Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDD01C00BA2711EF9D387D4D762E951A.roa
File: BDD01C00BA2711EF9D387D4D762E951A.roa (raw, json)
Hash identifier: 3f55nuSGscCOHH30+gr6HjZbwjyAZD3yUuzOWhBXroU=
Subject key identifier: 11:EA:76:77:0D:37:E5:69:3C:D5:30:94:2E:DC:81:9F:90:3E:7B:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E3AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDD01C00BA2711EF9D387D4D762E951A.roa
Signing time: Sat 14 Dec 2024 14:28:52 +0000
ROA not before: Sat 14 Dec 2024 14:28:48 +0000
ROA not after: Mon 20 Jan 2025 14:28:48 +0000
asID: 50053
IP address blocks: 156.253.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58282 (0xe3aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 14 14:28:48 2024 GMT
Not After : Jan 20 14:28:48 2025 GMT
Subject: CN=675d9624-ca9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:38:42:38:02:45:34:12:f7:ea:db:53:85:56:
13:5f:e6:20:ad:0e:f9:1e:b2:7f:36:32:4e:c3:d3:
98:e2:6e:c4:0c:76:28:ab:13:7a:a2:73:fa:dc:e2:
60:14:b5:e1:17:b7:a2:07:17:9e:16:f3:ea:6d:6c:
c6:ae:a0:4f:e9:52:ca:b3:a0:c3:d2:ea:d0:99:dc:
b3:01:6f:68:9c:29:4f:89:cc:20:34:e0:58:86:a8:
4f:03:3d:36:c1:aa:ea:69:ff:6c:7f:b4:ce:df:89:
e2:c8:25:94:e1:67:d6:5f:22:b4:d3:1a:e0:1d:8f:
24:db:f1:4b:dc:33:57:0d:43:7f:28:81:98:5e:f8:
e8:32:c3:b6:29:39:6d:65:54:22:bd:6f:1e:fe:91:
8c:99:36:2f:1c:c5:09:1e:d1:d6:6d:17:ac:52:22:
86:91:d9:20:38:5f:99:b6:8e:bf:b9:2e:5b:30:f5:
89:88:39:15:3c:75:03:ea:7e:9a:b0:e0:ea:b7:57:
3a:3f:4a:e8:d6:23:60:87:37:f2:a8:ee:35:dc:7b:
91:ff:02:c1:95:be:30:a7:e7:bd:8e:b9:68:5e:9e:
70:e0:f4:1d:19:45:ab:4b:ba:73:1c:a6:f4:ac:6a:
11:33:a1:18:25:a5:5b:2b:f5:1d:90:49:52:a9:30:
bc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EA:76:77:0D:37:E5:69:3C:D5:30:94:2E:DC:81:9F:90:3E:7B:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDD01C00BA2711EF9D387D4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.250.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:64:cc:a4:76:88:00:87:a4:f9:1d:10:a3:ce:a1:3e:63:68:
24:8a:19:76:6f:cb:5c:96:10:fb:c9:64:73:28:a2:98:01:55:
87:be:66:83:1e:a8:c5:a3:dc:85:24:c3:19:82:7d:6d:24:1d:
f8:53:8a:62:27:2d:aa:1a:dd:82:e6:4b:14:6d:c8:af:9f:56:
41:d3:ef:28:de:7f:54:80:17:bc:48:aa:bd:de:5b:e5:b1:4d:
48:fc:70:00:a9:58:7e:f4:23:be:d3:23:46:70:31:84:bc:8c:
03:44:9d:d9:46:32:56:21:ef:19:e7:df:63:c4:2e:70:bd:0c:
36:e3:20:87:36:3c:e8:0b:68:fb:61:f3:ed:6e:6b:be:4b:54:
a7:c0:8e:03:56:55:39:22:d5:c5:df:47:e3:0c:82:d4:06:e2:
39:55:3b:8d:a1:d4:40:68:1c:4a:98:43:e0:24:08:e8:a5:e1:
55:da:ff:84:59:43:be:95:e2:cf:4e:af:57:1f:f3:91:6e:46:
0d:e8:a4:61:be:cb:ca:6d:25:92:e9:43:dc:aa:3e:ef:71:56:
91:c5:ea:ab:fe:37:c4:e7:a3:f8:31:0b:0b:7a:a1:f7:52:fd:
19:68:07:5a:a0:3c:0f:c3:bb:62:57:32:b6:cc:c3:9f:0c:df:
c5:4e:6b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:46 2025 by rpki-client