Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D63ED2BE406911EFA627089C762E951A.roa
File: D63ED2BE406911EFA627089C762E951A.roa (raw, json)
Hash identifier: NMI/ygEyFusDMSm8pLPUfSsmJqgrFaI3HG6uEpE/DRM=
Subject key identifier: 1A:49:8D:E1:2D:A4:44:EB:B0:9B:36:02:14:05:EF:99:6D:4D:24:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9C01
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D63ED2BE406911EFA627089C762E951A.roa
Signing time: Fri 12 Jul 2024 16:14:38 +0000
ROA not before: Fri 12 Jul 2024 16:14:35 +0000
ROA not after: Tue 13 Aug 2024 16:14:35 +0000
asID: 138915
IP address blocks: 156.244.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39937 (0x9c01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 12 16:14:35 2024 GMT
Not After : Aug 13 16:14:35 2024 GMT
Subject: CN=6691566e-7d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:62:48:90:f6:30:5c:76:ab:3f:83:2a:be:3a:
91:3d:35:ce:ce:bb:66:25:a5:fe:61:6c:e3:79:cc:
1d:08:a9:68:ca:ad:42:fa:44:d7:ea:f3:c5:27:fd:
b0:29:cd:70:18:3c:53:4d:6c:bc:a3:b6:5b:75:58:
d8:8c:59:8f:3c:64:23:21:42:3b:2c:a5:93:46:42:
2d:09:4e:01:4f:a1:19:61:f7:15:80:6c:f7:ba:31:
40:da:c2:a0:da:09:4a:bc:b5:fd:dd:a6:42:b9:19:
1b:59:54:ba:be:67:37:69:c7:52:0f:03:33:b8:94:
e2:b1:72:7f:d3:ca:7c:c1:3b:85:97:a9:b3:08:97:
90:45:e1:19:73:14:3f:51:84:7a:a9:32:41:cb:ae:
61:85:42:a5:22:b9:ed:6e:d8:08:21:f9:a2:86:3c:
f5:b1:98:a4:1a:a0:05:78:bb:7e:50:ed:83:41:5c:
cb:95:da:59:87:ef:c9:92:a7:ae:56:4b:39:1a:c6:
85:56:22:31:16:db:33:3f:16:e8:36:cb:72:de:61:
b6:43:35:e1:ab:c1:dd:0a:ce:40:86:f4:e4:8a:95:
1c:e9:61:e3:19:53:80:d6:da:60:c4:b5:9e:a2:e8:
20:0b:cb:f1:64:8f:4f:d2:66:8c:71:ac:e5:b9:22:
6b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:49:8D:E1:2D:A4:44:EB:B0:9B:36:02:14:05:EF:99:6D:4D:24:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D63ED2BE406911EFA627089C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.8.0/24
Signature Algorithm: sha256WithRSAEncryption
26:f7:ef:49:78:35:95:c1:30:f2:db:ee:90:ea:1b:b6:98:2d:
92:a0:11:55:e8:ea:8e:0c:3a:c4:af:86:16:59:d0:21:ff:b9:
d1:e2:3a:64:19:82:27:0d:ae:cc:56:03:ab:b3:1a:72:80:59:
8c:c7:d6:23:bd:43:50:84:56:4a:5a:a2:a3:29:38:b5:44:8e:
cc:75:5f:5c:d1:88:e7:87:79:b8:5b:1c:36:9f:c0:19:21:eb:
7d:90:1f:7a:3b:c3:6a:82:e8:30:ee:5a:d2:6b:28:4a:93:90:
c2:d7:7b:dd:16:43:dd:4d:a0:65:57:30:00:46:39:70:64:fe:
ba:39:14:ed:82:d0:a5:48:0c:8f:01:fa:9c:6d:7b:4b:ea:1f:
f4:bd:96:d7:07:39:aa:be:ac:06:ec:32:ad:78:35:31:9c:c1:
94:7a:75:de:82:4b:39:4b:c8:2d:45:34:e0:f9:b5:b3:13:97:
f7:22:c2:7f:db:75:76:f3:a0:12:7d:21:44:12:bc:2b:61:3d:
b0:b2:5b:b8:d9:ba:8a:9c:eb:f1:d1:9c:e4:6e:64:7c:e7:78:
7b:3a:05:a7:8d:8f:04:80:d3:62:74:fb:c4:fa:ff:c5:e6:ae:
2b:f6:6a:f7:23:0d:b7:9f:a9:47:fd:6a:f1:e9:e3:83:ff:8f:
6e:22:8f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 05:05:46 2024 by rpki-client on console-ams.rpki-client.org