Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6168BAE406811EFACA40E93762E951A.roa
File: B6168BAE406811EFACA40E93762E951A.roa (raw, json)
Hash identifier: 2EasHByIK56dpFa6DAc3UuRqf3W/0OwNpeUS4ZifSxE=
Subject key identifier: 91:CF:46:87:2A:4B:8D:F0:2B:E3:E0:E4:8C:A4:C8:C4:8A:10:58:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9BEF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6168BAE406811EFACA40E93762E951A.roa
Signing time: Fri 12 Jul 2024 16:06:35 +0000
ROA not before: Fri 12 Jul 2024 16:06:31 +0000
ROA not after: Tue 13 Aug 2024 16:06:31 +0000
asID: 138915
IP address blocks: 156.244.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39919 (0x9bef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 12 16:06:31 2024 GMT
Not After : Aug 13 16:06:31 2024 GMT
Subject: CN=6691548b-75b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:d3:98:29:5b:64:ef:b9:c9:4d:ae:37:96:
22:71:86:80:87:42:2f:ca:15:d7:12:42:20:02:71:
51:a2:c9:be:5a:12:7e:94:84:89:03:15:f5:44:2f:
99:82:40:a9:6d:51:56:c6:79:c3:05:4a:0e:46:34:
a0:de:69:a2:c4:98:d9:31:fb:67:c4:8d:81:97:ec:
17:83:60:12:19:f2:52:3d:53:15:84:27:99:a5:53:
2a:a5:6f:d3:c4:52:cf:f5:87:31:11:25:fe:2d:61:
16:d4:9d:a0:60:fe:3c:d1:94:7a:32:c0:e3:cf:e4:
50:da:77:ea:06:80:cb:67:74:3f:dd:19:6b:d3:ea:
d2:ae:46:52:e7:b6:0f:1f:b1:29:3d:d4:28:c6:c5:
fa:f7:74:e4:77:11:0a:8b:0b:80:76:6c:0c:98:46:
5f:39:a4:55:f8:aa:5d:3e:80:68:91:dc:96:be:f0:
52:90:4d:e3:98:21:53:6a:1f:32:61:9d:7d:3f:c2:
fd:26:d9:eb:a0:38:b4:42:d3:42:85:4a:46:ba:7f:
1f:d8:b4:07:b5:de:8c:8c:85:62:47:17:96:d0:e4:
eb:84:71:b4:61:c0:e1:cf:14:e7:07:59:c2:9b:af:
8c:78:3b:55:15:b8:df:d2:3b:40:bc:fa:34:7c:d9:
7a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CF:46:87:2A:4B:8D:F0:2B:E3:E0:E4:8C:A4:C8:C4:8A:10:58:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6168BAE406811EFACA40E93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.17.0/24
Signature Algorithm: sha256WithRSAEncryption
50:3e:22:b3:91:01:2e:ae:48:fc:c4:8b:b6:3b:37:b0:ce:9e:
a9:ab:6f:73:f8:a2:83:13:c5:95:87:ba:65:60:e1:cc:70:08:
1f:a9:29:96:d0:e5:76:00:96:c9:db:a9:a5:56:09:9d:13:0b:
b5:7f:e9:a7:f6:f9:29:ef:b4:c0:d9:fe:fa:9a:73:03:d3:f3:
62:cc:f6:e5:77:72:23:95:ca:b7:58:50:1f:af:67:98:40:41:
3c:bc:4b:ed:27:7e:4e:94:29:7b:c0:1d:50:25:f7:7d:c6:63:
25:29:7b:bc:4d:17:54:bd:e7:cb:d4:3b:b7:26:8e:4d:78:2b:
01:78:b3:d8:d3:bb:a7:35:3b:87:30:f0:09:16:b4:12:46:bc:
13:8a:29:04:a0:9c:7d:f9:ee:f2:c3:8e:18:2a:cf:69:80:02:
7f:71:de:a8:94:94:66:69:c3:6c:bf:dd:d4:20:8d:47:cd:3a:
89:e3:d0:e6:eb:3b:79:a2:cf:e0:24:ba:5f:45:05:fc:48:7c:
6c:c8:6e:46:38:b8:78:4d:b5:82:5b:2f:e7:d3:63:21:87:d3:
77:ad:fb:1e:04:7a:b8:54:41:1e:65:d4:e1:13:92:27:43:12:
d9:e0:ce:76:e3:2b:7d:5a:8e:37:38:b6:2a:4e:c6:26:2a:fb:
40:0c:d0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 05:05:46 2024 by rpki-client on console-ams.rpki-client.org