Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8554304428711EFA2B0056E762E951A.roa
File: F8554304428711EFA2B0056E762E951A.roa (raw, json)
Hash identifier: potW/B9HIZsbV3fF0QwNiaQ4PjtiGKgsZWHmeKNM04I=
Subject key identifier: 02:52:E6:1C:E9:5B:FB:1E:F0:BC:92:A6:32:A3:55:1A:B6:E9:65:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9C90
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8554304428711EFA2B0056E762E951A.roa
Signing time: Mon 15 Jul 2024 08:55:23 +0000
ROA not before: Mon 15 Jul 2024 08:55:19 +0000
ROA not after: Mon 19 Aug 2024 08:55:19 +0000
asID: 23470
IP address blocks: 156.252.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40080 (0x9c90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 15 08:55:19 2024 GMT
Not After : Aug 19 08:55:19 2024 GMT
Subject: CN=6694e3fb-be49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ff:9e:6f:62:8d:89:c0:12:c2:92:fe:83:d9:
b8:78:47:ca:00:db:28:a0:df:a0:33:f8:51:6e:ff:
f7:79:5c:34:c8:18:1d:f4:96:04:1c:1c:b9:95:3d:
a9:12:28:d8:7c:d2:79:7b:36:d9:ee:54:9d:ff:3c:
a3:f4:88:fa:24:8e:63:68:a0:44:51:c3:03:5c:12:
bf:aa:3b:65:15:fe:7a:e4:83:ad:30:b5:50:6c:f8:
b4:3c:76:6e:83:6e:be:9f:b7:6d:4e:b2:a0:96:7c:
8f:15:d9:3c:9b:ff:29:99:07:1b:23:be:d7:d9:c4:
c4:fd:8f:8a:70:a1:61:63:6c:4b:8a:ae:71:ac:68:
74:d1:26:fc:ca:ee:2b:20:6e:19:13:b7:9d:3c:d3:
1f:fd:38:f1:1a:ab:fd:aa:16:16:36:4c:84:18:de:
5b:56:cd:12:e1:a8:14:a0:85:e7:b8:a9:1f:61:54:
95:d3:2f:59:73:27:5d:23:27:f8:85:a6:60:9d:6c:
c3:29:f5:6e:5a:41:c8:43:92:c9:88:6c:18:10:44:
89:a3:de:e0:73:42:93:60:d0:39:02:f4:a9:3d:26:
aa:68:b4:c2:71:16:61:4e:6a:20:6d:5f:08:16:16:
63:b4:d5:33:df:58:84:2d:53:f7:e0:0f:22:c6:ea:
2f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:52:E6:1C:E9:5B:FB:1E:F0:BC:92:A6:32:A3:55:1A:B6:E9:65:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8554304428711EFA2B0056E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.0.0/24
Signature Algorithm: sha256WithRSAEncryption
67:9b:6f:ce:67:78:8a:71:2f:ec:20:c5:c2:27:04:60:f0:0c:
9f:1c:46:e1:e3:7d:99:64:fb:55:76:c6:a5:35:1a:3c:4c:b7:
14:3a:aa:7b:72:78:00:06:65:82:20:34:73:50:58:a7:b3:ac:
da:07:5c:ca:1f:96:7d:e5:3b:9a:db:25:b2:48:cc:61:79:22:
38:91:3e:d0:75:c6:04:12:86:38:a7:64:8a:50:af:75:3c:a4:
c4:bc:bb:0e:4b:77:3a:80:d5:eb:fe:d8:70:cc:12:44:38:66:
3a:ff:6c:e8:0e:97:da:d2:0a:10:4a:cb:2d:9d:67:10:0b:a7:
3f:da:d4:9c:6c:ed:ca:e2:0d:40:8f:73:68:88:30:38:be:bb:
8f:a0:59:97:b9:5a:f7:73:00:d0:89:4b:67:ce:76:44:34:a3:
d5:06:33:54:db:c7:c4:27:9e:c8:6a:1a:6a:26:6d:55:fa:2e:
a2:6f:ec:0a:78:c8:2a:13:70:4b:10:12:b7:38:3a:f2:ee:b8:
15:86:e3:4c:39:e9:01:cc:d3:bb:ff:5b:ca:7a:f6:0f:87:0f:
e2:27:0d:83:a8:73:55:0e:15:e3:f1:d1:70:c5:ef:75:ce:31:
0a:04:df:48:cf:d1:cf:93:16:cf:7d:74:38:89:68:ab:9f:8d:
41:49:f6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 11:23:48 2024 by rpki-client on console-ams.rpki-client.org