Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F116A9202F711EFA26EC012017001B1.roa
File: 7F116A9202F711EFA26EC012017001B1.roa (raw, json)
Hash identifier: xWROB2hjkUSMz/+w8SI3RcG87OKWH0Yoib7FO2nL8LQ=
Subject key identifier: C8:3B:9D:56:DF:7D:A6:8E:2A:39:71:52:A4:5F:27:A9:6B:72:25:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 850F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F116A9202F711EFA26EC012017001B1.roa
Signing time: Thu 25 Apr 2024 11:32:28 +0000
ROA not before: Thu 25 Apr 2024 11:32:25 +0000
ROA not after: Sun 05 May 2024 11:32:25 +0000
asID: 39600
IP address blocks: 156.252.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34063 (0x850f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 11:32:25 2024 GMT
Not After : May 5 11:32:25 2024 GMT
Subject: CN=662a3f4c-496d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:61:ab:6f:fb:9e:51:bf:c1:72:c4:0c:ef:d6:
59:04:97:ba:ce:31:d9:49:b2:03:03:02:3e:f3:a1:
4e:17:e3:21:dc:17:ab:b9:4f:6f:b7:4d:da:b9:b7:
e7:41:e0:81:57:77:d3:91:21:67:d6:d4:f4:83:aa:
0e:ee:c0:49:82:6e:c5:ef:69:8b:73:6e:15:5d:a6:
bf:99:a4:e9:ef:69:8e:70:72:15:59:8b:a7:5c:94:
7b:ae:55:d9:b8:ce:05:78:97:38:d5:ac:5f:37:d2:
47:fb:13:35:42:d0:f5:c1:16:fc:c4:fe:2d:5f:f8:
fd:a7:fd:81:0b:bc:94:ac:07:c1:4d:d0:c1:2c:87:
33:08:b0:62:0f:8b:8f:22:8f:02:bd:1f:eb:cd:63:
dd:0d:77:a1:b7:db:2a:5f:de:78:b3:5c:25:84:e7:
5f:d8:26:57:27:ab:0c:a9:74:5f:35:0c:fd:01:26:
8e:78:39:60:1c:62:3a:90:f5:5a:ba:e8:7b:4a:3a:
84:7b:3b:0c:e2:8e:17:09:08:54:20:ea:40:5c:53:
06:1f:a8:aa:e3:c5:ec:96:8a:83:3f:27:8d:67:90:
4d:6e:48:4d:d0:a2:5b:d2:af:37:18:f9:59:ae:e0:
84:5c:e3:1c:87:2c:4d:88:8a:17:36:f4:ac:50:fb:
04:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3B:9D:56:DF:7D:A6:8E:2A:39:71:52:A4:5F:27:A9:6B:72:25:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F116A9202F711EFA26EC012017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.12.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:70:af:13:b7:19:20:1d:e4:2e:86:ef:09:6e:27:4a:00:84:
0d:af:9b:b1:92:66:9b:1c:e0:3b:22:6b:20:ac:f3:d4:9f:74:
20:31:12:a1:a8:0b:44:8e:ac:5e:05:5e:79:d9:20:cb:13:c0:
a5:2f:65:d2:90:2a:ac:c2:9c:2a:33:f7:88:2c:fb:88:21:17:
fc:0a:48:6e:ed:bb:c4:7c:7a:e0:43:7e:2e:2b:4b:62:ba:ad:
d7:97:e6:66:c4:16:ed:d9:2d:73:86:0a:c0:b7:a9:ff:37:d5:
eb:38:37:21:f8:06:2d:9f:bf:eb:fe:3d:fc:7c:47:bc:91:97:
c9:5b:7e:6e:e4:91:55:5d:80:9e:bb:a3:81:68:a0:6d:4a:2d:
dd:8f:80:00:65:aa:07:ba:61:b6:a3:e6:c7:b6:6e:6e:3a:5c:
39:79:22:17:df:bb:77:26:15:5c:46:f9:b6:01:10:08:af:a0:
ef:00:f4:e5:82:6a:79:24:5d:d9:03:96:26:c2:20:3b:06:46:
00:43:cd:40:ef:17:a5:89:d3:e9:56:20:92:0d:5b:89:82:c4:
7a:ff:35:ac:4c:af:13:56:f0:c3:f5:6b:36:cd:24:9b:c9:d3:
e0:bc:f0:6d:ff:8a:8f:9a:71:aa:78:b7:ff:52:af:29:5e:86:
00:f7:be:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:18:25 2024 by rpki-client on console-ams.rpki-client.org