b:bf:2f:84:7f:7f:1c:16:8d:82:a4:94:45:
f5:97:1b:da:95:a2:3c:e7:e3:03:f8:55:e3:73:d7:38:85:d3:
73:3d:c3:2f:9d:d0:14:b4:0e:95:7e:ce:71:d8:f4:9e:4f:7b:
ea:60:f2:f8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAKAPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI1MDkzMjA1WhcNMjQwODAzMDkzMjA1WjAYMRYw
FAYDVQQDEw02NmEyMWI5OC02ODQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3qNg7a0l7l4wgGzttezLasB8In2qzuoe5z3I7vG6ovIjm/AJTCKBL8RA
ao5w5SxgE1dgIa+DQ9q3YJfMBohdWxUw1ufrRa8+9eYOW1+GnLjY53wU5rfmnNij
Zg4RhXZ4Jx40rIxFaddxd3XEugfHa3iYKLD4sl2TljZUBXNG3sa7NBb1z4K22zWp
srSPzSWf/VVZoZX2BMoasdwyWbiXcwszkUjzMyazsqlCz1h0NsVedttaALKqr0md
LNSLnbXBqvNVQA9+waNnPLIq1wFMjm3N3Uejf3ZVro7lZkfYe91fNrMeeXXAxZTV
2M4413i1uihD/qaRBr0W+wXOtzRsWwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGs2
6u4uJ31yFTkfxhULb6KhkXFCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMzA3ODE0QzRBNjgxMUVGQjE5RUU0NDc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOkWMA0GCSqGSIb3DQEBCwUA
A4IBAQAq5BVcsCnHCwAdpAwZyYsngDeYgY1H77JuZvDZ2JQG+eKdB7p1fesDz1dP
upNt4AtfyVAJTwQRHWRP9n3nftfEDPm1fTNHwVfq0PbvkqNIbibXeN26dC2/BsdB
X31EVrfu8St1MdFnSQ3RBoRhsDL+k3NfgMa9WJmTa1oo9oLDEdVhSrMNyrQY/1Xe
9/dB6F4MuCKU7Et7nFnTtqEZj//ZkRmue+91sfXz/lCpNLMqRLEUErj12EY2vXqz
N7i80elZZrvzlvyKJDW/ZRu/L4R/fxwWjYKklEX1lxvalaI85+MD+FXjc9c4hdNz
PcMvndAUtA6Vfs5x2PSeT3vqYPL4
-----END CERTIFICATE-----
Generated at Sun Aug 4 03:57:24 2024 by rpki-client on console-fra.rpki-client.org