Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1CE710271B711EBA9525A41F8AEA228.roa
File: B1CE710271B711EBA9525A41F8AEA228.roa (raw, json)
Hash identifier: 9VwHPj2VT7BVW+jn6TXyJbcRe+WvHtDZix7bifu3RwM=
Subject key identifier: 79:4E:58:9D:4B:0D:9F:CF:79:8A:24:59:4B:76:60:BA:70:26:F7:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 04D3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1CE710271B711EBA9525A41F8AEA228.roa
Signing time: Thu 18 Feb 2021 07:05:34 +0000
ROA not before: Thu 18 Feb 2021 07:05:29 +0000
ROA not after: Wed 18 May 2022 07:05:29 +0000
asID: 29074
IP address blocks: 156.246.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1235 (0x4d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 18 07:05:29 2021 GMT
Not After : May 18 07:05:29 2022 GMT
Subject: CN=602e11be-4db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ca:f2:84:53:6b:29:f0:3a:bf:f5:b8:e2:00:
17:29:70:46:60:60:d3:20:72:a6:37:36:9c:84:93:
51:ed:24:11:31:82:85:1e:54:a2:40:1b:3f:45:2f:
0a:d4:d4:a6:1b:9a:e6:bc:b3:5a:07:7a:2a:ca:2b:
42:02:53:3d:2a:64:48:ff:4a:a2:88:a2:98:39:29:
dd:41:32:4b:2e:f0:28:24:a8:f2:f1:00:a2:84:28:
97:36:54:54:4c:48:1d:56:3a:ea:2c:56:c4:19:43:
65:68:80:8d:58:48:56:9f:e1:27:c4:9d:59:89:53:
32:ce:a5:26:99:a5:f4:97:18:47:cb:b3:c8:a6:8f:
d7:df:6e:ff:20:f9:58:01:90:ca:68:16:bd:e2:3b:
67:2c:0a:24:6a:ce:0f:bf:ec:a6:95:b8:ac:4a:3d:
90:13:31:24:52:10:68:38:01:6b:7e:e0:df:42:3c:
c7:38:f5:ae:92:83:0d:e4:bc:2d:b9:3f:86:c0:f9:
02:6b:6e:cf:ee:4b:f5:9a:3b:f3:58:a8:d1:90:52:
c5:3c:63:ce:c9:23:3d:ba:d5:de:a7:16:75:1d:05:
f7:84:a0:2b:09:62:68:63:3e:0b:98:71:f6:c1:35:
d0:b8:37:5e:3e:a6:07:d5:16:05:1f:1c:2e:c2:e6:
b8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4E:58:9D:4B:0D:9F:CF:79:8A:24:59:4B:76:60:BA:70:26:F7:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1CE710271B711EBA9525A41F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.24.0/24
Signature Algorithm: sha256WithRSAEncryption
44:1c:c3:3b:64:0a:a1:9c:b4:49:e9:5a:fe:72:f1:cf:d4:36:
b3:2d:b8:28:be:b0:bb:a4:44:d9:43:42:e8:0c:5c:07:0d:70:
91:18:90:31:7e:51:54:af:9b:71:ce:5f:a9:23:b8:9c:d6:93:
44:83:68:d1:3d:2b:5e:bd:3d:b8:48:82:55:73:65:15:d6:d9:
0c:63:e8:40:4c:7e:32:b5:74:4e:57:f8:fe:f6:c1:05:d8:07:
4a:56:8c:2e:c2:9f:67:1d:20:c2:31:83:b5:4e:cd:4c:78:4f:
ee:12:a3:79:20:63:95:bb:42:0b:55:f1:61:da:d8:f9:70:aa:
96:4c:1b:38:12:25:b4:a9:c3:bc:07:da:c0:0d:e0:89:5b:ea:
46:d1:ba:55:46:43:e5:4a:aa:79:6d:c7:53:51:25:13:1d:78:
22:e8:6b:50:6a:3b:0f:e4:49:27:ca:90:87:b7:11:ad:23:6e:
87:cb:10:77:b2:97:39:12:7b:a2:54:f7:c1:75:ec:cd:f9:c9:
1e:dc:6b:15:5e:c3:29:bf:fd:87:c9:55:b0:a4:30:94:d9:0f:
fb:b8:4c:90:ff:d8:5d:ad:18:ab:7e:96:5d:45:1c:a9:84:4f:
f4:10:00:fa:4d:7e:73:2b:2a:fc:c3:de:62:10:bc:c6:06:37:
97:51:6d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-ams.rpki-client.org