Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B89786C377311EFA342E07D762E951A.roa
File: 4B89786C377311EFA342E07D762E951A.roa (raw, json)
Hash identifier: qfrHlqzt9yNJU0wd54qw5Q8Ug+HeiFGAxGaXLmWNdP8=
Subject key identifier: 15:0D:B5:01:07:48:06:FF:39:42:A6:05:47:F0:71:84:7D:EA:76:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 96CE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B89786C377311EFA342E07D762E951A.roa
Signing time: Mon 01 Jul 2024 06:29:40 +0000
ROA not before: Mon 01 Jul 2024 06:29:35 +0000
ROA not after: Thu 01 Aug 2024 06:29:35 +0000
asID: 14315
IP address blocks: 156.232.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38606 (0x96ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 06:29:35 2024 GMT
Not After : Aug 1 06:29:35 2024 GMT
Subject: CN=66824cd4-ad0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1d:72:bc:99:61:65:cc:7b:54:5d:17:cc:59:
3d:0e:b0:9f:b3:2f:37:d2:d6:0e:2f:1b:7a:c5:78:
06:59:5a:a1:41:6f:ef:eb:2a:af:2a:1c:b6:64:5f:
ac:40:79:22:a2:68:99:b8:fc:ea:1d:60:07:d1:72:
e4:60:ef:22:23:3d:29:d4:03:f2:77:11:46:a3:78:
7b:a0:4d:f8:aa:1d:64:3a:7f:6f:e2:8a:70:cd:13:
7a:f7:86:6d:2c:16:e0:65:08:5d:4a:0a:20:90:9d:
1a:26:31:0a:4d:37:6b:a2:76:30:b6:c9:60:f3:45:
3e:b8:e9:c2:a0:ff:d3:46:6f:ce:df:13:3e:aa:2b:
f8:7e:c1:14:b0:ad:df:85:2d:45:ca:6d:08:e6:90:
73:07:96:2d:74:a4:41:df:23:67:c4:3a:49:44:1f:
1d:f8:c5:a6:a1:3e:17:c6:44:6c:81:b7:13:dc:df:
bc:5e:99:f0:a1:75:60:2e:0b:69:a3:a9:86:63:d9:
2e:a8:fc:ac:16:07:5e:29:dc:75:53:38:1b:c6:26:
4a:93:ba:e5:8d:96:3b:b5:28:45:38:c9:5f:ec:29:
42:17:4c:17:a4:40:ab:06:ed:61:11:9a:75:8d:34:
ee:75:8a:e0:b6:24:89:68:9b:40:74:36:88:57:f4:
ad:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0D:B5:01:07:48:06:FF:39:42:A6:05:47:F0:71:84:7D:EA:76:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B89786C377311EFA342E07D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.102.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:46:e0:3d:f2:b7:83:2e:8b:3c:f6:78:9a:ac:54:dd:ee:92:
7b:ae:25:e1:bf:dd:dd:e8:0e:e7:81:bb:af:cb:18:67:89:b2:
bd:99:ec:ce:c1:0d:b8:a9:41:24:b2:68:20:84:36:5e:55:76:
9a:b6:1b:4f:2d:a7:a7:b2:72:b2:9f:96:a6:11:e1:97:75:82:
49:b6:56:d0:9b:91:ce:c2:d9:b7:3b:87:a5:59:2c:29:d5:5b:
52:6e:33:9a:44:7d:2c:1c:1d:7d:ee:33:8e:fc:e2:14:c0:d8:
15:f2:e7:43:de:1a:23:43:da:96:6e:97:d7:ae:73:05:0a:d4:
96:df:47:f1:94:18:5f:14:08:05:ea:06:db:03:71:df:7d:c2:
94:2f:3a:dc:18:c8:81:94:63:ce:93:99:7b:d1:3f:93:36:ee:
99:f4:18:63:73:22:61:08:20:22:43:1b:16:b0:ba:48:03:06:
bd:5f:27:6e:36:84:96:97:84:f5:13:43:9d:ea:f4:f1:9c:53:
9b:e9:c9:15:86:02:44:4a:94:08:60:7b:99:cc:14:52:55:c3:
aa:ab:d0:82:c5:d7:a5:8d:03:a5:ea:68:8d:d1:68:4a:a9:1c:
cf:97:a2:9d:41:f8:45:38:8e:cd:78:83:1b:f4:06:d8:a3:ae:
c0:99:c9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 08:35:32 2024 by rpki-client on console-fra.rpki-client.org