Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7593B018435E11EF8A3B5A68762E951A.roa
File: 7593B018435E11EF8A3B5A68762E951A.roa (raw, json)
Hash identifier: AZ7BLpTCgXm/Z4MDNFliRT6g9K0UIlmxYhrounYGbNo=
Subject key identifier: 15:6F:C4:EE:D4:3E:1E:3D:FC:E2:DE:E7:7C:2B:EB:2E:A1:CD:86:CA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9CD1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7593B018435E11EF8A3B5A68762E951A.roa
Signing time: Tue 16 Jul 2024 10:30:45 +0000
ROA not before: Tue 16 Jul 2024 10:30:42 +0000
ROA not after: Mon 12 Aug 2024 10:30:42 +0000
asID: 398993
IP address blocks: 156.231.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40145 (0x9cd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 10:30:42 2024 GMT
Not After : Aug 12 10:30:42 2024 GMT
Subject: CN=66964bd5-cf20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:47:2f:44:f7:a6:54:7e:73:ec:fc:e2:d0:
6a:ce:45:59:0f:40:b1:38:8f:1a:dd:f2:84:8d:b7:
71:6f:13:2e:55:3f:7d:49:71:ff:b6:bf:d6:9b:df:
13:a5:d8:6d:c3:95:ef:2b:94:d5:c0:62:ac:83:67:
50:cf:11:4a:f9:85:a7:0b:3a:d2:c1:b6:6b:1b:7c:
39:15:fc:9a:09:55:83:82:2a:2f:88:ca:ba:b9:e1:
6b:4c:8d:4f:11:cd:99:9a:ed:ef:34:29:2a:b0:e0:
fd:8e:fa:40:c3:3e:7a:09:76:70:b0:4a:4f:d5:59:
17:57:8f:cb:8e:c6:c1:5b:ba:a7:22:1c:91:40:8b:
ec:f5:1d:05:29:10:92:99:e0:d2:e0:44:df:da:67:
81:f5:49:51:b8:79:9b:80:f3:65:61:dc:93:37:39:
4b:49:a8:76:45:93:87:29:ad:78:01:11:3b:fd:28:
d1:93:30:af:80:83:ae:8d:08:fc:8d:5c:40:d3:be:
38:7d:2c:98:20:e1:7b:53:43:99:b8:f9:f4:d3:83:
23:08:5c:90:1c:73:63:02:de:11:1d:7c:31:2a:27:
1e:81:de:a6:54:f9:98:95:e0:55:ce:e3:15:d1:82:
e9:ab:b9:b9:5d:34:3b:a1:54:6d:cb:19:e1:42:9c:
1e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6F:C4:EE:D4:3E:1E:3D:FC:E2:DE:E7:7C:2B:EB:2E:A1:CD:86:CA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7593B018435E11EF8A3B5A68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.144.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:18:2b:ae:93:71:32:f9:72:ba:6b:c5:bc:50:6b:cb:e5:b9:
d2:88:c2:1b:4e:21:4b:03:d2:2f:8a:70:d3:22:b9:e7:4b:10:
a3:2b:10:5f:66:73:4e:f0:a7:d2:ef:f2:90:d4:e9:64:f8:fa:
c1:1d:bd:52:fa:27:7f:8b:71:5e:06:dc:a3:33:25:d8:88:3b:
0b:95:e1:48:56:ed:b4:20:03:47:56:a7:38:d8:dd:58:c0:13:
2a:0b:8c:c2:be:95:fa:00:3d:12:ba:45:b8:6e:03:25:74:9d:
a8:d9:d0:8a:db:2c:7f:f9:04:ca:a1:bb:e0:1e:21:ae:62:bf:
39:3b:53:31:f3:0c:3b:9b:54:bc:7d:32:90:61:f3:d7:fc:c0:
9e:e8:67:ba:96:64:df:0c:84:ae:9a:ce:9a:e4:36:2a:83:6e:
45:57:94:fa:cd:a5:05:a9:29:be:16:1d:cc:81:ac:83:4b:06:
f1:22:3f:45:17:31:f4:09:c5:63:74:9e:e1:cc:02:94:c5:e2:
22:2e:85:97:2a:52:65:7c:41:f3:01:ed:2a:75:de:cf:1a:b9:
42:5f:42:21:fd:d7:1a:4d:dc:94:a6:e0:18:95:0d:ee:ae:65:
9e:3a:53:ad:d2:f1:af:3c:2a:59:74:e9:a6:fd:2b:dd:b4:d4:
e5:e9:09:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 03:10:46 2024 by rpki-client on console-fra.rpki-client.org