Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA7785A840FE11EFBF17208E762E951A.roa
File: CA7785A840FE11EFBF17208E762E951A.roa (raw, json)
Hash identifier: YIR+fqSn41fJzKbW8ifvMtDV/bGzgxdssmfBWMkGAcw=
Subject key identifier: C7:98:D0:C7:72:5A:F1:F8:7B:7E:F0:0D:2C:30:6A:4E:B4:D7:25:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9C22
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA7785A840FE11EFBF17208E762E951A.roa
Signing time: Sat 13 Jul 2024 10:00:53 +0000
ROA not before: Sat 13 Jul 2024 10:00:50 +0000
ROA not after: Tue 13 Aug 2024 10:00:50 +0000
asID: 138915
IP address blocks: 156.244.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39970 (0x9c22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 13 10:00:50 2024 GMT
Not After : Aug 13 10:00:50 2024 GMT
Subject: CN=66925055-6273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:94:ad:89:2b:00:77:d8:f6:98:69:08:d2:09:
64:8a:6f:71:35:79:97:3e:c7:bf:51:1e:d1:fa:fe:
cb:13:06:d6:9a:0f:cb:70:d2:a7:eb:17:89:fe:1b:
dd:bf:e1:21:68:09:46:3f:b6:09:0a:7a:a3:15:6a:
1c:8e:f0:29:f3:d5:d0:a4:48:49:27:d4:99:d2:78:
c7:1e:81:aa:20:74:05:a2:22:f5:af:3a:69:f5:bc:
77:a5:a5:c8:e1:43:87:d9:4d:4b:21:01:72:97:c5:
35:c1:43:61:00:84:34:7b:5d:a7:a4:88:53:1d:2b:
a6:a5:32:ec:bb:31:2e:02:6d:cd:4a:04:15:85:5d:
87:55:18:46:6c:24:e3:8f:fe:13:f0:9b:3f:0a:13:
e0:96:d8:22:c3:ee:71:e5:4f:43:00:cd:46:a5:70:
92:8e:07:00:bc:74:3b:a5:c5:07:58:09:38:00:73:
36:1c:41:bd:04:9c:45:47:88:94:ef:86:23:c7:8f:
d4:72:80:94:55:b3:e2:6b:13:4c:56:62:d8:6a:af:
fc:96:16:ff:26:ea:4c:17:02:b3:37:a0:e4:e7:da:
30:b4:63:26:13:a1:06:e2:c8:2d:98:03:a7:0c:ba:
f1:fe:55:10:f5:7b:02:df:34:23:a0:08:74:5d:67:
3a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:98:D0:C7:72:5A:F1:F8:7B:7E:F0:0D:2C:30:6A:4E:B4:D7:25:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA7785A840FE11EFBF17208E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:1d:b7:57:c3:00:11:27:25:b8:14:c3:86:d3:03:94:7c:5f:
6c:ed:b6:45:6a:bf:9c:46:52:56:26:5a:22:4f:ef:1d:47:d7:
57:7f:09:31:74:8a:25:19:6a:31:95:b7:83:80:c7:f0:f2:79:
07:87:d8:84:2b:f1:db:4f:9d:a5:95:e6:49:44:57:b6:87:35:
5d:26:50:1c:3c:70:4a:00:a0:66:95:b8:9a:19:6e:0c:dd:19:
22:5a:21:23:64:79:d9:ce:a5:8e:96:7f:38:56:80:1d:e2:a5:
88:ad:7f:2c:26:10:dd:cf:77:16:95:c2:d1:4f:a6:4b:88:17:
19:5d:dc:bc:5d:2f:66:d2:d9:50:d7:45:c8:de:44:ec:e7:af:
8a:b7:67:17:f7:c6:fa:90:71:74:e2:36:93:66:7e:12:82:eb:
63:54:c8:da:82:37:ec:83:97:bc:45:4c:0b:97:c8:2f:e6:f9:
63:bc:b4:b4:1a:b9:17:a4:81:dc:92:00:b4:cc:b1:cf:98:d3:
ad:14:6b:68:ee:f4:29:1f:78:8a:da:5c:86:49:38:4c:9a:b7:
00:c0:54:a3:c6:e0:e9:db:c2:98:6c:9b:ae:24:b3:8e:86:23:
de:e7:01:66:3d:14:86:43:ac:80:f4:52:d0:c0:03:21:c5:50:
51:5c:ec:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 04:26:01 2024 by rpki-client on console-fra.rpki-client.org