Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40BC5982089211EFA94E3E40017001B1.roa
File: 40BC5982089211EFA94E3E40017001B1.roa (raw, json)
Hash identifier: rukRySzXc+VPcPrrDet/oBZ3djIFjeQYvElN+H8qAbY=
Subject key identifier: EF:1F:C5:EA:40:DD:B8:7C:9A:4E:95:9E:37:BC:D9:C4:02:0F:F4:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 876C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40BC5982089211EFA94E3E40017001B1.roa
Signing time: Thu 02 May 2024 14:42:52 +0000
ROA not before: Thu 02 May 2024 14:42:48 +0000
ROA not after: Sat 11 May 2024 14:42:48 +0000
asID: 39600
IP address blocks: 156.232.80.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34668 (0x876c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 14:42:48 2024 GMT
Not After : May 11 14:42:48 2024 GMT
Subject: CN=6633a66b-27e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:f6:c7:30:90:39:f6:4f:dd:aa:22:ef:0e:
49:a3:ea:fa:28:28:a1:f9:06:81:a4:21:4a:18:5f:
7f:f7:f7:76:0a:4a:64:c5:bf:1a:6a:17:62:32:31:
1b:29:c9:84:f9:9d:b0:50:dd:a3:63:0d:c9:35:d5:
42:8e:a3:09:7a:12:05:5b:cc:ec:73:53:16:7f:ef:
6e:b6:50:d0:e4:a7:08:24:b4:21:6a:32:5b:a0:2d:
4e:d9:29:d1:02:e8:c7:66:09:4f:0e:66:9d:bf:24:
d7:09:9f:5f:7c:aa:f9:fc:82:45:0d:04:f5:e3:3b:
47:ab:dd:14:08:6e:17:42:06:58:3b:47:ad:f9:fe:
65:d4:7a:ce:ea:08:29:06:da:fa:31:ed:ff:fe:70:
5e:01:15:ed:79:dd:1e:9c:c2:b9:d0:65:95:dc:22:
c1:b0:49:be:1c:18:58:60:17:30:cf:2f:cd:5f:96:
68:5f:8c:f0:15:ee:62:75:d8:34:c8:03:61:7d:34:
39:28:6b:dd:b4:2e:4f:2d:9f:b5:94:8f:bb:14:f8:
ec:00:49:3b:ed:19:01:1d:70:5a:4c:89:82:78:d3:
f8:5c:e4:df:4a:26:9f:1a:db:b8:27:a8:af:1b:55:
46:94:81:3f:93:d6:18:0d:08:bc:90:d9:71:3e:31:
04:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1F:C5:EA:40:DD:B8:7C:9A:4E:95:9E:37:BC:D9:C4:02:0F:F4:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40BC5982089211EFA94E3E40017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.80.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:82:9e:09:71:2b:87:10:51:ed:1e:7d:31:b7:5b:22:c1:c9:
a2:31:7f:30:bf:d1:5b:28:30:90:15:d2:e1:15:85:92:6d:46:
2b:8f:e1:26:f8:e8:3f:24:e9:cf:d7:61:b1:5a:72:d8:81:d6:
d5:88:f8:ab:b7:81:4f:72:ab:d6:04:bd:26:50:fb:b3:48:74:
76:c4:dc:2b:d3:a0:af:a4:25:62:d0:17:77:74:7d:39:5b:1e:
ab:1c:c4:82:99:56:0c:03:68:02:6a:1f:43:ba:de:2b:3e:24:
ce:f5:33:cb:9e:4f:0f:c0:8a:70:5b:e0:01:e0:4b:a7:ce:56:
e3:94:d3:01:f5:45:43:27:c2:60:2f:93:78:a7:8c:b4:42:35:
6d:76:03:f1:fc:bf:02:69:03:b7:d3:6b:b6:ea:6a:1d:4e:8d:
8f:34:15:fa:0d:3b:f9:df:e8:8c:1c:e3:c1:68:e4:ca:7a:e6:
3d:f9:b0:f9:3c:77:5b:30:51:de:dc:bf:e3:36:dc:73:2e:ab:
47:87:2b:95:90:37:cd:89:8b:f8:85:82:ef:90:34:a5:99:27:
f2:54:1f:36:8a:ec:4f:30:01:10:0c:02:5a:75:f0:39:26:11:
dc:9f:36:6b:cb:14:60:91:4d:77:9d:11:c2:d5:ed:d5:9e:9b:
8a:60:5e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:49 2024 by rpki-client on console-fra.rpki-client.org