Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4BD0642FD2311EEB596C609017001B1.roa
File: D4BD0642FD2311EEB596C609017001B1.roa (raw, json)
Hash identifier: mqVL5cvYDW1iFNzVUNmAyX1c8nA+GOYUaZHO3lV4kXI=
Subject key identifier: 82:F7:FD:D6:54:11:2B:78:0E:7B:B2:DC:7D:41:A3:4C:C9:8F:C7:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 82E5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4BD0642FD2311EEB596C609017001B1.roa
Signing time: Thu 18 Apr 2024 01:34:43 +0000
ROA not before: Thu 18 Apr 2024 01:34:39 +0000
ROA not after: Sun 28 Apr 2024 01:34:39 +0000
asID: 209242
IP address blocks: 156.239.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33509 (0x82e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 01:34:39 2024 GMT
Not After : Apr 28 01:34:39 2024 GMT
Subject: CN=662078b3-8039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:af:ec:6a:75:84:99:ab:75:72:be:fb:c6:5b:
bb:03:56:03:24:5b:8f:e7:18:08:13:76:93:95:a7:
3b:54:b7:7e:98:7e:18:f9:19:84:a8:3c:21:39:da:
a2:6e:bf:3c:e3:b3:9c:5a:b5:eb:a2:4f:a7:44:ab:
0e:a2:b4:9f:d4:a2:9c:25:16:21:d6:25:db:34:3c:
f5:9d:1a:b1:83:62:b7:4e:4d:ce:f6:e0:63:6a:8a:
52:3d:40:8c:94:9b:ad:9a:7f:8d:b2:98:af:de:2f:
b1:42:19:04:5e:50:4c:b2:a4:5c:e3:1b:72:bb:24:
b1:02:32:58:46:a5:aa:47:34:ac:84:d9:28:3e:37:
3e:20:94:4e:2e:c5:97:c2:2c:e9:2f:71:72:35:cc:
6a:6a:91:9c:d3:3d:3e:b2:cc:68:05:06:32:25:17:
0a:22:79:20:cb:78:b4:7c:0a:7c:23:d4:31:eb:48:
51:e8:9e:67:ca:7d:17:35:26:50:29:d4:5e:66:74:
91:5c:67:89:20:37:ba:6a:b9:a5:c6:6d:01:c4:78:
0d:ba:fa:c0:15:9f:83:87:76:4e:2a:27:e7:e5:69:
01:9f:a1:d4:7a:f9:45:bd:e9:df:24:19:0d:86:89:
b8:f7:41:82:17:34:ee:26:b3:9e:ee:8c:ca:bf:1d:
42:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F7:FD:D6:54:11:2B:78:0E:7B:B2:DC:7D:41:A3:4C:C9:8F:C7:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4BD0642FD2311EEB596C609017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.154.0/24
Signature Algorithm: sha256WithRSAEncryption
26:8f:b3:80:9b:a3:d8:5d:0b:fd:3f:51:20:39:1a:db:b8:c2:
16:09:11:f6:d5:48:21:57:52:bf:b9:d1:dd:33:37:e6:75:71:
0e:aa:4d:8d:46:24:c9:f6:4f:7e:7a:cf:30:39:0a:5b:a8:58:
ef:27:54:7f:cb:d5:f4:79:e7:73:2c:a5:d3:cf:29:a1:be:c4:
f7:ed:3b:3b:5d:35:d6:9d:fd:d3:a8:65:4d:6c:4c:84:50:02:
58:02:f9:21:93:69:2a:c6:8b:95:16:f1:3d:ac:31:22:a7:f4:
4a:df:59:f2:0f:e5:f2:e2:15:dd:90:c8:25:7b:b5:ac:c2:df:
0b:99:89:9b:31:bc:c1:fb:f5:41:35:94:a0:ef:25:de:f3:7f:
41:2b:a9:6f:87:75:16:98:66:6f:4a:16:f9:bb:f4:56:b7:72:
b9:2a:10:91:50:a9:4f:36:9e:28:08:6e:9a:c5:12:f7:38:d5:
41:a7:e3:7c:15:96:f9:1c:0f:cb:45:74:c3:54:cd:01:b3:70:
d3:d4:25:c1:02:e4:c0:02:1c:30:47:20:b4:82:e5:b6:41:5f:
bd:2c:9b:cf:e3:8c:b6:3e:41:1b:7f:1c:e7:cc:3c:60:bc:a9:
79:42:7f:0c:e3:b3:18:a1:26:43:4d:0c:c4:63:0c:e4:c1:fd:
85:8d:a0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:55:42 2024 by rpki-client on console-ams.rpki-client.org