Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/584793A0404111EFBEE4B18D762E951A.roa
File: 584793A0404111EFBEE4B18D762E951A.roa (raw, json)
Hash identifier: LUvL95pnPzXcPrLkYC0zN084Z/sVX8ybg1Bf4Orj+V0=
Subject key identifier: 56:D8:C3:03:28:DE:DA:8E:A3:4A:88:99:72:1D:87:BD:84:43:42:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9BD5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/584793A0404111EFBEE4B18D762E951A.roa
Signing time: Fri 12 Jul 2024 11:24:47 +0000
ROA not before: Fri 12 Jul 2024 11:24:43 +0000
ROA not after: Tue 13 Aug 2024 11:24:43 +0000
asID: 138915
IP address blocks: 156.244.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39893 (0x9bd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 12 11:24:43 2024 GMT
Not After : Aug 13 11:24:43 2024 GMT
Subject: CN=6691127f-8295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:c0:b2:a4:50:54:5f:dc:85:dd:6e:30:94:
ab:7f:50:5b:ed:fe:15:be:f4:3b:59:d7:af:3e:dc:
e6:a2:04:cf:32:72:97:6c:b7:45:fa:c5:7b:47:c4:
52:38:de:0c:33:fd:f9:53:12:1b:ce:f2:71:18:7d:
cc:60:66:de:22:94:4d:bc:ce:f0:80:81:c8:98:97:
ae:32:69:24:4d:b5:1a:7d:32:61:aa:2a:7d:dc:06:
cc:bc:3e:26:bf:42:cc:a4:4e:82:72:73:83:d3:56:
93:ac:07:f4:63:68:85:da:3c:1a:37:ee:37:05:0a:
17:c7:a9:8a:01:eb:49:b3:5f:8b:aa:23:3d:18:77:
20:cd:c7:9e:cf:55:f1:3e:25:54:15:be:3e:c6:4a:
37:c6:dc:69:63:aa:e0:62:78:1d:51:60:36:9e:11:
38:cc:dc:15:d5:d4:21:ea:76:10:da:55:56:b4:c9:
4a:c0:cb:94:9f:66:74:ff:6f:f0:0c:7c:a4:ee:9b:
0f:90:35:ac:6a:33:6a:40:a9:db:51:d5:1c:1d:68:
43:0f:79:b0:33:ef:ff:0e:12:63:e1:fe:fb:91:92:
35:52:fb:b9:f5:8d:7d:fa:64:b2:c9:e2:3b:ea:dc:
35:60:b8:3f:13:79:74:ff:0a:13:63:a1:04:95:7c:
f5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D8:C3:03:28:DE:DA:8E:A3:4A:88:99:72:1D:87:BD:84:43:42:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/584793A0404111EFBEE4B18D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.29.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:75:f5:36:ed:c4:9c:f8:0f:dd:b7:3d:e9:f1:1b:8b:6d:70:
2f:b1:44:a9:f2:f6:d1:5c:a9:60:09:9b:c9:00:ec:62:53:fb:
f8:d3:de:41:9f:d1:72:12:62:1f:10:f1:80:5c:72:f9:0f:5b:
00:4f:47:91:61:c8:40:49:b6:76:aa:be:fa:8f:65:c6:e2:74:
ab:7c:58:0c:30:28:2d:18:28:12:6a:9e:22:58:55:7a:40:93:
96:51:4b:15:f6:a8:25:1f:61:9b:3a:a1:66:96:ef:1d:ae:a8:
ad:27:b3:46:f3:5d:3e:e7:17:56:c8:5e:48:fa:fa:07:bc:37:
db:25:38:aa:d4:de:c8:a8:c0:d4:a4:d7:94:6d:b2:44:12:84:
2b:f7:c4:0d:9f:63:c2:3e:5d:35:6b:aa:2b:fd:38:64:59:69:
29:d4:12:17:7f:f7:d4:da:e4:e2:78:9b:d0:50:29:e5:64:cd:
49:7a:29:54:04:dc:b5:db:fb:fb:5c:1b:eb:70:a7:de:a1:7f:
ec:85:c3:23:59:40:d0:69:0c:0c:60:39:28:b1:a5:30:2d:95:
37:a4:7d:11:f7:9d:64:8f:c7:e5:f8:4b:bf:23:36:40:e5:97:
4d:f8:e6:39:d7:d3:e3:5a:f4:6a:69:e6:d0:5f:5c:48:d5:33:
73:2d:87:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 05:05:46 2024 by rpki-client on console-ams.rpki-client.org