Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B885E3FA353011EF8A7CD394762E951A.roa
File: B885E3FA353011EF8A7CD394762E951A.roa (raw, json)
Hash identifier: 1yiDyHsUoFznai+GJmqzcwqwFa8/91zpKWhtcOFf7RU=
Subject key identifier: 4B:C8:AD:09:FB:F4:70:1E:35:3D:08:0D:B2:29:DD:A8:31:37:FA:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 95D3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B885E3FA353011EF8A7CD394762E951A.roa
Signing time: Fri 28 Jun 2024 09:28:04 +0000
ROA not before: Fri 28 Jun 2024 09:28:01 +0000
ROA not after: Tue 27 Aug 2024 09:28:01 +0000
asID: 399077
IP address blocks: 156.251.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38355 (0x95d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 09:28:01 2024 GMT
Not After : Aug 27 09:28:01 2024 GMT
Subject: CN=667e8224-1b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b7:86:21:cd:f5:f9:be:44:17:10:f1:eb:03:
2d:5b:3f:71:99:5e:7b:ac:31:7d:89:8f:1b:1b:5b:
af:71:cb:fa:88:96:8e:c4:3e:4f:87:61:40:31:9a:
3d:ee:bc:8f:70:7d:3d:38:50:92:4f:e2:3f:1f:5c:
20:4b:4c:e3:d3:37:20:2c:59:06:4d:f2:41:ca:2e:
f2:a4:4b:ec:34:40:11:b1:19:e8:ec:30:f2:7c:d1:
28:18:48:8c:32:6d:23:6b:c2:15:fd:bc:86:ab:5e:
d2:eb:78:bd:58:8b:3d:1a:04:2d:82:d6:d7:24:a0:
ee:aa:d2:47:20:29:f0:87:59:ce:87:bb:a6:12:62:
c6:24:97:81:09:0b:07:b7:2f:c5:9b:ab:7c:34:47:
70:20:72:00:11:15:c3:a5:0b:2b:ef:2f:e2:c1:33:
c2:cd:2e:fe:38:ad:8e:4b:01:37:48:9b:b6:c4:c4:
bb:fa:03:4c:31:35:4c:7d:6e:b0:63:b6:a7:ca:d7:
5e:da:8f:7c:fa:57:58:3b:88:49:9f:f2:4e:c0:58:
b3:7e:22:44:80:34:60:42:7e:c8:34:54:2a:b3:ed:
9c:ef:44:0c:50:69:93:55:cf:f4:4d:77:36:33:16:
e7:c9:fd:58:a7:c5:5d:a1:5e:9c:24:84:b4:b0:5d:
c7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C8:AD:09:FB:F4:70:1E:35:3D:08:0D:B2:29:DD:A8:31:37:FA:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B885E3FA353011EF8A7CD394762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.5.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:2e:ba:77:94:a9:d6:dc:55:66:fd:1b:62:0a:c4:39:5a:ad:
36:e2:8b:7b:72:d0:34:6f:73:7d:7c:9c:a7:5f:f3:3e:ae:fb:
c3:ab:3e:2d:5c:ee:6a:57:20:38:b2:40:b1:b7:ea:7b:18:93:
28:82:56:4c:8f:dc:f1:a8:f9:be:b2:b0:fd:89:49:4d:da:12:
51:78:3a:31:84:80:b6:24:cb:7b:47:ec:6e:ca:58:59:a0:f9:
f6:3b:5f:e4:12:36:01:c6:93:a7:d6:09:c7:72:30:7f:4a:34:
87:b3:27:64:b4:d3:82:a7:3e:14:0d:07:a2:83:1b:45:2a:05:
cf:9c:2b:fb:be:e7:3f:9e:c8:8b:54:54:9d:f1:84:7a:1f:b1:
b7:f7:a9:71:ec:db:8c:42:d5:b4:07:22:bb:ad:2a:09:17:90:
d8:0d:44:38:e3:4a:52:ba:72:f2:20:fa:fa:94:ff:05:a3:e1:
98:de:b7:8c:38:b0:f3:88:27:38:5f:2c:4b:97:04:c2:97:f9:
0e:40:8e:f2:14:a7:8f:5d:46:f0:26:b7:da:e8:75:6a:21:fe:
53:06:81:f0:8a:c8:89:ab:85:e0:80:e8:39:70:39:0b:91:49:
17:c3:2b:c5:10:db:12:ee:ea:df:05:aa:bb:56:88:bf:30:a7:
ad:f0:7c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 13:22:41 2024 by rpki-client on console-ams.rpki-client.org