Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EF77606404011EF96FF9688762E951A.roa
File: 7EF77606404011EF96FF9688762E951A.roa (raw, json)
Hash identifier: thV4hki8seDL2heSSITqE8JyHd199gJW8EIgx3BBnLw=
Subject key identifier: 37:0B:9B:D3:45:8C:A3:64:55:26:F4:15:C2:4D:2B:10:DB:75:3F:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9BC7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EF77606404011EF96FF9688762E951A.roa
Signing time: Fri 12 Jul 2024 11:18:43 +0000
ROA not before: Fri 12 Jul 2024 11:18:39 +0000
ROA not after: Tue 13 Aug 2024 11:18:39 +0000
asID: 138915
IP address blocks: 156.244.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39879 (0x9bc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 12 11:18:39 2024 GMT
Not After : Aug 13 11:18:39 2024 GMT
Subject: CN=66911112-a3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d3:db:98:59:6a:5f:4a:fb:9b:8b:c6:56:84:
9f:f2:a1:9c:37:de:30:f0:0b:f3:52:b1:eb:2d:27:
08:82:43:d2:80:ac:d8:13:b1:2b:25:19:17:73:6f:
aa:c7:d0:5b:35:f4:1d:7c:ed:ce:b5:e8:bb:79:ad:
42:e9:2f:cb:76:2e:9f:91:88:d2:3a:fb:97:0a:62:
01:71:82:47:b1:b2:f4:75:f5:65:38:7d:a0:f2:78:
41:84:f6:24:71:fc:b2:c7:ea:21:a5:a7:a4:2d:9d:
6e:eb:ce:68:03:2d:bd:3b:b1:1b:e4:77:33:2b:77:
4b:b1:94:77:15:38:91:cb:2a:ab:bd:9c:18:42:12:
95:fe:bc:fe:68:43:f3:51:1e:6e:c4:82:56:1c:38:
31:24:0a:7d:e5:c4:2d:75:94:a9:44:20:76:55:5a:
26:f2:7b:11:e1:dd:9a:ac:74:be:4f:25:bc:6a:18:
34:da:84:4b:b8:d3:37:f2:aa:c1:76:3c:01:a3:a6:
a6:c1:24:93:dc:b4:1f:e4:05:5f:17:97:28:2f:7d:
73:6d:70:dc:47:ff:34:9d:72:2b:9b:11:ab:80:7b:
bf:79:57:41:17:59:28:0a:51:dd:b3:8f:87:38:13:
34:d6:13:c6:6a:35:46:dc:53:fb:0b:83:dc:35:70:
a6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0B:9B:D3:45:8C:A3:64:55:26:F4:15:C2:4D:2B:10:DB:75:3F:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EF77606404011EF96FF9688762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.36.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:dd:43:86:95:d9:1a:26:dc:14:0b:83:6a:c0:a7:22:a0:38:
d3:e5:22:a6:a5:49:c6:07:b4:4b:38:4e:1e:bc:5b:85:3d:05:
40:10:98:ca:cc:bf:1c:fa:6c:8e:e1:51:35:fe:35:86:b7:5b:
9b:09:53:ce:8b:12:69:2b:93:d4:63:5d:d3:54:0f:c0:e4:dc:
2a:02:2d:0f:7a:70:08:f5:7c:09:4a:01:20:c3:c7:7a:94:7b:
b8:80:c3:7f:7f:94:94:6a:63:a5:28:6b:63:e4:d5:3a:54:2d:
23:3d:ec:c0:e3:81:68:8a:48:e8:fa:a0:c9:98:a7:5b:b2:90:
51:2b:31:09:3a:79:c8:4e:f2:03:4a:aa:e9:98:8e:4a:31:4a:
d3:1a:e5:7a:39:f1:29:7c:59:97:49:93:15:ae:00:ec:cd:d7:
f1:72:47:6c:12:57:cb:c6:01:0c:74:eb:0a:23:c2:05:93:a7:
83:c8:2e:db:32:71:ea:72:c6:f9:8d:91:ea:c4:0f:dd:b2:93:
cd:19:d8:a1:cf:8d:27:ff:d1:96:dd:9c:d2:25:d4:f2:12:84:
9d:8b:5a:99:a2:56:7f:f8:94:d1:02:f6:51:80:f9:88:2f:b7:
f1:1b:ea:d3:c2:a9:90:49:d8:d4:04:6d:18:2f:47:99:8e:63:
b8:68:1c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 04:26:01 2024 by rpki-client on console-fra.rpki-client.org