Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0132C8E3F5311EF93875046762E951A.roa
File: E0132C8E3F5311EF93875046762E951A.roa (raw, json)
Hash identifier: fsEhTEO0KKyKJPu54P99zX5sIC0XzJ7RkHlSwlCKdJs=
Subject key identifier: 6E:57:0F:63:2A:62:17:EC:60:A6:43:43:2F:09:DD:42:B8:D4:3D:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9B8C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0132C8E3F5311EF93875046762E951A.roa
Signing time: Thu 11 Jul 2024 07:04:55 +0000
ROA not before: Thu 11 Jul 2024 07:04:51 +0000
ROA not after: Fri 02 Aug 2024 07:04:51 +0000
asID: 139646
IP address blocks: 156.246.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39820 (0x9b8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 07:04:51 2024 GMT
Not After : Aug 2 07:04:51 2024 GMT
Subject: CN=668f8417-0e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a1:4b:d5:25:a2:27:ee:03:5e:ad:66:ab:2f:
bc:6a:a5:9c:7e:88:d8:8d:1f:dc:b4:00:23:11:8b:
15:ce:d2:db:5d:2c:c7:a2:ee:4b:e4:44:03:e3:49:
27:c1:7e:f0:8c:b4:f8:fa:31:9f:77:c3:47:5f:ed:
61:be:22:c1:95:32:60:7f:00:36:c5:8c:41:36:c8:
3d:51:db:14:49:e4:5c:2b:ea:9d:39:f8:37:46:4f:
3c:da:a0:e6:8c:67:10:72:5c:92:3d:0f:85:46:c4:
50:54:fc:b2:5a:96:9d:94:18:de:bf:92:9c:38:36:
20:a0:96:a8:b6:e6:43:3b:5c:9f:50:f9:52:67:a6:
e5:14:49:bf:ba:c5:56:62:d8:f6:ca:29:b5:df:97:
3e:43:7c:05:10:27:ff:78:14:57:7d:51:ed:a2:2e:
97:c8:c8:b3:02:8f:43:59:13:de:37:3f:84:5d:30:
3a:7e:00:37:2f:89:4f:da:a7:79:cb:2a:e7:c5:a9:
70:47:4a:c5:67:3b:12:34:f2:55:e1:86:8b:a7:75:
a8:9a:6d:bb:5a:d9:0b:2d:11:a9:e7:98:91:d5:45:
5f:54:d3:01:ca:65:3f:58:4c:4e:87:e0:1c:cc:27:
8c:86:b5:72:a3:7e:58:84:c0:0a:3f:27:af:6f:cb:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:57:0F:63:2A:62:17:EC:60:A6:43:43:2F:09:DD:42:B8:D4:3D:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0132C8E3F5311EF93875046762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.0.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:8c:f0:69:58:3b:ae:0a:71:e6:c7:a4:bd:32:82:1f:63:c2:
fc:94:21:f2:0e:3c:f5:d5:10:45:57:0d:9f:f3:85:05:9f:75:
49:cb:c9:61:bf:e1:23:27:37:02:be:7d:cb:43:1f:cc:35:e2:
df:c5:47:58:a7:1c:91:54:a7:c0:bc:8e:9e:08:7e:2a:cf:3b:
b6:81:0d:e0:9b:db:a2:b0:5b:95:0c:c5:4d:1e:e6:4b:53:f5:
98:36:e4:f3:fc:32:b6:05:92:96:cd:9c:83:d7:94:4c:bc:ab:
76:33:f9:83:c5:16:61:c5:c5:21:2f:63:24:64:85:c9:59:af:
78:98:a9:f8:b7:f2:3b:0f:c4:f7:bb:0f:4d:3a:ff:10:f8:b3:
4f:1c:eb:5e:10:5e:98:e5:66:d6:a6:55:e1:17:f4:3c:9e:c7:
9c:ff:5e:e8:ab:fa:ad:ba:94:97:d7:a8:ba:d1:57:c8:1d:9e:
a9:b3:b8:b0:77:6c:1d:52:39:50:5b:89:33:09:05:ec:20:5f:
ba:36:00:83:06:22:02:40:34:fa:1f:ed:70:72:09:23:5e:71:
2c:33:2b:d5:4a:6d:87:bc:d4:11:dc:8d:7e:f3:90:a4:63:dd:
2a:55:33:ef:c4:61:1e:92:72:d2:4e:43:00:32:ee:10:19:b6:
d4:92:1d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 09:58:15 2024 by rpki-client on console-fra.rpki-client.org