Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C58587BA488711EC95E3D239D8A014CE.roa
File: C58587BA488711EC95E3D239D8A014CE.roa (raw, json)
Hash identifier: lFT6NeLcbWtANN3QuvTfu0xLh+cScd8HFND6HI50fGU=
Subject key identifier: 70:49:39:08:22:6C:F9:9A:7B:91:E6:1E:4C:FC:E9:5F:57:C0:6C:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0DAA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C58587BA488711EC95E3D239D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:54:11 +0000
ROA not before: Fri 19 Nov 2021 15:54:08 +0000
ROA not after: Sat 19 Nov 2022 15:54:08 +0000
asID: 139879
IP address blocks: 156.249.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3498 (0xdaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:54:08 2021 GMT
Not After : Nov 19 15:54:08 2022 GMT
Subject: CN=61967723-59cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:10:56:34:7c:d0:24:80:c4:06:ee:db:0c:87:
5a:d4:ca:de:09:39:90:20:a8:bf:0a:46:9f:37:75:
80:7c:ef:9f:16:60:c4:e9:81:83:19:fb:2c:5b:0e:
12:6a:d9:9f:f2:5f:d5:44:c2:49:8d:f7:db:21:bc:
8b:11:45:6e:dd:67:b1:0a:2a:40:df:df:ae:8d:c2:
30:90:49:ad:16:bd:41:ef:77:ab:b7:ab:79:e4:0c:
60:d8:7f:cb:f8:1e:2b:51:6f:3a:48:3e:df:7a:41:
10:a1:58:8c:fc:e9:dd:3a:03:23:2b:43:b3:de:c2:
c6:f8:cf:50:6a:dd:e1:73:4f:89:63:56:10:65:e3:
0b:5b:3e:2e:80:8a:d2:3c:ae:7a:4f:f6:7c:24:85:
65:27:f5:da:d6:77:b7:7e:bc:4b:44:8b:89:21:31:
47:2c:e2:03:58:db:57:5d:7a:50:fc:cd:d7:fc:8d:
c0:17:32:57:b3:59:33:e2:7e:e1:b0:62:e6:75:d7:
1d:cc:8a:97:9b:3a:b0:61:7f:ca:13:53:fb:97:ca:
b7:5e:40:8b:f8:3f:de:97:0b:58:9b:38:6b:92:c5:
fa:e9:24:c9:fa:66:aa:2c:0e:28:bd:ad:3a:31:0c:
67:c8:7a:30:fa:4f:ef:e8:a2:49:dd:37:c0:46:f9:
80:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:49:39:08:22:6C:F9:9A:7B:91:E6:1E:4C:FC:E9:5F:57:C0:6C:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C58587BA488711EC95E3D239D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.176.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:15:41:ba:25:7e:10:4e:a0:c3:9d:b8:2a:b5:0b:36:e2:21:
40:6a:96:67:c5:c7:06:12:cc:ec:c1:b8:80:d4:e1:29:3d:ab:
ec:4b:0a:7d:5d:42:47:aa:fc:6b:3f:c2:e5:3e:e5:0d:02:bc:
3c:a9:85:05:b0:c0:7b:f9:0d:d0:71:f0:56:51:9b:a8:60:5e:
9c:3f:27:b4:f7:32:c4:1b:45:6c:75:c4:ae:e3:ca:af:27:87:
6b:a1:41:84:01:8e:46:d2:79:37:79:60:46:43:d4:06:5e:97:
2c:a4:4d:ac:ea:2d:83:f0:35:76:be:bc:91:d1:3d:24:a9:56:
67:d4:66:3a:2f:86:0e:ee:d9:33:94:98:b7:1b:c5:85:8e:e7:
f5:71:f2:9e:4f:c3:7d:c8:56:af:05:b4:0e:ab:ec:90:df:18:
bf:d5:bc:4f:db:6e:78:66:c3:12:dc:05:12:0a:52:f9:28:36:
07:1d:cb:27:85:d9:0b:f4:67:61:35:fc:38:6a:30:5a:95:67:
85:89:02:2c:1c:88:3a:59:6b:b8:89:a3:b3:88:82:ed:bf:e7:
42:c2:49:3f:09:34:09:a8:55:7b:b9:29:4f:77:6a:b7:ad:ef:
44:e9:0e:28:c7:a5:f7:94:ba:a6:ac:06:da:a4:51:e5:d4:5a:
03:a2:fb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-fra.rpki-client.org