Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF9B034849A911EF968869B4762E951A.roa
File: DF9B034849A911EF968869B4762E951A.roa (raw, json)
Hash identifier: 19y9GhInmbeJTgOiOF3UHsd5DoUZjnmfPs5SgYd5Mdo=
Subject key identifier: CA:0A:8F:81:E6:78:DE:77:26:EE:9C:F4:1D:E5:B6:A2:15:4F:1A:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F57
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF9B034849A911EF968869B4762E951A.roa
Signing time: Wed 24 Jul 2024 10:45:42 +0000
ROA not before: Wed 24 Jul 2024 10:45:39 +0000
ROA not after: Thu 01 Aug 2024 10:45:39 +0000
asID: 140570
IP address blocks: 156.230.6.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40791 (0x9f57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 10:45:39 2024 GMT
Not After : Aug 1 10:45:39 2024 GMT
Subject: CN=66a0db56-5d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:92:2d:36:5d:e4:e1:c7:5a:29:9b:44:bf:a3:
38:a0:9e:59:a7:d4:d2:f4:3d:fc:13:cf:39:5d:87:
30:d5:79:fe:71:38:0b:69:9c:ea:09:89:ca:c6:7f:
1d:5d:33:1c:48:61:1c:ac:e8:85:d3:b9:36:4a:a1:
ac:68:0b:2b:68:18:ec:65:8f:07:b4:67:ad:c2:df:
86:be:f3:a3:b8:29:d7:44:8b:d5:08:19:f7:fb:b0:
67:0e:2f:f3:8a:63:67:2e:95:f2:02:13:65:37:2e:
43:12:a5:0e:7d:6b:77:91:d1:e0:00:4b:55:8c:69:
8d:eb:29:3b:36:a5:ce:9f:3b:21:87:02:a1:5b:e6:
fb:91:7f:99:d3:a4:67:ea:7a:76:00:ec:5f:6c:a7:
37:72:c2:e7:34:8d:7f:03:b3:d9:f7:aa:f0:ba:04:
41:60:ad:89:1f:a5:aa:38:d1:f7:c6:7f:02:e3:be:
5b:eb:ac:a9:75:c7:9b:1c:a5:47:c7:13:f9:c8:68:
84:a7:b2:1b:2c:b4:83:ea:9b:81:19:70:f9:81:c5:
04:8b:ba:aa:42:0f:c4:5b:c7:a1:8f:8b:9b:60:6d:
19:42:25:f4:45:fb:d4:25:97:ce:33:ae:13:bd:ef:
44:bf:6f:d5:17:35:d1:ca:f0:ac:0a:41:80:ce:10:
6e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0A:8F:81:E6:78:DE:77:26:EE:9C:F4:1D:E5:B6:A2:15:4F:1A:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF9B034849A911EF968869B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.6.0/23
Signature Algorithm: sha256WithRSAEncryption
18:eb:8b:0b:e7:34:fe:62:d2:9b:81:ee:e2:38:8b:88:d5:07:
b5:28:36:97:52:f1:67:17:61:13:f0:72:21:a9:74:7c:aa:56:
07:0f:31:c4:2e:33:06:c3:5b:58:7a:f4:5d:86:ba:9b:5e:91:
f1:aa:5b:81:fb:31:4b:3e:8c:97:23:34:81:06:db:2e:1a:98:
c1:b0:8c:81:4b:c3:d3:2a:4f:d5:e6:0f:0f:bf:ee:1b:34:b2:
4b:a5:c3:8e:7b:94:aa:32:fd:4f:d0:68:5f:7d:12:a8:cb:ac:
fe:29:2b:0b:66:1b:b2:f6:c3:20:ef:3c:f1:7e:a9:f4:ad:8e:
05:85:77:0e:7a:69:70:56:da:97:c5:a9:9f:e0:c6:f7:38:76:
6e:28:6a:4d:49:24:08:4f:7e:1f:59:e6:56:da:66:d2:8b:2b:
c6:a2:19:70:52:3f:b0:3e:f3:39:5f:f7:9e:55:97:96:01:c7:
67:02:cb:01:29:1a:0c:c7:4e:6a:79:e0:b3:ae:28:9a:79:77:
86:df:2e:1f:aa:50:19:c8:0d:7b:66:7a:6d:b6:38:03:68:71:
81:fd:da:34:42:08:a3:1b:ba:aa:e1:8b:11:94:b6:6a:40:59:
4f:7b:f0:84:88:e4:2c:2a:6c:ee:75:28:78:a0:0e:e0:09:be:
66:a9:60:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 04:03:11 2024 by rpki-client on console-ams.rpki-client.org