Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6034D34499311EFAFE4E19C762E951A.roa
File: C6034D34499311EFAFE4E19C762E951A.roa (raw, json)
Hash identifier: PyZ4N/B8r6Xjf64S4B7nQvwelb1DHgn5YDMTgL3wMbw=
Subject key identifier: 28:5A:03:E8:47:EF:98:F6:58:DD:69:BC:A9:D3:37:02:45:B7:BF:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9EEB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6034D34499311EFAFE4E19C762E951A.roa
Signing time: Wed 24 Jul 2024 08:07:30 +0000
ROA not before: Wed 24 Jul 2024 08:07:27 +0000
ROA not after: Fri 23 Aug 2024 08:07:27 +0000
asID: 202656
IP address blocks: 156.246.188.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40683 (0x9eeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:07:27 2024 GMT
Not After : Aug 23 08:07:27 2024 GMT
Subject: CN=66a0b642-5dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:28:8b:ff:9f:9a:4b:fc:52:12:0f:9e:c8:b5:
82:90:3b:40:ad:60:cc:b4:2f:0f:a7:67:f6:8b:6d:
a8:66:8b:af:3e:11:91:46:7f:70:d3:11:0d:52:0a:
f6:1e:b1:ac:f1:b9:77:d1:ec:e6:97:09:1a:d5:ad:
d7:81:6e:72:7d:2f:68:1f:b7:30:d2:cf:a2:ce:fd:
56:91:2f:27:4c:00:9f:61:a7:6c:36:61:c4:0a:00:
4e:61:22:60:7a:5a:ce:bb:a5:38:aa:4f:89:9e:a7:
4a:c2:51:2c:23:90:f3:c5:9c:69:34:ad:66:aa:07:
8c:31:0c:44:8f:da:ae:77:88:19:b1:ba:b0:17:9e:
22:d7:4c:35:52:51:4e:37:89:0c:c9:4e:68:f9:10:
86:6f:9a:f9:14:b9:1a:c9:98:46:04:22:f6:bd:d9:
af:34:a2:e7:59:19:c9:f9:9e:bd:e4:b4:26:49:10:
2e:01:3e:0b:03:f7:a0:ec:42:c2:c6:84:3e:52:b2:
c0:70:7c:0e:b7:aa:10:67:cf:ba:a1:90:c1:8a:b2:
e7:de:ed:01:cf:a6:80:37:20:d4:f6:4c:e3:10:6c:
75:ab:c6:a9:9e:20:7d:30:a7:06:11:e9:66:6b:8d:
d3:0d:71:b2:12:88:7b:4c:5a:90:8a:b8:78:f4:b3:
4a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5A:03:E8:47:EF:98:F6:58:DD:69:BC:A9:D3:37:02:45:B7:BF:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6034D34499311EFAFE4E19C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.188.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:97:99:26:83:d8:b0:6b:fb:dd:da:e0:ce:63:e5:ab:1e:ef:
58:58:b9:04:e2:c6:9e:24:7c:c7:2a:f9:64:13:73:4d:48:c3:
cb:fd:fb:d2:5b:53:f9:92:a4:b0:57:aa:d7:44:66:8a:9d:ad:
a4:70:39:d9:3e:7f:a2:38:4c:9a:4d:7a:c4:e3:74:28:fa:54:
8d:7d:ce:b3:52:24:27:1f:93:10:f4:20:2e:f4:f8:f5:c2:61:
07:f2:87:d9:7b:f6:b4:b5:b7:93:85:74:21:70:8a:3f:81:c8:
b5:c4:1e:89:61:54:e4:02:9b:4b:10:c6:18:1a:9b:19:51:da:
9b:1e:ae:25:f1:fb:cd:3b:ba:ec:74:ec:53:33:99:d3:26:6d:
ae:00:07:ca:1e:1b:a6:5d:64:f3:60:c2:ac:1b:58:af:c0:a1:
5d:7e:53:23:b3:a8:14:13:3a:85:bb:08:eb:fc:3c:05:b6:d0:
d9:67:ae:3a:3e:a2:cf:a2:4a:7b:00:65:55:af:b2:db:9b:8b:
ed:e4:1e:39:f0:b1:70:8e:58:c4:d9:89:4d:63:d8:f0:11:fc:
59:4d:94:12:17:dc:5f:a0:9b:4c:79:13:cf:b7:f7:8e:42:ad:
87:fd:61:c7:11:fa:fc:49:71:07:eb:38:91:45:cb:9b:91:3b:
5d:8f:91:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:03 2024 by rpki-client on console-ams.rpki-client.org