Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5A61676038B11EFB137F34D017001B1.roa
File: C5A61676038B11EFB137F34D017001B1.roa (raw, json)
Hash identifier: hri8GULSrgJsTXyZdwmZXf49asdVwZSoHkxwD5KNjyE=
Subject key identifier: 9C:34:6F:34:49:AD:59:50:FF:38:D1:75:E6:A0:AE:7B:13:00:43:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 85D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5A61676038B11EFB137F34D017001B1.roa
Signing time: Fri 26 Apr 2024 05:13:52 +0000
ROA not before: Fri 26 Apr 2024 05:13:49 +0000
ROA not after: Sun 05 May 2024 05:13:49 +0000
asID: 141883
IP address blocks: 156.246.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34264 (0x85d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 05:13:49 2024 GMT
Not After : May 5 05:13:49 2024 GMT
Subject: CN=662b3810-d6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:22:64:59:3b:4f:1f:91:8f:7a:b8:a5:d5:a3:
77:34:ac:ed:e9:dd:e2:54:f7:da:57:a1:d0:01:3b:
d0:e3:5e:d5:af:6e:c3:6a:20:28:ee:d7:35:40:b9:
31:40:81:c0:d8:c7:21:3a:7b:ba:9f:00:34:23:2d:
db:dc:00:e3:9d:2f:39:61:13:b9:0d:60:79:b9:e8:
3a:b7:7e:94:56:5f:60:3a:b0:f9:b6:05:23:af:52:
21:37:fd:1f:18:99:82:09:3c:62:fe:c0:8f:5b:4f:
6a:8d:91:b5:3e:01:3d:8f:10:4f:06:2a:f5:8a:b6:
0d:d8:de:41:01:8e:f7:27:43:ed:ef:f6:83:6c:23:
de:cd:fb:3f:b7:c3:61:c3:95:c8:c6:93:4a:1f:ac:
d8:59:42:d0:c0:30:50:fb:53:74:55:a5:47:80:4b:
5b:be:e0:e1:ff:c1:35:ef:6a:f5:2a:e7:d2:f4:0d:
7b:67:49:69:c6:ed:2d:2f:05:ec:ae:d1:fe:64:29:
46:29:35:69:df:ef:38:ad:b5:bf:7c:4d:fb:85:cc:
97:d7:ac:06:27:dd:1e:e8:c2:48:2b:4b:5b:7b:39:
31:af:03:2b:80:55:28:c0:b9:96:1b:1c:17:71:2a:
69:70:5e:27:f2:b3:9a:43:e4:86:96:26:1c:29:66:
3d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:34:6F:34:49:AD:59:50:FF:38:D1:75:E6:A0:AE:7B:13:00:43:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5A61676038B11EFB137F34D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.0.0/20
Signature Algorithm: sha256WithRSAEncryption
85:83:f2:cf:d1:6e:91:f6:6a:33:37:95:a4:66:bd:8d:26:85:
dd:37:56:09:02:a0:74:0e:ed:4d:73:74:ec:26:54:8c:af:84:
30:b8:06:d2:09:14:80:8b:e0:c1:2c:6e:ba:c7:7f:5a:6b:8c:
3a:bf:3c:2e:69:b3:ed:6d:ab:be:fe:57:da:f4:fc:ac:0c:26:
c2:31:7c:10:8b:46:7f:29:52:c1:fa:c1:b3:19:1d:c0:be:54:
1b:4c:e2:c9:f2:f9:b8:83:87:19:61:2b:00:9f:c9:fe:ef:c6:
71:7f:12:00:d2:b7:ca:97:e4:c2:11:d4:6a:0a:68:71:31:e0:
06:75:b8:2c:8e:64:80:0c:2e:3f:94:9b:6a:f9:d8:ff:1d:84:
61:fd:6a:15:4c:dd:e6:da:bd:2e:ea:69:98:7d:40:44:1e:7d:
a7:c0:e4:2d:1c:59:08:a4:09:be:c3:3c:43:e4:05:6d:9d:54:
82:68:74:98:6e:b8:b0:ad:e8:5d:f2:ea:69:33:8c:2d:83:19:
e7:1b:5b:b6:03:69:c7:3e:ce:38:6d:49:0b:bd:54:c9:8e:b0:
4e:a7:15:d9:19:16:2b:58:d5:98:67:5f:db:87:6b:20:01:ac:
2f:cd:78:84:ed:43:f5:c2:3e:82:2a:1c:eb:41:c7:a1:7a:43:
40:aa:87:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:18:25 2024 by rpki-client on console-ams.rpki-client.org