Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D7A6CA448C911EF8557E140762E951A.roa
File: 5D7A6CA448C911EF8557E140762E951A.roa (raw, json)
Hash identifier: TNWEb8AM0+7bdIygXEcOPZHw3IjRb3MhlU1znCfT2u8=
Subject key identifier: 37:3E:32:44:B8:DC:69:C9:E1:52:B6:B4:63:FC:4D:62:7C:6F:06:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E88
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D7A6CA448C911EF8557E140762E951A.roa
Signing time: Tue 23 Jul 2024 07:58:37 +0000
ROA not before: Fri 26 Jul 2024 07:58:33 +0000
ROA not after: Fri 23 Aug 2024 07:58:33 +0000
asID: 202656
IP address blocks: 156.246.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40584 (0x9e88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:58:33 2024 GMT
Not After : Aug 23 07:58:33 2024 GMT
Subject: CN=669f62ac-ff0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4a:cb:19:4a:ba:60:d3:36:f8:8e:23:11:70:
7b:af:5b:86:06:ee:73:4a:2b:71:3d:6b:3d:5d:69:
72:c8:04:69:48:c1:93:76:1e:89:fc:91:16:52:b1:
8f:0f:1e:df:6b:25:e9:ce:f0:77:4a:a4:e4:8a:2e:
af:0c:8d:29:d0:5a:19:72:eb:3e:72:6f:b2:ee:2a:
1d:f5:26:fa:97:a9:de:3b:d1:3f:f8:76:6b:8c:14:
da:72:c3:e5:2a:c9:e9:76:89:e5:37:84:df:6c:9f:
bd:05:7c:d5:8d:a9:76:fb:c0:98:0d:82:ac:9b:10:
50:38:07:58:87:c4:ea:92:53:33:bf:84:47:a9:0b:
71:cd:8b:08:a1:67:e6:13:46:59:23:46:04:d5:b3:
47:d1:27:4d:21:56:06:3c:90:ff:c4:d1:35:53:af:
c8:5b:29:d5:35:e4:e3:4e:65:1a:a7:fc:cc:f0:d5:
0b:01:16:2a:76:10:d3:85:c2:48:50:b7:f7:69:a3:
b7:e5:7e:04:13:cd:49:70:d8:7d:91:48:07:6d:3b:
d2:b3:cc:af:d8:6f:66:ac:41:bc:dd:6d:41:a9:b3:
99:84:cf:8c:67:3a:b8:93:da:7f:8b:6f:f9:72:de:
c9:34:8e:fc:ee:4e:95:74:34:c8:da:4a:57:5d:f9:
29:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3E:32:44:B8:DC:69:C9:E1:52:B6:B4:63:FC:4D:62:7C:6F:06:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D7A6CA448C911EF8557E140762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.165.0/24
Signature Algorithm: sha256WithRSAEncryption
25:75:7e:55:9b:42:99:4a:d0:f9:65:e2:55:a0:06:02:94:27:
be:2e:5a:ff:c1:4b:ae:2b:e6:67:83:8b:63:37:cd:38:ef:4c:
b7:c9:5a:63:e2:bd:e9:16:95:c8:96:0c:96:6e:ab:80:92:18:
4e:67:02:18:45:df:cb:47:23:a2:03:8a:30:f8:7b:bc:e4:83:
c4:79:f5:ac:75:61:c9:20:c6:43:bb:99:f1:68:66:5f:10:89:
57:6a:33:d3:5a:99:c9:fc:40:0c:95:47:e9:c3:26:67:02:9a:
ce:7a:40:40:6b:db:30:78:f1:2a:ba:49:7c:53:fb:76:3c:fb:
e0:c8:22:86:1f:71:79:88:f6:af:0e:d1:f4:a3:20:a5:6b:d6:
50:e0:93:a1:54:cf:e9:5b:76:6d:17:e3:4e:a1:11:ed:84:80:
5b:e2:b5:9e:55:ed:cb:75:76:17:20:4a:71:48:d5:76:15:60:
33:f6:5b:6f:bf:52:fb:3f:60:e1:39:bf:c2:4c:63:ed:cd:80:
5b:98:87:14:ed:90:56:52:94:9d:52:eb:45:7c:c5:a1:18:8b:
e2:fe:09:bb:9e:4f:61:7d:eb:eb:39:64:ff:6d:94:41:2b:27:
b4:3c:b4:c2:24:c0:79:27:18:15:b0:34:0c:82:d7:8a:31:b0:
72:16:59:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:02 2024 by rpki-client on console-ams.rpki-client.org