Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80B2F238441711EFB91AFA56762E951A.roa
File: 80B2F238441711EFB91AFA56762E951A.roa (raw, json)
Hash identifier: A6t/QdnmqkRedvoVvr84+WO4mzONRlOy+YkiuynbQnU=
Subject key identifier: 35:F8:1F:49:C4:9C:5A:D6:AF:D1:1E:EB:13:A3:20:E0:32:74:67:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D28
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80B2F238441711EFB91AFA56762E951A.roa
Signing time: Wed 17 Jul 2024 08:35:21 +0000
ROA not before: Wed 17 Jul 2024 08:35:17 +0000
ROA not after: Sat 27 Jul 2024 08:35:17 +0000
asID: 5065
IP address blocks: 156.233.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40232 (0x9d28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 08:35:17 2024 GMT
Not After : Jul 27 08:35:17 2024 GMT
Subject: CN=66978249-4b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:10:dd:12:b6:0e:f0:44:24:c5:a8:9a:1d:
08:80:b0:1f:ce:90:95:ce:05:0a:9d:62:83:6c:22:
69:6c:bf:a1:e8:fc:cd:9a:81:5b:bc:bb:04:ca:18:
6d:ca:45:84:c6:fc:4c:7d:20:c4:5a:73:18:03:f7:
79:a3:3c:0e:7d:07:19:be:5e:7b:da:f4:5c:62:ba:
16:f1:2a:51:52:26:3c:36:46:38:22:40:c1:c9:72:
fa:2e:4f:9a:d6:03:27:0d:82:7c:03:ac:b2:66:12:
a6:9a:b5:30:8c:e0:57:14:1b:ee:20:92:95:17:82:
88:f9:4e:d8:88:3f:2c:54:81:1d:81:ba:1f:2f:28:
5d:9f:c7:db:e6:37:be:f5:a0:b9:3a:0f:07:5a:34:
52:39:3c:96:aa:ae:59:c5:fa:4c:12:bd:5a:e2:ca:
59:ae:0f:ee:e0:2e:24:66:f9:7f:c7:ff:61:14:64:
c8:89:93:ad:34:6c:28:91:b3:ee:48:80:33:32:cf:
2b:32:49:76:40:74:a5:85:28:12:59:57:a4:da:f0:
33:76:9c:4d:83:8b:a2:30:78:e3:27:18:6e:a7:ff:
3b:61:77:51:b0:b4:86:75:db:16:23:5d:92:96:55:
bb:87:a4:ed:41:36:ef:c3:bf:14:85:bc:71:8f:9d:
18:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F8:1F:49:C4:9C:5A:D6:AF:D1:1E:EB:13:A3:20:E0:32:74:67:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80B2F238441711EFB91AFA56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.21.0/24
Signature Algorithm: sha256WithRSAEncryption
40:6f:d5:6e:bb:e0:2f:09:71:c3:eb:47:92:7d:40:08:a4:27:
c5:f1:91:5f:ae:c1:21:0d:3e:ff:2e:73:22:9c:9d:48:04:98:
0f:fa:b4:ac:f0:6e:4f:18:06:ff:1d:17:b9:09:1b:dc:27:3b:
7d:28:39:22:36:ba:97:96:19:ae:95:c4:87:d8:90:bf:75:e2:
7b:3a:9e:ca:ff:56:79:87:4a:f8:95:5f:d2:40:03:b3:ef:d6:
55:92:4d:ab:71:13:3f:6b:dd:e2:ec:2b:b3:65:a0:e1:b1:18:
ae:67:ed:9e:48:a7:e2:ac:71:8e:40:49:18:d6:21:d7:58:82:
62:46:86:36:a2:46:6b:76:90:8f:ba:60:f1:c4:eb:3a:36:0a:
a4:99:18:a2:bb:07:bf:78:24:7a:d1:aa:db:67:c5:d7:f3:ea:
56:a9:50:2a:90:72:f7:5c:e7:3c:83:37:b6:25:11:20:c3:85:
24:8c:0f:a8:2f:e9:ba:3f:02:75:34:04:05:79:e2:81:95:db:
1b:30:65:41:96:90:e6:dd:fb:35:dd:cf:91:66:c0:dd:1a:80:
71:46:d6:ae:8e:8f:cc:ec:61:10:c6:14:23:eb:c9:67:63:8a:
52:8e:a9:da:52:9e:8f:69:10:8d:62:b9:c1:ff:a4:2a:14:cf:
b6:1e:be:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:06:41 2024 by rpki-client on console-fra.rpki-client.org