Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE535F52353011EF9EDAE298762E951A.roa
File: FE535F52353011EF9EDAE298762E951A.roa (raw, json)
Hash identifier: FZKoTlI2xvNZI8eJkLe6kzifaopK/kVeuIp7AUjivhc=
Subject key identifier: 70:62:6A:14:D6:12:B3:DD:76:AB:91:CA:A8:6B:A6:EF:04:AE:40:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 95D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE535F52353011EF9EDAE298762E951A.roa
Signing time: Fri 28 Jun 2024 09:30:02 +0000
ROA not before: Fri 28 Jun 2024 09:29:58 +0000
ROA not after: Tue 27 Aug 2024 09:29:58 +0000
asID: 399077
IP address blocks: 156.251.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38359 (0x95d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 09:29:58 2024 GMT
Not After : Aug 27 09:29:58 2024 GMT
Subject: CN=667e8299-6d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:0f:8b:9a:b1:84:5f:93:23:65:db:da:1e:
08:e4:6d:0e:67:e3:5a:68:a2:28:07:c2:18:d4:1d:
15:01:b6:6c:f7:d9:66:4f:97:22:87:be:1e:b3:d7:
1f:a9:ff:20:df:4c:e6:50:c1:02:b1:00:c6:96:e9:
18:32:70:be:b6:ff:5b:99:88:15:3c:2f:f2:7c:4d:
b0:dc:6d:a6:55:4b:91:99:94:52:0c:b5:2e:d1:9a:
c1:b1:ac:2f:cd:90:7a:e5:01:14:e7:e6:0d:95:59:
1f:76:36:a4:88:15:46:5a:99:b1:53:d2:44:76:7f:
3c:c4:68:c7:d1:b2:3e:72:32:12:b3:89:83:be:0c:
99:2a:13:34:6e:b2:55:2e:7c:1e:9c:a5:c4:6e:ea:
c0:b7:cb:11:2b:72:c4:3d:d3:d4:f1:3d:78:c5:3e:
be:e6:4a:98:a6:d3:b7:8e:c0:f9:71:79:d2:43:b2:
a3:c3:e7:40:90:42:e2:99:d9:9b:48:20:65:c2:d0:
ee:1e:e8:1b:ae:5d:00:00:7b:4b:29:ab:63:86:aa:
49:99:fd:70:0f:19:0a:2b:d7:f1:12:82:31:e4:45:
49:c7:ae:43:9f:1a:37:e9:ea:33:42:75:75:9d:f5:
4c:eb:01:45:7b:a3:2a:ef:86:cc:5f:af:d9:90:cd:
d9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:62:6A:14:D6:12:B3:DD:76:AB:91:CA:A8:6B:A6:EF:04:AE:40:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE535F52353011EF9EDAE298762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.59.0/24
Signature Algorithm: sha256WithRSAEncryption
71:96:b3:68:d3:5c:a3:6b:d9:2d:85:3c:c7:e3:93:a6:74:9b:
fa:db:09:84:3d:65:c7:be:f9:f9:be:71:c1:d1:0d:d4:ef:6f:
6e:aa:da:ad:93:13:3d:37:ea:11:31:ea:ff:11:ce:50:c4:b0:
ab:12:24:8b:95:8f:69:69:fa:aa:e2:3e:11:01:6a:e3:fd:ed:
19:a5:f5:35:fb:a9:c3:c7:af:e5:5a:99:66:91:00:05:bc:d3:
06:e4:55:77:be:2b:82:fa:63:f7:6c:a9:51:bf:d6:e5:80:cc:
f7:e5:43:d2:e5:cd:51:c9:2b:fa:68:67:81:47:4e:3d:81:82:
59:24:4a:cf:4d:25:5b:48:fc:22:6e:1c:cb:f6:a8:e7:24:4f:
a4:d0:c5:1a:a7:81:b3:73:b5:0e:c1:12:07:e6:73:ee:36:66:
d0:38:2e:9b:cf:2a:eb:d0:29:9b:1d:f4:2d:88:76:9b:38:21:
fd:72:d1:a8:8d:98:06:c6:4f:fd:77:36:dc:e3:b6:85:b9:49:
6f:a9:c7:a8:83:fd:2b:e9:21:d0:ee:dd:b0:b9:c5:83:74:c3:
44:eb:d1:3a:98:d3:bc:6b:e7:d9:12:eb:99:dc:b3:c5:f5:a5:
51:fc:37:11:07:e8:0d:70:1b:69:fd:59:e9:45:20:95:b3:41:
b4:56:11:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 13:22:42 2024 by rpki-client on console-ams.rpki-client.org