Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B92EFBEE441111EF8C56F7AD762E951A.roa
File: B92EFBEE441111EF8C56F7AD762E951A.roa (raw, json)
Hash identifier: V29YRgoV9OmG8ukr6xghAMuC2wsBvn3YIWEEkFYDmkQ=
Subject key identifier: D1:DF:0E:83:C6:94:C0:2F:A3:58:74:4D:AB:2D:33:02:07:B1:F7:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D06
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B92EFBEE441111EF8C56F7AD762E951A.roa
Signing time: Wed 17 Jul 2024 07:53:58 +0000
ROA not before: Wed 17 Jul 2024 07:53:55 +0000
ROA not after: Sat 27 Jul 2024 07:53:55 +0000
asID: 22773
IP address blocks: 156.237.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40198 (0x9d06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 07:53:55 2024 GMT
Not After : Jul 27 07:53:55 2024 GMT
Subject: CN=66977896-2f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:8a:e3:5a:42:72:64:e1:90:bd:f6:a9:e8:
bb:ef:a4:77:a2:65:9f:ef:4d:67:80:a5:e1:69:16:
55:06:54:fa:7f:8c:5d:90:b0:d5:a3:48:1e:ab:e4:
8a:52:bd:31:d5:0e:f6:31:50:d7:3a:ca:a4:a0:08:
f0:3a:e4:6a:06:2b:55:49:d5:53:b7:61:90:9a:4a:
1c:e5:fa:1b:ec:5a:1e:58:07:88:90:14:33:df:89:
54:7b:92:7b:f7:34:77:45:9b:02:e5:7a:65:cb:5a:
31:3d:57:c7:61:20:38:1e:f0:01:50:c9:f7:f6:bd:
53:b1:ee:81:e1:2d:a4:c8:4f:ed:f2:77:78:85:d4:
25:49:c9:c9:3c:ab:02:ed:fc:f8:63:72:b6:f6:d1:
4d:5e:7f:27:ec:fc:aa:bf:d1:f7:9f:02:53:1a:82:
38:fa:ec:01:cc:1c:07:dc:0f:2a:fd:e2:39:40:bb:
ea:cb:6d:02:6f:a4:c6:47:0b:e8:f9:5e:01:e6:bc:
dc:d4:c8:44:68:ec:ce:8b:d1:da:80:fa:37:06:bc:
65:66:32:31:b6:9e:2b:c9:31:97:9d:f5:34:6b:1c:
a7:42:77:2a:e1:ce:13:98:d0:94:18:51:f2:44:4e:
af:bf:50:9d:2f:48:19:34:cf:8a:8c:57:76:34:89:
17:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DF:0E:83:C6:94:C0:2F:A3:58:74:4D:AB:2D:33:02:07:B1:F7:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B92EFBEE441111EF8C56F7AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.0.0/24
Signature Algorithm: sha256WithRSAEncryption
34:18:84:42:23:e9:f3:16:c7:3d:f0:bb:e1:78:b4:fc:d5:65:
e3:c1:c3:6e:c2:b6:18:50:13:dd:63:f2:19:82:27:11:05:11:
ee:33:50:c5:d5:81:23:e9:4a:19:ae:b9:98:d8:1a:4c:fe:0b:
10:52:a1:50:68:f5:f0:77:92:9e:48:6d:68:05:02:af:d3:e5:
d5:04:56:03:62:f2:de:ea:b3:af:7b:46:f5:9d:52:e2:06:ea:
1e:1c:6f:72:e9:f9:73:6c:32:69:d0:43:08:f3:cf:1a:03:33:
df:95:1b:c0:b9:f2:9b:98:ba:fd:49:0d:56:e6:c8:54:a9:3a:
a9:cc:47:9a:24:07:ff:1a:3e:8d:fb:fc:93:7d:ce:a1:4b:31:
df:dd:20:a5:58:ab:34:8b:5c:89:f9:fc:8c:62:d8:e0:b7:b7:
27:91:5a:c4:c1:69:08:02:55:24:8b:4e:6d:48:98:c7:97:a1:
1c:4c:0f:47:69:90:0c:2a:3e:e3:f2:ce:c2:d9:13:74:39:41:
21:da:1a:6c:0c:49:2e:2f:20:01:11:a2:fa:31:fe:a8:58:4a:
4b:1f:f1:15:b8:68:47:01:46:28:9d:f7:e7:48:0b:c0:c6:02:
ea:8d:7b:62:50:91:8b:6f:b1:5c:83:fc:cf:55:81:27:cd:f9:
57:2c:56:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:03:27 2024 by rpki-client on console-ams.rpki-client.org