Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DA92F0E404011EF9237F688762E951A.roa
File: 9DA92F0E404011EF9237F688762E951A.roa (raw, json)
Hash identifier: 0EiexVg3SBVu4aaqs17hj0gviW9fxWqv3CVqEITvkCo=
Subject key identifier: 95:0C:F0:61:99:73:8F:2B:EF:53:DF:76:84:F7:20:C1:D2:37:A5:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9BC9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DA92F0E404011EF9237F688762E951A.roa
Signing time: Fri 12 Jul 2024 11:19:34 +0000
ROA not before: Fri 12 Jul 2024 11:19:31 +0000
ROA not after: Tue 13 Aug 2024 11:19:31 +0000
asID: 138915
IP address blocks: 156.244.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39881 (0x9bc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 12 11:19:31 2024 GMT
Not After : Aug 13 11:19:31 2024 GMT
Subject: CN=66911146-5822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:07:2f:a9:c0:9c:f7:76:bd:1d:eb:67:57:
94:26:7f:18:fc:28:91:58:42:36:f0:3b:ed:50:fd:
e8:7b:0f:51:81:a1:b4:fe:77:9b:b3:64:38:c5:b3:
0f:91:fb:c9:ee:ee:6b:0f:8d:4b:73:c7:2d:16:f8:
ca:2f:9b:97:9d:1c:57:0e:f7:54:ec:d9:92:f6:fe:
04:2d:ec:45:cb:c0:53:07:26:69:fb:5f:ce:e4:38:
00:4c:b2:f8:99:12:79:83:5a:19:a6:2f:3b:6d:ff:
59:c2:da:aa:3e:ff:89:1d:67:1e:a2:c4:91:bb:a5:
00:89:d7:b7:3f:40:28:91:55:2d:87:5c:50:57:c4:
10:76:5b:c9:40:73:a5:2c:b7:89:67:45:0a:31:24:
27:e7:dc:7a:29:89:57:a3:2c:4d:3f:51:6e:d9:37:
2a:fe:0f:5b:3f:eb:20:c5:4e:d4:ce:82:ee:03:b7:
c2:8b:fa:6a:19:c9:ed:43:d5:e0:38:fc:0d:52:7f:
8f:74:3a:e7:53:76:ab:06:22:87:7a:f5:f7:e4:c8:
81:ea:0b:5f:8b:9f:75:b7:a2:e9:ff:e3:9e:0e:22:
c6:18:ca:ba:10:75:84:13:8c:aa:d3:d9:7a:bd:2f:
cd:f4:4a:2e:12:06:73:fd:8c:a9:1f:43:de:48:44:
1b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0C:F0:61:99:73:8F:2B:EF:53:DF:76:84:F7:20:C1:D2:37:A5:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DA92F0E404011EF9237F688762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.35.0/24
Signature Algorithm: sha256WithRSAEncryption
11:77:6d:f2:74:36:d3:19:46:5a:b7:97:e2:92:b2:da:67:c7:
84:4e:ec:b3:bb:8f:8e:3f:44:64:51:0b:b6:80:c8:ef:8f:dc:
18:c5:c6:8b:d8:5f:62:84:40:27:04:15:25:14:dd:cf:b6:05:
3f:4f:f9:c9:c3:d7:4f:31:8a:68:ed:5c:8d:f1:29:bc:aa:73:
86:8f:c4:b5:97:e0:ac:0d:a8:28:0d:69:c0:1e:78:03:6e:84:
69:ac:68:ff:12:b3:26:53:8b:23:57:20:07:89:6c:c0:37:07:
19:e3:8c:07:b4:41:1e:cc:74:6e:14:54:5d:45:11:7b:d1:e0:
08:0b:92:8c:48:74:e0:c8:2b:d6:39:99:b3:94:c0:84:a9:fa:
41:fe:00:dc:3a:c8:e1:a6:51:83:74:fc:ce:c5:fe:59:cd:ed:
7b:05:59:c0:2b:c3:ff:5c:f9:fa:2f:aa:13:73:a6:82:06:2c:
31:11:eb:de:75:88:1f:88:6c:07:5f:62:fd:b0:59:09:ea:e7:
ec:2b:a6:c9:21:f4:df:9c:30:c7:0d:3d:9d:14:20:68:41:16:
34:51:f5:db:db:98:6a:fd:85:0d:b6:72:4e:fd:67:66:99:43:
7d:16:ef:c7:04:dd:85:4b:b3:93:2e:ad:d9:9e:d1:50:ac:85:
46:3c:f5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 04:26:01 2024 by rpki-client on console-fra.rpki-client.org