Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77AC6B1EE47811EEA74B7095775412E6.roa
File: 77AC6B1EE47811EEA74B7095775412E6.roa (raw, json)
Hash identifier: ipPPQIKR2/tgQeTs+R/6U7nlUm7ceG+J6FrM3LXOajg=
Subject key identifier: 07:BE:36:C5:AA:FD:D9:26:D9:FF:F8:F0:E8:0D:04:04:FE:43:30:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7EA4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77AC6B1EE47811EEA74B7095775412E6.roa
Signing time: Sun 17 Mar 2024 16:07:35 +0000
ROA not before: Sun 17 Mar 2024 16:07:32 +0000
ROA not after: Thu 02 May 2024 16:07:32 +0000
asID: 149440
IP address blocks: 156.236.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32420 (0x7ea4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 17 16:07:32 2024 GMT
Not After : May 2 16:07:32 2024 GMT
Subject: CN=65f71547-3b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:09:f8:94:8d:9c:b1:8c:e8:0b:d3:51:e5:29:
03:cf:36:7d:98:31:bf:04:84:76:d8:96:3e:30:2e:
f9:e1:fb:08:46:e9:06:4a:cd:d0:91:5b:21:99:61:
6e:22:cd:ea:b5:ca:87:3f:00:18:0c:a2:f2:bc:cd:
68:74:0d:81:16:46:56:b5:38:66:f2:93:3c:48:1c:
89:6d:9f:78:cb:c7:92:01:27:ec:87:a2:71:15:2d:
79:ce:c9:00:ec:34:b8:50:51:4a:02:3b:6a:a4:c0:
10:17:a7:31:25:da:3e:7f:e1:7a:f3:57:ae:cd:c8:
29:92:f4:f8:c9:58:e0:c7:31:d2:5d:6e:33:47:23:
b9:f3:06:3c:f6:7e:f6:85:9d:85:33:71:38:9e:c6:
a3:f9:3c:29:3d:1c:02:83:f8:16:b6:a0:17:fd:36:
00:35:f3:99:2a:6d:0a:8d:e4:20:6e:87:d8:ce:68:
08:6b:f9:bc:e0:48:26:1e:23:f4:4f:dc:85:e6:ea:
0d:a1:d2:b4:70:21:1f:1e:c5:33:37:19:df:9d:11:
ee:5a:f8:41:4e:4c:e9:10:ca:40:38:29:48:26:53:
d8:ea:29:e0:bb:57:1c:b3:24:a0:c9:ae:29:cb:76:
9b:fd:cf:84:33:30:08:cc:46:56:f7:6b:62:11:9c:
e3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BE:36:C5:AA:FD:D9:26:D9:FF:F8:F0:E8:0D:04:04:FE:43:30:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77AC6B1EE47811EEA74B7095775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.76.0/24
Signature Algorithm: sha256WithRSAEncryption
48:c6:4a:3b:2a:75:49:69:07:6f:94:54:c3:f3:f5:d8:d3:30:
b3:d0:7e:d0:53:4b:81:9c:cc:f3:dd:3a:78:c9:56:86:49:6e:
cd:37:4f:d4:e4:61:f5:39:ad:c2:71:cf:86:5d:7d:c7:1d:94:
e0:25:73:70:a8:3a:a3:3d:2b:56:d9:6c:bb:d5:e9:54:b2:1e:
00:07:97:fd:62:d3:69:ea:2c:6f:5d:df:b2:68:d3:36:0f:51:
bd:59:16:d2:ee:a0:aa:ed:bc:86:4a:1d:d1:4f:50:de:fd:3b:
b3:b8:83:58:a0:9f:d3:2f:28:17:d2:cd:6d:7a:47:23:2f:2e:
5c:ad:5a:32:21:56:e6:7f:b9:8a:64:c5:01:83:a2:70:d0:d8:
3d:8c:86:fd:2a:c5:6a:49:5e:41:ff:5c:9e:dd:e5:35:8d:0a:
d9:76:b8:ac:fc:7e:8a:c6:a6:ba:d6:59:0d:d0:f3:6e:e6:19:
c1:b6:49:da:5b:9c:8b:c5:6b:84:0d:13:a8:44:68:c7:4a:25:
c7:cb:b6:0c:11:24:5e:47:e4:94:44:7f:e0:50:d8:75:0e:31:
5e:53:7b:11:05:ca:7e:52:08:e9:f8:58:42:45:aa:95:4e:99:
b9:d2:4c:83:cd:30:4a:e7:b9:c6:09:ab:66:1c:2d:e3:c9:42:
6f:e5:ae:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:52:32 2024 by rpki-client on console-fra.rpki-client.org