Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1679CD02060E11EF9B0CE342017001B1.roa
File: 1679CD02060E11EF9B0CE342017001B1.roa (raw, json)
Hash identifier: zR0UtduyFd0YrS9/iCsum4TDg5JKCNgVNyobyx2wSVo=
Subject key identifier: CC:34:E3:95:A1:2A:9F:36:89:DE:C8:82:8C:30:14:D2:F3:5F:C5:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 86A6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1679CD02060E11EF9B0CE342017001B1.roa
Signing time: Mon 29 Apr 2024 09:51:45 +0000
ROA not before: Mon 29 Apr 2024 09:51:42 +0000
ROA not after: Wed 15 May 2024 09:51:42 +0000
asID: 5065
IP address blocks: 156.227.248.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34470 (0x86a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 09:51:42 2024 GMT
Not After : May 15 09:51:42 2024 GMT
Subject: CN=662f6db1-f488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0b:3c:e6:cb:7a:17:4b:e7:63:f1:35:90:c8:
e9:20:9a:04:74:0e:57:40:bf:61:98:67:b5:42:16:
0a:50:dc:89:1e:d5:36:1f:a4:12:84:57:05:02:9f:
84:40:32:cb:2f:9d:ee:91:ab:91:84:0c:48:ba:24:
c8:ca:97:e4:2d:b9:21:ab:45:bc:33:eb:a6:ae:73:
d8:4e:e6:bc:ba:74:aa:49:77:cb:8e:62:48:a1:d0:
25:03:98:89:7e:db:79:5d:65:6e:75:b6:33:6e:9a:
a7:dd:8f:58:7e:98:ad:a6:3d:38:79:79:00:09:5f:
80:a0:a7:47:cc:69:0a:5a:62:70:e5:57:3a:4e:4e:
61:4e:21:9a:a4:5d:77:dd:59:6d:1d:c9:0a:a0:85:
48:36:63:55:aa:85:9d:11:34:49:c8:f9:2e:b4:59:
45:bd:38:35:62:08:61:95:e1:09:f7:5f:0b:c6:65:
04:73:f0:cb:5c:ee:ff:97:e9:fa:61:5d:94:df:70:
b1:f3:3e:41:ef:70:7b:94:57:bf:a4:bb:ae:a8:9c:
56:34:98:64:5d:1d:31:80:90:1d:d2:f0:26:2a:6c:
41:0a:08:bd:5a:27:03:d3:4c:23:ce:31:16:3d:60:
4d:b8:9c:eb:61:db:9d:c2:58:de:cf:73:75:59:c4:
10:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:34:E3:95:A1:2A:9F:36:89:DE:C8:82:8C:30:14:D2:F3:5F:C5:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1679CD02060E11EF9B0CE342017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.248.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:60:3d:ef:16:46:fc:cc:28:e7:88:20:e9:04:0b:79:65:84:
53:8c:63:65:ec:cf:b2:69:1b:1c:03:9a:00:02:30:8f:48:60:
00:8b:ae:09:b2:d3:12:a9:9c:98:7d:3c:03:6c:70:ea:0d:12:
66:31:95:dd:ad:37:db:ae:f2:9d:60:51:46:66:95:93:ec:da:
1b:c0:d5:6f:6c:0b:1a:19:24:00:82:f0:61:7e:04:8b:88:f0:
7e:1f:6c:31:80:80:47:a8:b8:8c:f3:9d:e8:33:e9:89:b6:0f:
84:ac:27:09:d5:4b:7f:82:6a:e1:78:40:5c:85:e1:cc:01:05:
6a:67:3b:d3:39:e9:1a:0a:40:9d:71:63:ed:bd:c5:c7:8c:34:
de:8d:f6:23:18:ad:8c:50:e2:cc:e3:4d:2d:52:1e:cb:8b:b7:
7c:6d:98:f7:b7:65:bb:a6:0a:eb:d3:54:f3:25:df:db:a2:6c:
a5:21:e3:3d:71:0e:3e:47:40:f0:3c:2c:d5:f3:4d:c0:49:0c:
8e:a2:e2:07:d5:88:3e:92:dd:33:e3:95:8a:c0:36:eb:21:c8:
05:b0:c8:14:34:38:66:e8:50:1c:53:5c:fc:b7:45:12:bc:b1:
59:d1:86:16:8f:0c:18:fa:af:5c:6e:8e:be:9f:80:97:9f:eb:
cb:18:05:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 02:12:10 2024 by rpki-client on console-ams.rpki-client.org