Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1DC8226321011EFBEB317A5762E951A.roa
File: A1DC8226321011EFBEB317A5762E951A.roa (raw, json)
Hash identifier: jRWmMWbBMdH9mUK9zNg0RoIqhsZlJ9kSVTWirsAZUNo=
Subject key identifier: AD:CF:51:6B:22:54:ED:52:25:29:09:43:2B:53:B5:B2:BE:AC:52:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 945D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1DC8226321011EFBEB317A5762E951A.roa
Signing time: Mon 24 Jun 2024 10:00:49 +0000
ROA not before: Mon 24 Jun 2024 10:00:46 +0000
ROA not after: Sat 27 Jul 2024 10:00:46 +0000
asID: 20473
IP address blocks: 156.236.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37981 (0x945d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 10:00:46 2024 GMT
Not After : Jul 27 10:00:46 2024 GMT
Subject: CN=667943d1-b925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:3d:45:c4:a2:65:f4:4e:9c:85:29:b4:1d:
02:66:0f:eb:39:b0:d3:79:e2:f2:2c:6d:e5:e6:f1:
43:ed:a0:41:95:cc:88:d6:79:f8:c9:d1:e9:53:b2:
ab:77:b4:64:cd:f2:1b:93:61:b2:f0:e2:1d:93:7b:
4d:ea:18:21:21:ff:0b:9e:d8:37:f2:58:ce:7f:91:
ee:d5:a0:33:1c:ac:7d:d8:40:d6:3a:88:f2:b9:84:
49:04:d1:4d:8a:5c:fc:6e:74:90:3d:e5:12:07:0b:
94:02:76:f9:73:0b:9d:32:3f:a4:3c:92:2e:7a:9c:
b5:b2:e0:d7:47:10:88:78:92:02:d7:cd:6e:75:a4:
2f:e1:b1:03:df:e9:3e:27:22:b3:eb:c4:fc:10:e4:
7f:2c:43:7d:2e:87:59:53:88:f8:90:41:b2:da:4c:
bb:d2:21:ad:dc:59:39:cf:ec:f0:ea:ac:49:19:b0:
46:89:6d:73:76:09:d2:a4:50:01:2d:80:b0:f3:fc:
88:1a:c2:49:3d:ff:d1:e9:c2:43:c1:dd:b2:37:30:
21:95:cc:b0:85:6d:46:b8:4c:13:d1:73:00:5f:85:
db:cf:85:93:de:1c:e2:73:ef:81:6a:c4:1b:e4:99:
43:f7:59:33:4a:11:0b:c3:52:51:17:7a:c5:85:c4:
b6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CF:51:6B:22:54:ED:52:25:29:09:43:2B:53:B5:B2:BE:AC:52:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1DC8226321011EFBEB317A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.77.0/24
Signature Algorithm: sha256WithRSAEncryption
60:20:01:3a:8f:30:f4:b4:f9:ef:d2:de:f1:a8:86:18:52:40:
1f:eb:a0:1f:b6:8e:d1:9b:1f:c0:f4:4d:59:c0:57:35:6c:8b:
e7:a1:89:33:55:53:13:15:3e:f5:cc:32:8c:5a:b8:38:9e:c9:
39:73:4b:d3:76:34:9a:5b:f9:13:ec:bc:af:d1:0b:93:84:c7:
05:d4:ad:a8:5c:6a:32:4f:a0:67:05:fb:d1:38:24:de:19:24:
57:a0:bd:42:48:f5:5b:4b:65:ad:f8:76:cf:e8:89:b3:c3:42:
42:79:5a:25:e6:b7:02:73:dc:ee:e9:29:ff:a8:f3:e5:a4:0c:
cd:4c:0d:ca:2e:64:9d:89:5d:42:c7:1e:1a:bb:6c:86:fd:4f:
57:a1:d6:8b:b4:28:b1:45:2a:c0:5b:3e:54:88:51:ac:4b:16:
c7:7e:f9:67:9c:b8:ca:bd:5c:ff:b8:8b:32:f3:ab:bb:ed:7a:
d2:05:1d:8e:db:0b:1e:96:95:1a:19:3c:bc:1e:b6:65:17:fc:
94:79:00:de:38:c8:84:72:ec:44:00:56:e7:be:55:46:f6:24:
b2:a2:7b:23:fc:e9:65:b4:92:86:40:7d:ca:90:76:67:5e:30:
12:83:a4:87:f2:34:30:ca:66:26:a5:0c:98:05:83:27:13:59:
ee:72:a1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:03:27 2024 by rpki-client on console-ams.rpki-client.org