Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/795C2910E46211EE91FB8E88775412E6.roa
File: 795C2910E46211EE91FB8E88775412E6.roa (raw, json)
Hash identifier: pCv+brdNsrEwCauSLv/W/2ISRmViw7z9fH1aYrPmaA4=
Subject key identifier: A4:B9:75:57:B5:9E:E8:C3:6B:B4:5F:AF:7E:6E:D0:B8:98:4A:99:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7E8E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/795C2910E46211EE91FB8E88775412E6.roa
Signing time: Sun 17 Mar 2024 13:30:09 +0000
ROA not before: Sun 17 Mar 2024 13:30:05 +0000
ROA not after: Fri 19 Apr 2024 13:30:05 +0000
asID: 23470
IP address blocks: 156.252.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32398 (0x7e8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 17 13:30:05 2024 GMT
Not After : Apr 19 13:30:05 2024 GMT
Subject: CN=65f6f061-011a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:71:c1:4d:c4:02:a1:59:5c:fb:86:d3:a1:aa:
70:92:82:4e:df:8d:5e:8a:9e:8b:4f:61:f2:72:b8:
88:ee:4b:f3:0f:39:5c:cc:11:72:ef:7d:5d:e1:cc:
4f:ab:b5:82:32:10:31:87:d0:f4:ca:9a:ab:82:23:
1d:98:93:6c:25:df:7d:f7:10:a8:36:36:6c:d8:fe:
28:04:e9:1e:45:29:f9:a4:57:25:4f:27:67:54:8a:
7e:fc:37:48:15:b3:a0:a1:50:b2:a0:bf:b5:a3:20:
e8:00:98:64:73:b1:7b:13:ca:c0:41:0c:43:cf:bf:
51:e2:1f:f2:bb:bb:58:ee:28:ef:b3:52:43:23:5a:
99:9e:6d:20:67:5b:65:05:fe:43:e4:bb:d0:b0:7f:
f3:03:bd:be:77:d3:0b:db:00:cb:ed:2a:91:e6:ca:
67:30:ea:f3:50:bb:c0:4d:e4:90:63:4c:50:9d:9e:
77:aa:43:93:e2:d5:18:39:31:24:4a:e5:e5:dd:f6:
e7:2b:80:b4:a8:ed:a7:37:6b:1b:83:8e:db:3b:8c:
f7:46:9c:58:ef:a8:c7:44:99:10:e1:ec:f8:b8:ed:
eb:18:d7:f2:ee:09:16:61:81:4d:76:e8:1c:25:aa:
10:c8:a7:a3:fa:01:18:34:ec:82:aa:01:23:36:8f:
58:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B9:75:57:B5:9E:E8:C3:6B:B4:5F:AF:7E:6E:D0:B8:98:4A:99:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/795C2910E46211EE91FB8E88775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.0.0/24
Signature Algorithm: sha256WithRSAEncryption
29:e0:1a:d8:74:94:66:d9:da:86:be:22:09:ce:e2:36:4e:f6:
ef:ab:97:91:23:ed:ce:aa:19:81:f3:9b:16:68:4d:b2:00:9c:
f1:b0:ed:65:5c:08:f9:ef:f0:33:b3:c5:1e:8f:74:dc:e2:a2:
f6:1e:40:b5:fd:e2:74:67:eb:9e:f2:7a:34:df:fc:0f:b0:56:
aa:3c:66:d9:12:e8:b2:81:9b:20:3c:4b:43:7d:81:cb:bf:f0:
c9:6f:43:48:d0:b1:2f:12:5b:7a:8a:ac:bb:47:98:3b:86:dd:
4f:c0:e6:00:54:53:1b:48:b4:62:b7:04:2d:c5:f7:4d:4a:10:
87:f6:bc:b5:4d:76:aa:93:6d:1c:07:76:9e:bb:7d:7e:13:63:
41:c4:e6:45:17:d4:73:01:2e:db:ec:e5:98:0a:82:ba:4a:50:
90:35:97:01:d8:ed:f5:07:2f:63:f1:91:89:39:ea:39:98:ea:
7d:cf:88:d8:d4:cb:12:4f:e2:56:84:be:fc:84:10:08:96:61:
ab:70:fe:4d:7a:90:d3:fe:fd:17:43:2a:b5:de:06:7c:d9:ff:
c5:3b:59:fe:9a:14:6c:70:26:f2:cf:b4:54:23:9a:ea:3d:a5:
7e:93:02:67:8d:9c:1b:1d:6b:94:6e:60:1d:1e:98:d5:b2:f3:
45:a9:99:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 04:51:51 2024 by rpki-client on console-ams.rpki-client.org