Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54E7536C406911EFAF448F97762E951A.roa
File: 54E7536C406911EFAF448F97762E951A.roa (raw, json)
Hash identifier: sKMzins1hin8gzLZulugwsdmDpBtmMiwYBXL+NI2jpo=
Subject key identifier: 51:DE:E0:DF:30:55:AD:EE:9F:63:4D:60:E7:D4:FD:B8:47:5F:CF:24
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9BF9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54E7536C406911EFAF448F97762E951A.roa
Signing time: Fri 12 Jul 2024 16:11:01 +0000
ROA not before: Fri 12 Jul 2024 16:10:58 +0000
ROA not after: Tue 13 Aug 2024 16:10:58 +0000
asID: 138915
IP address blocks: 156.244.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39929 (0x9bf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 12 16:10:58 2024 GMT
Not After : Aug 13 16:10:58 2024 GMT
Subject: CN=66915595-bfe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:02:14:87:33:bf:20:e7:b8:53:6d:57:77:
d2:1d:1e:93:51:3d:14:97:94:19:36:2c:f9:c7:14:
34:98:27:af:f8:80:61:28:2f:32:76:96:db:d8:ea:
4e:e6:72:b5:1b:cb:34:55:6b:f4:e6:ee:0c:80:ef:
a0:ff:6e:42:db:41:3f:e6:21:a0:0b:2a:dd:73:7b:
3d:78:82:40:f1:53:0c:5c:af:91:08:6b:b1:ec:92:
0e:7b:27:36:84:c9:2f:ca:fb:2f:5f:0d:fa:be:34:
e2:1d:57:5f:41:9e:cc:0a:5a:64:c5:65:1b:b9:3b:
4e:72:cc:ae:b7:8b:c2:3f:da:ac:d2:dc:02:c6:db:
4b:90:e2:ed:ae:43:02:01:55:7d:69:1f:72:65:d4:
18:09:f0:93:56:87:46:06:1a:d1:02:12:d4:aa:60:
1e:cb:61:ce:c9:df:d5:06:09:98:03:49:cc:20:68:
39:53:30:6a:eb:4d:22:47:fa:7d:02:e9:71:d2:7c:
74:13:76:fc:10:e2:7b:f8:eb:12:3f:30:0b:9b:f6:
fa:bc:87:63:de:7d:e4:d0:ce:f9:29:d5:b7:03:30:
7c:e5:47:7c:c0:ee:09:fb:4a:81:ef:58:d3:67:ff:
ea:d0:8d:f4:d5:28:e4:d6:fd:a5:58:00:b3:fe:9c:
3f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DE:E0:DF:30:55:AD:EE:9F:63:4D:60:E7:D4:FD:B8:47:5F:CF:24
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54E7536C406911EFAF448F97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.12.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:fa:d4:47:a4:b0:bc:d6:9c:90:cc:bf:d9:e4:3e:08:cb:b1:
f1:54:0a:95:f1:76:0c:3c:ff:c3:69:2d:fb:07:a4:69:cb:be:
cb:48:2f:dc:d2:a2:5e:0c:c3:30:b7:f4:99:d7:7a:0a:56:64:
05:99:8b:7b:79:b0:4e:9d:15:0b:43:4f:54:61:33:83:ed:41:
da:6c:1b:4d:97:98:74:1d:1d:ce:ef:b7:e3:49:33:d8:f0:97:
0e:eb:fb:6b:b3:39:ab:3a:1e:b9:22:28:61:f3:10:38:11:33:
64:d5:0d:2a:8d:49:d4:2b:6e:f9:ae:2b:49:3d:bb:fb:39:bb:
69:ad:73:73:a8:c3:07:77:b7:a8:40:52:09:5b:f9:24:c3:41:
7a:e7:7d:ba:49:1d:04:e5:ae:f1:5c:23:3b:a4:bc:ac:3a:74:
27:9d:bb:01:b6:45:2d:76:a9:b8:bb:59:7f:d6:61:5a:2d:9e:
52:47:4d:42:74:7a:92:bb:8c:b1:67:64:f1:2c:94:86:1e:9d:
93:03:2c:01:94:3a:18:af:ff:a8:31:b6:c2:73:cc:b0:fc:57:
cb:18:7c:6b:55:ef:8e:84:90:a4:56:b1:04:c0:63:d0:b9:a2:
35:47:8b:b8:23:72:b6:ee:8a:93:28:7c:7d:90:31:83:15:70:
df:3a:a9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 04:26:00 2024 by rpki-client on console-fra.rpki-client.org