Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9571E86385B11EFB02953AD762E951A.roa
File: D9571E86385B11EFB02953AD762E951A.roa (raw, json)
Hash identifier: YHoA2yxnLdrDxiEQ5HdngC7PHk9bPusYvxvHFtdpGio=
Subject key identifier: 37:1C:3A:85:81:D6:7B:AC:8F:AD:35:D2:67:3F:75:EF:DC:5F:94:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9771
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9571E86385B11EFB02953AD762E951A.roa
Signing time: Tue 02 Jul 2024 10:14:21 +0000
ROA not before: Tue 02 Jul 2024 10:14:18 +0000
ROA not after: Wed 31 Jul 2024 10:14:18 +0000
asID: 174
IP address blocks: 156.236.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38769 (0x9771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 10:14:18 2024 GMT
Not After : Jul 31 10:14:18 2024 GMT
Subject: CN=6683d2fd-79dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:34:46:d4:99:dc:54:ff:8d:72:69:9f:2c:81:
e7:84:b9:33:0f:3d:b1:f3:5d:65:c7:f6:49:49:c2:
ca:5f:12:3b:f8:39:78:b3:4a:5f:50:4e:5b:52:e0:
55:a5:08:88:d5:16:23:0c:da:6c:ca:99:79:eb:01:
92:cd:cf:96:40:c8:e4:2e:d1:d8:a9:b1:df:1b:43:
df:50:b1:89:a1:ee:28:b0:65:07:2d:54:2e:d3:c0:
0f:da:aa:4a:a5:49:e0:09:a8:d5:de:10:78:23:58:
bd:2b:f1:92:92:a6:b8:a2:51:08:5c:ef:17:67:5b:
1f:55:9b:ae:b1:0f:2f:a4:2b:dd:93:6d:75:3f:89:
d0:1a:3f:dd:68:89:c0:e9:2e:6e:5a:e0:c1:5d:64:
d3:67:44:52:02:da:07:97:13:dd:7b:0e:51:e2:20:
54:5b:61:39:cf:64:d6:e0:43:7b:e1:36:91:a2:c8:
bf:2f:b6:f4:d8:52:fd:c8:47:56:3d:c6:c2:24:af:
4c:c1:62:b6:f1:ba:14:db:ec:5c:84:42:61:38:55:
7e:ca:55:b4:11:28:57:18:2b:d3:97:9b:8a:15:82:
a9:62:44:8b:ec:8f:f0:02:a1:42:50:17:52:17:a6:
1c:2f:29:08:14:04:f1:de:f7:33:1b:35:53:b5:5e:
be:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1C:3A:85:81:D6:7B:AC:8F:AD:35:D2:67:3F:75:EF:DC:5F:94:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9571E86385B11EFB02953AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.192.0/18
Signature Algorithm: sha256WithRSAEncryption
04:28:4e:7f:5d:49:2e:e3:b5:c2:22:4e:3e:fc:b2:54:cc:a1:
1f:8d:26:64:ee:f3:e2:96:8d:ea:cf:e6:aa:9f:12:69:19:c3:
d8:2a:a4:22:0c:3a:a7:79:23:53:c9:92:1a:c8:3c:34:91:9f:
9a:f0:26:61:96:5d:20:22:e9:46:d9:2b:78:35:ec:bc:87:0c:
70:ae:60:9a:53:5e:4a:a7:4f:cd:87:2f:07:70:d0:7f:bf:9f:
c1:a5:fd:8c:1e:0b:75:5b:d5:c5:ae:a5:19:99:75:a2:e0:6e:
f8:b1:e9:88:9e:1b:74:07:f5:0d:1e:fc:56:5c:02:aa:be:c3:
fe:a4:b9:2c:ab:ad:b3:d0:9e:1f:9e:9a:0a:ef:5c:04:54:5c:
75:df:9d:86:36:bb:9c:e4:cd:ea:09:17:47:f2:39:ea:99:f9:
64:b4:96:8e:fa:19:c0:ae:97:26:4f:4d:6f:90:ac:cb:38:cd:
10:7f:13:61:f4:b5:bd:ee:ec:b5:e7:de:4c:4e:50:58:d4:15:
80:fc:b4:2a:e5:2f:a8:9a:d4:e5:e3:70:75:47:ad:f7:79:a6:
ef:0c:38:62:6b:71:2e:02:47:18:40:08:5d:3c:20:da:c8:2b:
c1:b9:9c:6d:c9:56:00:63:b7:b2:e4:74:7e:4f:43:ee:de:ea:
9d:f0:86:08
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJdxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzAyMTAxNDE4WhcNMjQwNzMxMTAxNDE4WjAYMRYw
FAYDVQQDEw02NjgzZDJmZC03OWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6jRG1JncVP+NcmmfLIHnhLkzDz2x811lx/ZJScLKXxI7+Dl4s0pfUE5b
UuBVpQiI1RYjDNpsypl56wGSzc+WQMjkLtHYqbHfG0PfULGJoe4osGUHLVQu08AP
2qpKpUngCajV3hB4I1i9K/GSkqa4olEIXO8XZ1sfVZuusQ8vpCvdk211P4nQGj/d
aInA6S5uWuDBXWTTZ0RSAtoHlxPdew5R4iBUW2E5z2TW4EN74TaRosi/L7b02FL9
yEdWPcbCJK9MwWK28boU2+xchEJhOFV+ylW0EShXGCvTl5uKFYKpYkSL7I/wAqFC
UBdSF6YcLykIFATx3vczGzVTtV6+FwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDcc
OoWB1nusj6010mc/de/cX5TQMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EOTU3MUU4NjM4NUIxMUVGQjAyOTUzQUQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnOzAMA0GCSqGSIb3DQEBCwUA
A4IBAQAEKE5/XUku47XCIk4+/LJUzKEfjSZk7vPilo3qz+aqnxJpGcPYKqQiDDqn
eSNTyZIayDw0kZ+a8CZhll0gIulG2St4Ney8hwxwrmCaU15Kp0/Nhy8HcNB/v5/B
pf2MHgt1W9XFrqUZmXWi4G74semInht0B/UNHvxWXAKqvsP+pLksq62z0J4fnpoK
71wEVFx1352GNruc5M3qCRdH8jnqmflktJaO+hnArpcmT01vkKzLOM0QfxNh9LW9
7uy1595MTlBY1BWA/LQq5S+omtTl43B1R633eabvDDhia3EuAkcYQAhdPCDayCvB
uZxtyVYAY7ey5HR+T0Pu3uqd8IYI
-----END CERTIFICATE-----
Generated at Wed Jul 31 14:18:39 2024 by rpki-client on console-ams.rpki-client.org