Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC9D813A404011EF8CEB2889762E951A.roa
File: BC9D813A404011EF8CEB2889762E951A.roa (raw, json)
Hash identifier: f7Ha6pweEa9J55SZCbAaBdAAsl5GMZTZXwmNztsbj6E=
Subject key identifier: 8A:A7:BF:AB:A4:48:B5:38:DB:D5:92:00:FB:D8:2B:6B:05:36:8A:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9BCB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC9D813A404011EF8CEB2889762E951A.roa
Signing time: Fri 12 Jul 2024 11:20:26 +0000
ROA not before: Fri 12 Jul 2024 11:20:23 +0000
ROA not after: Tue 13 Aug 2024 11:20:23 +0000
asID: 138915
IP address blocks: 156.244.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39883 (0x9bcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 12 11:20:23 2024 GMT
Not After : Aug 13 11:20:23 2024 GMT
Subject: CN=6691117a-fb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:4e:60:2f:53:bf:9f:7a:e0:a9:87:00:a5:
70:9e:6c:23:01:3c:0b:e2:0c:20:07:36:21:d3:69:
05:3c:ca:aa:87:05:69:ff:10:4f:13:5b:04:95:3f:
ba:87:ce:f7:1f:4d:35:e4:de:fa:8c:19:29:35:57:
92:56:98:90:89:80:86:aa:77:14:b8:b5:40:70:d9:
15:3c:29:f9:67:14:ad:d2:10:84:78:74:9c:b6:8c:
bc:f4:69:2d:78:f0:01:49:a9:ec:e2:16:fc:cc:f4:
b0:6d:65:e4:3e:f2:00:9f:83:51:64:62:8a:b1:d8:
ea:68:a6:d5:8c:1d:cd:3a:5b:7c:ee:ee:d7:3d:9c:
81:99:54:5d:53:ee:4d:d8:06:be:31:30:cc:37:8c:
1b:b3:b9:ad:de:81:6a:4d:e1:b2:67:39:81:ff:7c:
b7:be:69:e4:2f:0a:62:b8:94:e0:90:2d:1b:81:04:
cb:21:3d:89:11:18:fe:24:e5:7f:f1:ce:d3:99:74:
2d:73:76:65:61:40:7d:da:9b:a5:49:10:91:69:1e:
98:46:e7:2c:89:b4:cf:e0:bf:9b:8c:64:9c:5e:ee:
bd:07:d1:ec:11:ca:4f:3a:d2:fd:6b:a8:c3:e4:4b:
19:6a:67:28:dc:57:bf:4e:a5:ad:e3:b0:bb:d1:34:
e1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A7:BF:AB:A4:48:B5:38:DB:D5:92:00:FB:D8:2B:6B:05:36:8A:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC9D813A404011EF8CEB2889762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.32.0/24
Signature Algorithm: sha256WithRSAEncryption
02:95:f0:53:02:58:18:63:86:13:68:5a:86:04:17:78:3e:a0:
c4:b6:39:81:04:4a:17:49:f7:ab:b8:b7:7b:22:fc:82:eb:97:
27:5b:32:e4:df:41:9b:2f:27:b2:45:2f:2d:af:95:18:e9:e2:
ed:ff:65:22:e8:80:e0:7e:d7:43:3c:e7:95:db:af:fd:ae:a0:
9a:11:1d:96:3d:ff:bc:5c:c2:4b:c8:8e:46:32:ea:a7:bb:30:
6e:60:5e:2b:1f:77:3e:f3:4f:3a:7a:56:39:f2:f2:2c:12:a1:
26:90:75:1e:9a:42:35:0c:20:5b:a3:72:a8:c8:61:d1:d0:9b:
ec:98:4c:36:e3:b9:6c:6a:a8:c8:94:39:1f:20:ef:a2:8d:34:
c0:58:2f:ea:66:01:9e:b4:da:40:04:29:ba:2c:89:07:e1:20:
57:d7:00:6e:b2:de:2f:d2:a5:cc:0f:5b:ea:f9:62:ed:fc:b6:
6b:3d:8f:42:0c:04:7a:e1:a7:6f:ea:58:7c:93:43:33:44:79:
44:6d:94:0f:d7:a7:85:0c:1b:4f:08:91:71:ad:50:38:eb:f5:
80:2a:1b:c2:14:c8:e7:23:29:a3:c9:77:f4:31:e3:cd:02:e6:
de:6e:17:67:6f:d0:9c:ea:23:d3:07:1f:4f:40:46:ec:02:9e:
da:b9:bf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 04:26:01 2024 by rpki-client on console-fra.rpki-client.org