Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56D798A4441911EFA9D96B64762E951A.roa
File: 56D798A4441911EFA9D96B64762E951A.roa (raw, json)
Hash identifier: JjFuYzozuRbksOJdvdD1qLmqGVToiY+eB8dLmuratSk=
Subject key identifier: 78:0A:EC:DB:99:C3:17:FF:40:DB:B7:F3:26:76:18:70:9A:40:7D:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D3A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56D798A4441911EFA9D96B64762E951A.roa
Signing time: Wed 17 Jul 2024 08:48:29 +0000
ROA not before: Wed 17 Jul 2024 08:48:26 +0000
ROA not after: Sat 27 Jul 2024 08:48:26 +0000
asID: 7018
IP address blocks: 156.238.0.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40250 (0x9d3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 08:48:26 2024 GMT
Not After : Jul 27 08:48:26 2024 GMT
Subject: CN=6697855d-3c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:1d:fc:ab:c5:de:4e:49:e7:b5:f5:e2:fd:
f6:98:18:2b:2b:78:f8:1b:4a:99:9d:ea:a2:e2:81:
94:5d:7f:24:5c:8b:73:89:dd:4e:d6:ad:60:91:e8:
9e:17:ec:82:f7:5c:69:30:61:08:48:7d:ff:ca:05:
5a:97:e8:f3:d5:ba:18:40:e8:e1:fb:ba:fd:c1:1d:
a3:f5:f9:9a:14:bb:8a:76:f5:41:b3:d2:08:04:a6:
c8:ad:ad:07:77:51:9d:b2:da:97:b6:97:44:a9:e8:
51:5a:f1:bc:be:02:e9:77:17:d2:a2:48:38:7b:24:
4b:1d:05:66:ba:4e:c5:68:ea:24:51:d7:a8:05:ad:
d2:fe:ef:7c:a6:39:7c:a7:5f:02:2f:43:1c:70:12:
78:ad:63:48:f2:09:84:66:f3:ae:11:e7:f3:e2:25:
90:b7:36:ca:9e:f1:78:13:41:43:22:34:de:ec:d6:
24:20:c2:5e:c2:3f:3c:d9:c4:46:3a:86:e6:f6:d5:
49:7f:75:95:8d:91:b1:47:3c:38:25:e3:34:d1:82:
ee:86:de:e9:02:37:ab:ee:ac:c5:e6:34:4c:b1:b7:
86:0c:97:7d:43:6f:c5:b8:63:c0:76:d0:a6:41:f7:
21:48:bd:a4:3a:7e:aa:22:7c:b3:36:1e:ac:4f:0b:
dd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0A:EC:DB:99:C3:17:FF:40:DB:B7:F3:26:76:18:70:9A:40:7D:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56D798A4441911EFA9D96B64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.0.0/23
Signature Algorithm: sha256WithRSAEncryption
43:0a:61:76:ca:4b:94:6e:98:90:85:0e:31:b3:4c:9d:9a:fa:
8f:63:7f:99:bd:e8:05:da:76:02:ae:90:61:e6:4d:18:24:34:
c2:6b:1c:47:d9:ff:9a:99:86:00:8d:43:24:59:0e:0b:7b:e8:
a8:95:7e:f5:be:cf:ae:2e:1d:96:a0:34:38:77:70:7f:70:54:
fe:d4:93:88:2b:d5:6b:11:77:42:b1:36:e6:af:66:83:7d:6a:
49:24:7a:7f:f9:72:76:33:d1:6f:c2:b3:99:3e:84:c0:23:4c:
47:3f:da:dc:dc:49:1b:4a:28:e3:6c:78:2c:45:57:96:50:46:
8f:c3:78:46:35:45:88:ac:41:6a:cb:6d:7c:c0:24:2f:9a:07:
2a:68:b9:2a:19:5d:4b:49:d5:19:07:a2:33:00:21:b1:69:66:
3f:ac:7e:37:80:ec:31:2a:b2:c4:96:3f:5f:61:e6:9a:c6:01:
a2:a7:21:66:f7:49:d8:8b:bb:0e:1c:78:45:09:81:75:3c:5a:
bb:37:0c:fe:1b:e2:9b:78:45:ea:db:fd:9a:cd:e6:6d:a4:1a:
13:7a:bb:48:87:2a:50:3c:ee:a6:bf:3f:44:ec:39:d0:d4:50:
d1:b5:a6:6b:62:0f:fc:5e:4c:4f:6b:37:9e:fa:09:24:14:5b:
4f:40:11:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:06:41 2024 by rpki-client on console-fra.rpki-client.org