Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7190775047EE11EFABDDFC70762E951A.roa
File: 7190775047EE11EFABDDFC70762E951A.roa (raw, json)
Hash identifier: e+d2sQqKIfSH3LznBosr8JhjiTMNDELpLrnWHJq2p1g=
Subject key identifier: 23:E4:DB:32:07:58:BC:85:AD:5A:79:69:67:12:F1:D0:A7:4B:C4:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E47
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7190775047EE11EFABDDFC70762E951A.roa
Signing time: Mon 22 Jul 2024 05:51:30 +0000
ROA not before: Mon 22 Jul 2024 05:51:27 +0000
ROA not after: Wed 31 Jul 2024 05:51:27 +0000
asID: 137547
IP address blocks: 156.245.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40519 (0x9e47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 05:51:27 2024 GMT
Not After : Jul 31 05:51:27 2024 GMT
Subject: CN=669df362-68ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d3:f6:c5:9c:d0:37:aa:85:cb:e7:63:45:2e:
ee:74:85:f8:ca:4a:0a:64:91:8d:d6:82:5e:46:66:
66:3e:53:d9:91:33:42:89:79:79:c4:6a:49:46:28:
f1:d0:1d:47:44:e9:77:2f:fa:09:0d:61:f5:ac:8b:
45:f5:ed:20:29:94:09:fc:05:3d:28:4c:60:19:86:
64:e4:9b:61:51:ca:44:d2:e0:09:68:78:9c:e1:d1:
53:a7:5d:4f:90:0e:4e:af:61:55:d9:6b:88:33:da:
b5:ed:c6:90:ed:f5:fc:94:16:99:89:bb:df:31:52:
3b:b8:aa:d5:01:2c:64:63:22:8f:43:a7:f9:dd:5e:
39:29:ab:be:46:23:75:a3:33:f2:4a:8b:51:bb:82:
cc:d4:d3:b8:dd:38:ee:12:06:5a:29:7d:07:fc:0a:
e8:1a:7f:de:66:7d:01:ed:6a:dd:ee:da:ad:1f:db:
46:d7:73:72:e7:55:5e:80:70:0c:4b:82:06:69:c9:
2e:eb:8f:35:ae:6b:df:11:71:de:92:65:25:3a:40:
fd:c1:e6:48:49:cf:85:48:eb:01:fa:22:bf:12:0f:
51:53:ef:4e:9a:53:1c:65:0b:ad:5b:08:42:bc:7c:
3a:20:61:8e:64:12:20:dd:58:95:92:dc:3e:be:c2:
27:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E4:DB:32:07:58:BC:85:AD:5A:79:69:67:12:F1:D0:A7:4B:C4:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7190775047EE11EFABDDFC70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.210.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:6f:31:94:a5:27:28:da:fc:f3:73:ae:29:83:45:4e:c5:b5:
46:29:e7:8e:e9:ee:b1:e7:ad:b0:b3:2e:59:b4:a4:90:dd:ee:
95:31:f7:e6:a0:46:68:43:18:53:9d:c4:5f:5a:dd:36:96:f3:
88:31:7d:a8:05:81:53:7a:b6:3e:31:26:f9:de:54:3c:07:87:
4e:b5:0f:b4:ff:bd:6d:5e:c6:19:8b:a6:6e:50:1a:f2:23:79:
46:d2:4c:15:94:ea:21:36:72:fb:96:36:c2:cb:98:01:43:c3:
e9:9c:42:c3:be:98:1c:21:17:64:39:21:f7:d1:92:50:d5:a4:
a1:be:56:65:b9:40:9f:a5:ee:73:e3:9f:58:8d:02:07:72:1b:
ae:f1:55:6d:20:d1:58:b0:c8:63:0c:5c:ce:bc:44:36:14:10:
1d:cc:f0:ef:35:ea:cc:bb:36:0d:32:d9:5f:ed:5a:2a:82:93:
bb:9a:0c:d3:66:42:3c:ec:89:b0:36:6c:01:0b:59:b3:c7:76:
44:d4:93:cb:44:37:5d:57:6c:bf:74:f1:d4:e0:0e:a8:43:9e:
d8:f6:db:a4:6c:9c:00:f5:b7:73:97:82:35:39:5e:1e:34:e2:
b7:e9:20:99:c3:2f:d5:a3:bd:12:31:70:f7:c9:b6:7c:5a:18:
6b:d6:0b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 12:12:33 2024 by rpki-client on console-ams.rpki-client.org