Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64103DF848E411EFA5B39C75762E951A.roa
File: 64103DF848E411EFA5B39C75762E951A.roa (raw, json)
Hash identifier: rJeFaa4o8H2zTf7SI6u8pucZV8XqmUzGdcAP14FfGqQ=
Subject key identifier: 55:AA:55:19:98:70:E2:75:C7:F8:AB:FE:2F:A4:7A:95:39:04:59:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9ECC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64103DF848E411EFA5B39C75762E951A.roa
Signing time: Tue 23 Jul 2024 11:12:04 +0000
ROA not before: Fri 26 Jul 2024 11:12:01 +0000
ROA not after: Thu 01 Aug 2024 11:12:01 +0000
asID: 3491
IP address blocks: 156.230.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40652 (0x9ecc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 11:12:01 2024 GMT
Not After : Aug 1 11:12:01 2024 GMT
Subject: CN=669f9004-7eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c2:59:23:da:48:c7:38:d1:fc:f0:ca:e6:99:
8a:49:05:af:56:33:a8:a2:49:7d:95:2b:2c:82:b7:
84:66:05:f2:d9:6e:6c:7f:18:ad:97:b3:ab:96:a6:
69:50:21:46:22:a8:d0:c9:49:e3:8c:55:b7:a5:aa:
21:9a:cc:3c:04:d2:4c:4d:b4:55:28:b0:58:f7:f2:
4b:63:68:41:03:4d:32:97:33:bf:17:2a:86:70:4d:
82:1c:7f:da:b8:ac:dd:ce:94:35:00:7c:b7:58:7a:
1d:23:ae:53:e6:3a:14:f4:9d:4f:55:4c:e8:7a:cd:
64:f1:2e:99:ea:34:dd:80:1f:ef:b9:2c:78:9a:52:
03:89:79:9e:9e:8e:b0:16:85:de:2b:9e:66:d3:c3:
5b:05:2a:e1:99:58:10:85:eb:31:97:54:26:44:fe:
8f:60:43:9f:a3:49:46:6d:49:b5:3e:42:38:ae:3f:
02:c2:9b:dc:c4:cf:4e:8a:ec:6b:87:a0:52:23:60:
f5:f0:44:6a:f3:40:e5:6d:04:34:4c:d6:6a:99:67:
03:0c:3f:93:2c:08:05:34:fa:a0:b3:24:79:a0:07:
c0:7e:27:5a:ff:c3:65:91:c9:6d:9f:76:81:98:df:
f8:f5:fe:e4:5a:b6:5a:c1:38:08:61:67:eb:80:2a:
b1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AA:55:19:98:70:E2:75:C7:F8:AB:FE:2F:A4:7A:95:39:04:59:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64103DF848E411EFA5B39C75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.5.0/24
Signature Algorithm: sha256WithRSAEncryption
28:12:88:68:8e:73:f1:76:13:b3:15:28:f3:4e:da:07:f0:ca:
76:b1:96:34:5d:ca:2a:de:f1:84:b8:28:ad:e1:75:d2:cd:8c:
f9:06:53:39:d9:6a:54:8a:90:26:1e:8c:95:26:48:70:5e:17:
20:13:58:79:61:2a:d4:81:3b:73:4a:d8:2f:05:dc:d5:5d:2f:
5f:fb:7f:f7:90:62:94:b0:1e:fe:4d:6a:b7:8c:5b:3f:61:f2:
91:f4:e6:7a:2f:82:1a:7b:33:2e:e0:16:f7:14:9a:8c:f8:a8:
8c:d7:0d:90:94:22:83:5e:54:b8:48:8c:ea:ae:a7:66:8b:72:
2f:d0:62:34:10:7e:ad:94:64:fb:01:1d:2d:fd:0c:64:dd:8f:
fa:24:25:4b:e5:7b:c4:60:f5:e5:41:af:bd:b4:a5:8f:f8:f5:
4a:b5:fd:3e:a3:53:fd:eb:47:30:a3:61:98:f0:f9:ee:96:5b:
40:82:17:77:74:ad:e5:27:cd:72:bd:7c:2e:46:7c:26:3f:7f:
f6:b2:d6:81:46:74:f8:75:c5:ad:9d:95:7b:3f:6c:28:11:db:
79:50:33:f8:ea:2c:d3:cb:b3:fd:eb:e8:44:a7:97:4b:4f:31:
88:8f:0d:ec:28:64:4a:05:25:bb:c2:7c:50:2f:d5:a8:cd:1d:
e7:d0:66:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 04:03:11 2024 by rpki-client on console-ams.rpki-client.org