Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/779EC110404111EFAB25D78D762E951A.roa
File: 779EC110404111EFAB25D78D762E951A.roa (raw, json)
Hash identifier: CcJz6nCNjVBo2Wn8elkW9gh4sfqcNjmLS8qPdrHzrsI=
Subject key identifier: ED:26:8C:72:26:E9:86:F9:8F:54:B3:89:E6:8B:04:A6:2C:4F:00:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9BD7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/779EC110404111EFAB25D78D762E951A.roa
Signing time: Fri 12 Jul 2024 11:25:40 +0000
ROA not before: Fri 12 Jul 2024 11:25:36 +0000
ROA not after: Tue 13 Aug 2024 11:25:36 +0000
asID: 138915
IP address blocks: 156.244.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39895 (0x9bd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 12 11:25:36 2024 GMT
Not After : Aug 13 11:25:36 2024 GMT
Subject: CN=669112b3-65a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:7e:71:e7:d1:f9:78:aa:21:97:92:4b:39:
2a:cb:29:8a:d5:c6:38:c0:80:ff:57:7d:16:1a:33:
51:1f:7a:10:46:d0:17:ec:91:43:da:96:15:e2:c2:
7b:3d:b1:33:33:b0:73:c8:e1:88:ba:4b:2d:b8:c0:
c3:e2:3e:e4:2b:d3:34:0f:59:79:0a:26:7c:26:ac:
e6:19:71:1c:fd:67:44:4d:12:16:df:d5:9e:aa:a2:
03:4b:e3:a1:db:4b:4f:19:d9:45:db:be:a5:c5:1f:
fd:19:29:40:70:2d:4e:b7:96:46:6a:21:58:74:11:
63:86:7c:42:da:92:ae:d4:de:4d:68:ea:e4:7a:32:
6e:9b:ad:da:ab:92:7d:c1:24:c0:fe:a1:d3:f6:4a:
6a:2c:d6:1a:ad:91:28:1a:4d:00:8c:3b:db:bd:3f:
eb:1d:0b:c3:8b:9d:8d:4d:0d:d2:74:93:b7:47:ca:
3d:05:88:17:f4:1c:e4:fa:f3:db:3c:fc:5f:9d:b3:
92:fc:78:05:cc:3b:a6:dc:35:d8:a7:c7:d3:32:a2:
94:32:62:c2:15:e0:e6:c9:cc:97:87:f1:c3:33:75:
ae:c5:00:24:65:a4:49:62:2e:53:61:54:68:de:b3:
e8:69:6a:5e:ef:8b:b3:2a:4b:fd:36:9d:21:ec:0c:
5e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:26:8C:72:26:E9:86:F9:8F:54:B3:89:E6:8B:04:A6:2C:4F:00:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/779EC110404111EFAB25D78D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.28.0/24
Signature Algorithm: sha256WithRSAEncryption
80:cc:b7:6e:1b:cd:2d:e1:f2:ed:fc:82:b2:a0:45:a8:06:ed:
3b:a4:ad:36:19:1b:5b:47:ee:37:a9:d3:7d:c2:01:4c:a3:2f:
4a:4c:bd:a3:6c:80:75:e2:48:f3:fe:c9:ba:d4:04:6e:e7:6b:
45:ef:e2:bb:06:b0:64:28:b8:77:07:9f:0e:a2:13:4f:f9:6b:
be:3b:4e:4d:ef:6d:6e:1d:8d:cb:73:4d:fc:d0:13:50:4f:ae:
f9:b9:02:f0:63:93:48:fe:2d:2f:60:f2:74:e5:8e:50:2e:64:
24:f2:2d:ca:51:f0:14:73:e7:38:f8:ff:90:47:8d:7b:7f:a6:
d3:48:e1:6b:b3:01:be:f6:91:26:91:41:5e:06:f6:76:7f:0a:
f7:d1:75:69:bc:9d:4f:b0:8e:95:57:42:e0:ae:5f:7d:8e:bf:
85:24:62:fa:e7:13:16:d7:26:aa:d2:ab:1e:cf:43:21:59:e4:
8f:db:f3:bf:a1:74:21:8b:e1:99:2b:a1:af:20:98:09:07:7d:
c1:db:28:8d:55:61:0c:f1:01:41:ee:4c:df:7f:b8:ad:58:f5:
31:e3:e4:e0:31:db:58:a2:33:68:bc:45:2a:2f:b3:d9:46:74:
59:cb:90:41:3d:42:bd:84:3e:d4:4b:1e:72:36:1c:76:52:8b:
3a:60:c0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 04:26:00 2024 by rpki-client on console-fra.rpki-client.org