Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1033F6E488311EC8B031731D8A014CE.roa
File: D1033F6E488311EC8B031731D8A014CE.roa (raw, json)
Hash identifier: QirJlwtC4A5eUmJUdPk1XMRUBvTiI+MtMjD4osfQtXQ=
Subject key identifier: 25:54:68:8F:DC:20:54:89:29:73:8B:22:00:BE:6F:28:C7:4B:03:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0CCA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1033F6E488311EC8B031731D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:25:53 +0000
ROA not before: Fri 19 Nov 2021 15:25:48 +0000
ROA not after: Sat 19 Nov 2022 15:25:48 +0000
asID: 139879
IP address blocks: 156.249.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3274 (0xcca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 15:25:48 2021 GMT
Not After : Nov 19 15:25:48 2022 GMT
Subject: CN=61967081-edaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:fc:ba:50:02:e0:fe:f3:d6:79:1a:d4:87:
35:05:3d:f9:e0:33:3a:ae:45:0b:5e:14:b9:fd:46:
8d:0e:78:68:5a:95:b2:a7:80:43:78:2b:24:46:27:
c9:03:c1:ad:17:ff:54:e8:80:42:21:f7:7c:73:e1:
28:16:b0:b5:49:0f:8a:d7:bd:e1:bf:32:ae:a9:f0:
dd:d2:4c:c3:9d:35:d2:15:bc:cb:00:43:2c:18:ce:
77:36:7d:d0:e6:69:40:ff:ea:ff:ea:17:03:c3:ef:
d4:7a:6b:27:90:88:78:37:5c:30:06:4e:a1:92:b9:
e0:a0:35:5f:4a:6d:d6:02:5b:eb:9a:e1:b4:93:e3:
1d:0c:77:5b:b5:c9:57:d3:1f:12:48:79:a1:bd:73:
d7:1d:7b:3f:ca:19:71:3a:a8:fb:9c:69:d6:f5:4a:
fa:3a:73:96:34:7b:1c:e9:65:da:22:0f:ad:ef:62:
bc:b9:2b:a9:28:75:75:29:00:57:c7:0d:d2:14:7d:
2e:b8:57:e3:7d:87:ff:a8:23:0a:17:1a:9c:f0:da:
06:ba:38:ec:9a:0f:dc:84:27:3f:73:a4:4f:62:f5:
7d:7d:02:92:5f:1e:a0:10:76:32:35:42:8d:31:06:
f4:60:6f:25:c5:69:a0:bd:12:91:95:2b:72:1b:1c:
85:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:54:68:8F:DC:20:54:89:29:73:8B:22:00:BE:6F:28:C7:4B:03:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1033F6E488311EC8B031731D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.133.0/24
Signature Algorithm: sha256WithRSAEncryption
11:21:df:78:56:4e:73:0b:01:b7:e0:88:34:f9:ce:b3:2c:a9:
a6:b8:1a:80:a9:66:fd:ac:a9:60:34:15:13:3d:5b:77:f0:ad:
c6:4b:c3:31:05:1e:1a:11:fc:a9:0c:91:3f:0c:a2:10:8c:2a:
50:7d:d9:53:9c:ca:f1:cf:e7:f7:a2:9b:87:fe:a4:53:33:64:
21:f2:16:9b:ae:f8:f7:7a:c6:a5:54:f6:4e:d1:b7:69:d0:2a:
72:c5:59:1b:a3:38:97:d8:8f:38:88:59:29:36:60:6b:9c:b3:
47:97:71:c1:f3:ca:20:45:85:ca:11:d8:e7:33:aa:6d:91:f0:
9b:91:0a:92:7e:2c:99:63:43:d4:e8:7a:d0:44:fd:f2:80:c0:
94:3f:61:c4:f5:19:0c:bb:b1:3e:51:88:ee:6e:06:c7:9f:13:
0c:31:a5:64:97:aa:45:2d:25:25:4b:c2:33:43:3a:2a:15:43:
bb:f5:c5:03:00:7d:ba:89:a4:2a:00:c7:c3:7a:23:3c:04:15:
bc:20:79:e9:40:2f:19:c6:e5:3f:87:8b:f6:bb:b9:c9:36:af:
89:86:42:19:ea:e5:c4:39:09:e0:1c:6a:1f:36:8a:4a:e9:6d:
16:9a:34:53:3e:12:bc:68:b7:aa:83:47:55:22:fc:0b:cc:97:
f4:b0:47:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:27 2023 by rpki-client on console-ams.rpki-client.org