Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B3F363007AA11EF93CA6861017001B1.roa
File: 7B3F363007AA11EF93CA6861017001B1.roa (raw, json)
Hash identifier: K7OqFwTgao2np7imKSXUFZ2Dpyb0LnH2X/GTDs3I6VE=
Subject key identifier: 95:59:20:6A:DD:22:77:E4:E3:93:25:D6:0F:8E:F9:B3:4D:30:B7:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8724
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B3F363007AA11EF93CA6861017001B1.roa
Signing time: Wed 01 May 2024 11:03:47 +0000
ROA not before: Wed 01 May 2024 11:03:43 +0000
ROA not after: Thu 16 May 2024 11:03:43 +0000
asID: 54467
IP address blocks: 156.239.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34596 (0x8724)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 11:03:43 2024 GMT
Not After : May 16 11:03:43 2024 GMT
Subject: CN=66322192-78fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:ae:85:e4:60:fd:0e:5c:2a:08:e2:25:0e:
9d:de:d2:cb:f2:18:fc:71:6f:b2:ed:94:e6:dc:2a:
c8:a2:a4:ba:51:b7:95:f9:7f:59:91:3b:a8:f7:1c:
d3:6e:20:34:f8:fc:d5:b5:98:35:8f:56:46:b9:8d:
6b:55:e2:08:25:1a:bf:62:9a:f1:e0:8a:33:6e:62:
1a:0b:51:e4:ad:9d:8c:5e:7a:41:55:17:07:bf:db:
60:35:d5:0f:d5:a6:dc:6e:62:35:98:f5:c7:8d:e7:
1d:6b:d0:03:8b:18:c2:a7:cf:67:2f:29:2e:5e:99:
03:64:f7:6c:30:f3:7b:15:07:70:93:f3:b9:36:01:
84:1e:e0:5e:74:c2:60:ce:ee:df:1c:c0:a3:4c:d6:
08:97:b2:0b:41:a4:40:da:32:79:4d:ec:62:7e:95:
23:24:b5:1d:7b:e6:de:9d:ed:8e:2d:4e:4e:d4:2d:
dd:a7:36:aa:19:f4:05:8e:29:17:af:3c:5d:0e:b4:
72:69:fa:dc:35:c3:52:c3:f8:bb:58:c5:cc:83:78:
ae:74:e2:e2:f2:73:d9:25:65:60:c7:2a:54:86:a0:
e2:5b:83:a8:52:fa:69:b0:87:f2:1a:a6:9b:f0:5d:
93:45:c2:a9:a0:26:63:d7:79:95:33:4c:de:04:5d:
1f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:59:20:6A:DD:22:77:E4:E3:93:25:D6:0F:8E:F9:B3:4D:30:B7:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B3F363007AA11EF93CA6861017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.0.0/20
Signature Algorithm: sha256WithRSAEncryption
03:cc:77:16:62:0d:92:30:f0:0d:a7:9c:01:d8:ef:cf:46:27:
5b:0b:f8:4b:21:fc:59:b7:c9:07:82:a5:7c:99:5d:bd:92:8c:
36:03:29:ad:c6:d3:5b:45:42:bf:16:27:c7:58:fc:dc:ff:cf:
d3:69:2a:32:cf:ba:27:2c:83:ec:2a:3d:12:1a:15:ae:5d:de:
f7:5b:b3:e4:1a:32:3f:7c:fa:d6:cd:41:e5:33:dd:16:ef:2d:
18:8e:ae:c4:55:45:c9:ab:a9:a0:5f:38:a8:f7:26:6e:59:ac:
c0:05:3e:20:87:1b:29:93:8e:27:0c:83:b3:ca:aa:0c:bb:89:
98:2a:38:76:17:14:8a:4c:95:49:a1:59:4a:15:1b:39:12:8d:
fc:c4:27:53:b7:93:f4:bd:61:06:5a:b3:88:e3:d0:0f:ec:23:
5d:63:8a:90:42:7d:cc:18:da:a2:ff:0d:bc:cb:bb:b8:1e:6e:
e9:a6:e8:64:fc:65:ed:27:44:ea:d6:3d:c9:ae:3e:03:98:12:
78:a7:57:e1:91:a3:d8:f2:cf:98:3b:36:78:8b:4b:23:9c:6e:
d2:b5:d6:75:9d:3e:e3:56:9f:4c:ba:dd:ab:0f:60:62:9d:06:
0d:96:77:c3:03:96:65:f7:93:d0:b0:5e:7f:38:5d:7a:c9:42:
48:02:b8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:04:04 2024 by rpki-client on console-fra.rpki-client.org