Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/012441DE338711EF9E54514B762E951A.roa
File: 012441DE338711EF9E54514B762E951A.roa (raw, json)
Hash identifier: gQL7qGvCxqtS0dywrkp6GS47QC0qP5ZSFjMjIYlA71g=
Subject key identifier: 5F:3C:39:AA:D5:A4:8E:C0:00:1E:B8:36:15:64:87:70:C5:C5:66:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9547
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/012441DE338711EF9E54514B762E951A.roa
Signing time: Wed 26 Jun 2024 06:40:40 +0000
ROA not before: Wed 26 Jun 2024 06:40:37 +0000
ROA not after: Thu 01 Aug 2024 06:40:37 +0000
asID: 149440
IP address blocks: 156.236.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38215 (0x9547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 06:40:37 2024 GMT
Not After : Aug 1 06:40:37 2024 GMT
Subject: CN=667bb7e8-bb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:95:e7:c5:c3:37:b1:70:cb:1b:ad:ad:bf:c6:
50:04:7a:a7:91:7a:d4:3e:3b:ae:ec:77:e5:84:89:
6d:a7:54:98:69:3d:ce:c6:cd:83:f6:fd:a9:07:83:
2e:5f:fc:d0:19:ee:d0:fe:b5:bc:22:34:7e:18:c7:
95:99:17:8b:6f:3c:39:59:27:8a:90:32:d1:7d:74:
93:f5:e6:ce:37:a5:da:d4:a5:63:4d:71:8d:5f:6d:
66:29:61:35:c5:6c:fd:a1:a6:d5:0e:fa:5e:2d:32:
0a:43:cf:f3:9e:cb:39:b0:dc:0f:0a:e1:f8:e3:0d:
d8:c1:84:6e:65:ef:9c:47:02:03:88:9c:eb:1c:90:
f4:63:b2:d0:2f:89:8c:ee:d5:4d:70:61:00:32:d5:
dd:8b:cb:c3:13:cf:c2:90:8a:1b:eb:47:54:a8:e7:
ce:36:a5:71:4c:07:f4:0a:cc:07:7c:9e:35:5a:09:
0d:10:61:ab:bc:6d:91:f9:1a:2e:00:47:7a:38:56:
cc:e9:0b:ae:c2:0d:25:0b:e1:44:3a:e4:e9:e4:a0:
2b:e6:9d:7c:99:3f:da:5e:cd:a5:b5:ac:bc:5f:7a:
53:52:b7:ca:ba:8e:f0:3e:da:7d:ab:63:e8:bf:e8:
71:51:4d:69:28:62:ef:c9:0c:b3:16:18:1c:9a:f8:
ff:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3C:39:AA:D5:A4:8E:C0:00:1E:B8:36:15:64:87:70:C5:C5:66:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/012441DE338711EF9E54514B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.76.0/24
Signature Algorithm: sha256WithRSAEncryption
31:d1:25:59:44:f1:ba:b4:8d:ea:48:81:15:4c:35:8e:ca:31:
e9:21:a9:e0:52:06:12:c6:22:ac:76:85:b4:f4:4a:48:4a:d9:
6c:45:b3:7a:4b:62:29:b3:19:94:f6:c9:70:09:c2:13:5b:4d:
c4:1f:d5:17:bb:99:c4:39:68:14:d2:1d:7a:d5:6b:7f:77:da:
d1:2b:4d:4e:24:be:db:7b:c4:38:39:02:db:6a:02:99:4e:37:
5a:b8:19:85:da:82:6d:21:b4:fd:d0:4c:be:05:2b:05:2d:f5:
6e:a9:0c:5e:b5:0e:8f:6b:a2:7c:e8:29:42:39:34:7d:ba:95:
de:36:a7:1a:f9:6f:0e:55:77:ab:57:76:16:af:2b:50:df:29:
7a:f6:3a:8c:35:1c:ad:7c:bf:2a:5a:7e:8c:34:85:08:ea:17:
5b:54:21:8c:5b:5c:f6:aa:81:e8:c7:07:16:17:bd:32:9e:55:
5c:d1:f4:63:73:b3:21:d2:87:9d:9d:53:32:bf:cf:43:8b:4e:
a2:b1:54:53:81:ef:25:92:f0:69:ba:97:b9:f7:3b:c5:28:38:
83:10:75:06:2e:8a:33:9c:3d:4c:f0:5e:01:59:bb:36:8e:63:
d7:86:f1:e0:bb:ec:89:7f:69:d4:81:36:03:3c:08:42:6d:86:
a5:09:e4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 10:33:28 2024 by rpki-client on console-ams.rpki-client.org