Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8433150448C811EFB26C52B7762E951A.roa
File: 8433150448C811EFB26C52B7762E951A.roa (raw, json)
Hash identifier: 6aMKh5z8tXFRNDMNSlLYHByO4wKqocUwdPIHHBAPpcU=
Subject key identifier: 50:B1:9D:03:63:D9:FF:2D:D7:5D:26:9A:0C:E7:B4:66:BA:EE:7A:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E7A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8433150448C811EFB26C52B7762E951A.roa
Signing time: Tue 23 Jul 2024 07:52:32 +0000
ROA not before: Fri 26 Jul 2024 07:52:29 +0000
ROA not after: Fri 23 Aug 2024 07:52:29 +0000
asID: 202656
IP address blocks: 156.246.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40570 (0x9e7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 07:52:29 2024 GMT
Not After : Aug 23 07:52:29 2024 GMT
Subject: CN=669f6140-fd5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:45:dd:6c:35:90:a4:91:a7:09:a9:74:5f:d1:
48:a7:f4:44:64:96:ee:74:51:83:e9:c6:e5:f2:71:
5a:4e:0f:f4:e0:0f:0d:8c:a2:be:e5:da:8c:47:5b:
c7:af:eb:2b:0b:61:c0:bf:86:02:70:bf:92:69:5c:
d1:b9:3b:93:7f:1c:10:cf:d1:de:b4:72:75:7b:c1:
66:84:d4:69:93:c8:1a:1b:55:c8:ce:5c:44:26:52:
34:6f:a6:22:cc:72:e2:7c:99:ff:65:59:53:c1:ff:
90:b1:ff:30:d9:11:b2:b3:b4:f1:21:d8:10:b0:3a:
97:a7:4a:c8:ee:2f:af:93:80:c0:fb:80:41:2f:ad:
fa:82:ea:9c:24:e0:37:80:13:3e:9e:9b:8a:2a:80:
24:72:03:05:cd:70:f5:a1:d8:22:0d:49:41:22:10:
7b:36:8e:29:37:6d:eb:99:67:2f:81:af:99:a6:c1:
d2:ea:7b:2a:a7:be:52:11:ea:34:31:89:37:1c:20:
5c:da:6b:c9:dc:a8:ed:03:51:84:7a:21:4d:ab:f9:
f9:d2:18:b1:24:9b:06:1b:29:9e:f1:35:ee:fb:4d:
ac:36:09:af:23:2f:a5:54:75:1e:f8:39:d2:5b:dd:
89:ae:fb:3f:ab:31:16:e3:fb:42:d2:22:bb:9a:e5:
ef:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B1:9D:03:63:D9:FF:2D:D7:5D:26:9A:0C:E7:B4:66:BA:EE:7A:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8433150448C811EFB26C52B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.179.0/24
Signature Algorithm: sha256WithRSAEncryption
68:61:73:c6:e8:a4:45:dd:61:b6:a3:ca:8a:a3:8d:16:10:00:
c3:6c:6a:1e:7f:b1:f0:a4:84:f9:04:6f:07:f3:86:1b:ae:6c:
0b:d8:07:34:cb:ce:3f:fd:95:df:ec:ab:d8:e9:03:8f:51:46:
b9:86:09:e3:71:98:a1:0b:2f:5a:4a:ba:cd:79:c5:ea:f9:3a:
3b:9e:52:17:de:8b:77:63:6c:59:8a:15:b5:3b:c3:80:5f:30:
f9:37:04:af:b2:6b:fe:12:6e:bc:ce:6e:18:1d:b6:22:ad:9b:
ec:a9:d6:f5:8a:90:8e:4d:07:8c:3d:9a:f9:b7:17:d3:01:da:
60:5f:a1:bb:ae:f7:03:4d:08:5f:33:86:50:5a:67:f6:10:12:
5e:1f:51:2f:e8:aa:23:09:db:ea:6c:50:65:02:e9:d3:c2:ad:
c4:55:f5:62:d7:6b:13:58:cc:4a:0d:2f:d1:62:6a:72:3b:d7:
a2:44:3a:ef:cd:90:db:9c:b1:f2:39:9b:ee:f5:ce:ea:a3:06:
19:eb:30:d1:a6:70:7c:59:b5:8d:3c:bf:46:a9:21:65:ec:98:
8f:6b:1a:a2:30:57:fb:2c:61:fa:72:eb:ca:11:c3:b7:2f:2f:
83:81:98:be:00:d2:70:62:bd:5f:53:84:fd:0a:7d:1e:39:fc:
ae:c1:bc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:48 2024 by rpki-client on console-fra.rpki-client.org