Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A636D386499311EFB5E2AD9C762E951A.roa
File: A636D386499311EFB5E2AD9C762E951A.roa (raw, json)
Hash identifier: Xf/T4J8DZcy9SfkhVUo5uUpgXbqunyxhjbynsDex94Y=
Subject key identifier: 78:F0:19:37:74:EE:E2:CA:CE:95:FB:13:D3:29:93:0C:2A:5B:49:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9EE9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A636D386499311EFB5E2AD9C762E951A.roa
Signing time: Wed 24 Jul 2024 08:06:37 +0000
ROA not before: Wed 24 Jul 2024 08:06:34 +0000
ROA not after: Fri 23 Aug 2024 08:06:34 +0000
asID: 202656
IP address blocks: 156.246.192.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40681 (0x9ee9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:06:34 2024 GMT
Not After : Aug 23 08:06:34 2024 GMT
Subject: CN=66a0b60d-4c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:0e:67:7b:b5:66:6f:32:e9:b3:1b:9c:30:
0b:56:c1:b1:e5:a9:66:3f:82:e8:14:3e:f5:c1:dc:
95:57:70:24:4f:44:57:02:a5:40:1e:d3:91:2e:86:
9e:c0:78:29:ae:16:60:b8:8a:4e:69:85:f5:64:98:
61:03:03:03:21:6e:1f:2d:39:b2:d6:02:dd:c8:53:
26:7c:13:e9:f2:6b:33:66:9b:9e:b0:be:5c:1b:19:
24:e0:68:71:7c:bc:6a:fe:e2:0b:df:78:3a:ad:f1:
3c:89:fe:c7:ad:59:13:5e:0d:73:58:66:b8:c5:d6:
33:19:a2:47:1e:41:09:f5:72:a0:4a:8c:d4:32:bb:
5b:99:c8:37:a7:ca:e5:ae:ed:d2:5f:79:e0:e7:57:
df:e4:c7:8e:01:8b:a6:e8:8d:84:ef:91:77:12:18:
51:04:93:51:2a:ad:72:0d:8c:01:7e:18:9e:d1:9f:
b4:d2:b7:e9:ce:19:1b:0f:f1:aa:f4:22:45:5a:b7:
e7:55:9c:16:38:80:22:f1:02:25:be:4c:5c:30:c7:
65:18:56:0e:31:b3:9b:e5:9d:1e:48:5f:e4:06:87:
c9:cb:69:3a:5f:0c:55:47:9b:e3:87:e5:5e:5f:4d:
a3:83:66:4b:e4:b7:4b:42:6d:d1:3a:24:16:11:2c:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F0:19:37:74:EE:E2:CA:CE:95:FB:13:D3:29:93:0C:2A:5B:49:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A636D386499311EFB5E2AD9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.192.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:44:d6:90:24:df:55:dd:e5:a4:5b:1f:a6:9e:e2:69:53:d8:
7a:9b:c1:84:78:5a:cf:3c:c8:d6:a2:a6:10:76:f7:98:8c:5a:
ad:d5:2b:07:86:f6:7f:db:83:2a:58:eb:73:ac:93:dc:5e:65:
bb:0b:77:17:30:b4:90:6d:fd:fa:33:c3:1a:e4:5c:16:fe:29:
ba:18:f7:dd:47:0e:48:25:a9:b6:8c:4e:53:76:4d:8a:3d:f3:
a5:02:cb:ed:82:37:32:03:8e:5a:05:ff:7e:70:c3:dd:6d:c3:
5a:88:f8:5d:13:a0:53:c4:6e:ad:a6:be:b4:1d:6d:9d:bc:b1:
95:f7:6c:b6:2d:0a:3c:e3:27:da:0e:23:56:e0:71:92:45:8a:
4a:e1:a0:b3:a6:30:42:ee:05:dd:58:d0:bf:b8:7d:12:cf:0f:
09:c4:90:ae:57:ef:cf:d6:0e:68:27:8f:2b:b5:d6:d8:26:47:
0a:3b:29:f6:18:69:1a:e2:7c:91:cf:54:99:27:07:e7:85:76:
be:95:32:2d:c3:f3:1b:14:3e:df:a6:1d:fa:46:13:3d:0b:ab:
c3:b0:51:51:95:80:98:7a:94:0c:fe:f5:f3:e0:e2:e4:39:77:
61:31:71:66:41:78:c6:1f:cf:7f:40:bf:dc:b0:be:5c:c1:42:
fe:9c:e3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:48 2024 by rpki-client on console-fra.rpki-client.org