Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D183C582134F11EF8971F54C017001B1.roa
File: D183C582134F11EF8971F54C017001B1.roa (raw, json)
Hash identifier: NBI3Gh0tzfMqRsNAMdqbGzwBmZKxxt5RWhbCf6+TcFs=
Subject key identifier: 16:19:AE:D5:FB:F9:01:72:59:E9:03:6F:75:D6:FD:12:61:47:DA:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8A8C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D183C582134F11EF8971F54C017001B1.roa
Signing time: Thu 16 May 2024 06:45:01 +0000
ROA not before: Thu 16 May 2024 06:44:57 +0000
ROA not after: Fri 31 May 2024 06:44:57 +0000
asID: 44559
IP address blocks: 156.233.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35468 (0x8a8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 16 06:44:57 2024 GMT
Not After : May 31 06:44:57 2024 GMT
Subject: CN=6645ab6d-c101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:0e:75:6a:24:2d:c6:54:6a:6d:48:5d:a0:
d6:e1:35:e4:dc:08:29:d1:06:23:7e:3f:88:7f:c2:
6b:62:00:55:b3:3f:2f:75:d5:df:54:90:cd:49:62:
da:b2:fd:15:5b:82:29:37:d1:40:cb:ab:8a:6b:87:
e5:ff:8a:a7:30:dd:a1:2b:97:98:b2:e9:3f:4e:a1:
5f:f5:6c:b3:70:4b:0b:35:07:15:e6:9e:f5:c8:f7:
b4:a3:5f:70:fe:fe:4b:c3:6b:1e:c5:9f:35:02:f0:
aa:d2:92:a3:19:85:22:96:88:91:de:c0:74:28:5c:
b8:d5:89:31:a2:ea:03:af:17:1a:6c:92:4f:93:62:
64:a5:6d:f5:68:9f:72:38:90:a1:2d:92:98:88:49:
74:23:b5:ce:42:0b:69:80:ea:a9:31:18:af:ea:97:
63:ab:b2:8b:3a:03:80:89:b7:ac:ea:00:87:d4:35:
ec:d9:ac:71:8f:8c:be:ea:ba:df:71:2b:f8:3a:4e:
18:28:13:16:70:f7:bd:97:d9:54:59:4b:50:aa:80:
25:9e:ef:15:fa:82:a1:8a:26:21:d8:55:62:d5:b2:
85:d4:01:cd:ff:b2:82:ef:a1:6d:e2:02:f0:71:55:
6a:ce:3d:02:02:bf:02:f5:7f:0a:dd:e7:6d:9f:18:
13:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:19:AE:D5:FB:F9:01:72:59:E9:03:6F:75:D6:FD:12:61:47:DA:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D183C582134F11EF8971F54C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.32.0/19
Signature Algorithm: sha256WithRSAEncryption
32:ef:9d:67:8c:0d:d2:0d:99:2d:50:fb:72:95:ca:01:e6:ef:
8e:81:42:b9:18:59:9e:93:0d:55:14:f0:9d:ce:20:f7:23:64:
d6:da:4f:d0:6f:61:99:6a:65:8a:1c:3f:47:40:ff:bb:ba:b7:
ea:04:8e:0a:9a:33:75:4e:25:e8:ea:a0:a5:53:f6:31:8d:02:
62:38:62:2d:63:fa:aa:95:b4:4b:7b:ac:1e:79:bf:ac:9d:2d:
47:97:07:48:06:af:b8:36:65:c3:3f:77:c0:f7:10:c2:f8:b1:
ea:54:5e:c0:46:93:25:cf:45:82:41:c5:74:80:4a:76:8c:6a:
34:2c:5a:ea:ca:6d:6e:e7:e1:fe:90:7e:5e:bf:b6:d9:4b:d7:
cb:e5:7f:34:2f:f2:d2:0c:12:c2:51:70:db:0b:52:38:e0:63:
de:6e:f7:62:d5:bb:6a:63:2f:d2:1a:6a:2c:fd:7a:ad:f3:80:
c4:00:81:09:f5:bc:32:99:fa:71:b0:b4:2b:9f:3d:31:97:08:
dd:54:e4:c0:91:73:07:5d:ad:f3:4b:86:91:34:d1:91:ed:bc:
97:de:7a:45:02:ad:39:3a:a4:3e:36:e0:c5:ec:9d:80:c1:de:
20:03:56:7d:1f:19:5a:67:a1:d5:ff:df:67:ed:db:d1:fd:15:
d6:85:5d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:14:53 2024 by rpki-client on console-fra.rpki-client.org