Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A495D86A429511EF9F7D934A762E951A.roa
File: A495D86A429511EF9F7D934A762E951A.roa (raw, json)
Hash identifier: PdGH6obPw7POgr3VZvQMgmj52VabGAyYra3QFML2BXU=
Subject key identifier: A7:92:33:C7:C6:1E:47:8B:29:1C:BD:44:45:22:8A:8C:2A:35:B5:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9C9A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A495D86A429511EF9F7D934A762E951A.roa
Signing time: Mon 15 Jul 2024 10:33:15 +0000
ROA not before: Mon 15 Jul 2024 10:33:12 +0000
ROA not after: Sun 01 Sep 2024 10:33:12 +0000
asID: 149440
IP address blocks: 156.227.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40090 (0x9c9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 15 10:33:12 2024 GMT
Not After : Sep 1 10:33:12 2024 GMT
Subject: CN=6694faeb-631e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:62:18:60:d0:af:c5:e2:2c:f4:4d:b8:32:
04:c1:88:d3:e5:c7:5a:26:5d:f6:78:e3:9f:1a:df:
74:b1:5d:e3:ce:41:27:e9:41:7a:40:6c:c7:7e:f3:
ba:47:90:4c:9b:dc:ba:e6:ce:50:ad:24:51:3b:fd:
d0:46:73:28:d3:78:f4:62:1f:3c:27:85:8b:cf:6f:
75:eb:e0:24:51:94:68:58:98:21:08:6e:da:bb:82:
0d:ba:43:0b:b2:a6:67:90:3e:b3:f8:9f:51:63:2e:
52:fb:6e:65:ed:b8:4d:4c:b5:41:ef:21:27:18:2b:
1c:bd:82:4e:ff:1f:02:b3:d5:2b:d0:39:47:c0:9f:
c4:5b:53:a6:90:3f:42:ee:71:48:6a:93:29:ad:ab:
b1:b0:d3:09:0f:5c:bc:d0:bd:a7:28:b8:c9:15:25:
22:9d:1c:ab:5b:8c:46:00:e7:db:89:b2:c2:c2:33:
a0:37:62:b8:64:4d:9d:3a:72:71:bf:5d:50:58:e6:
1d:ff:1f:4d:4a:41:7b:c3:6d:27:67:88:72:b4:c6:
56:26:99:b1:76:90:12:e0:dd:e9:b9:f4:51:dd:95:
55:68:67:70:5b:5e:21:50:b6:b8:ee:53:98:01:39:
c1:2f:a6:9a:0b:d7:f3:22:c4:bf:93:3c:bb:82:c4:
0b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:92:33:C7:C6:1E:47:8B:29:1C:BD:44:45:22:8A:8C:2A:35:B5:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A495D86A429511EF9F7D934A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.0.0/24
Signature Algorithm: sha256WithRSAEncryption
46:8a:b5:24:69:1b:2f:72:b2:68:ff:6d:8f:ff:d0:8d:98:c7:
b7:ea:12:3d:89:89:b0:91:f1:5e:b4:7b:a4:9d:04:5e:8d:a8:
91:23:57:27:44:32:5c:3c:4d:17:a5:28:b0:51:c1:e5:15:27:
c3:98:41:69:7c:ca:d1:49:1e:cc:b8:4b:63:19:ac:f1:d8:67:
5a:27:a1:6f:23:c3:42:20:b0:eb:6a:6c:c0:f8:ab:09:bf:3e:
02:e8:17:c8:76:aa:fa:6d:12:7c:c4:e4:8f:b3:90:8b:ca:ad:
c2:6c:5d:b1:b0:a7:51:fb:ba:d5:d5:de:51:76:08:bf:d0:51:
86:3a:9b:df:36:00:83:c0:a0:33:ed:c6:31:ef:6a:57:ed:d6:
70:36:42:fe:f0:88:7d:f7:64:82:5f:ef:8d:c0:38:da:1d:23:
23:bb:69:d8:d8:7b:47:ac:d8:c7:2b:f8:c9:33:7a:60:22:eb:
6d:18:62:fb:b8:7b:77:1b:b4:49:bf:0b:b1:82:d8:6f:dd:54:
c7:ef:90:6f:9c:21:e6:63:39:86:0b:b6:ea:de:e1:12:8c:33:
32:75:44:cb:db:3a:83:7e:9a:2d:98:6b:2d:8d:f9:cd:c9:a7:
c8:11:14:89:7d:96:98:13:91:2d:f7:a1:c8:6d:ec:3a:43:01:
5e:a0:fb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 1 13:55:21 2024 by rpki-client on console-fra.rpki-client.org