Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2C777883CD211EF8EF3F766762E951A.roa
File: E2C777883CD211EF8EF3F766762E951A.roa (raw, json)
Hash identifier: KS0EFIroSjIsqMw7o2WYzoYhAxKxG6jTMjLoNIp7VFg=
Subject key identifier: 0F:55:38:B4:D8:39:05:AA:97:C1:04:FB:7D:61:72:60:D2:E2:5C:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9978
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2C777883CD211EF8EF3F766762E951A.roa
Signing time: Mon 08 Jul 2024 02:36:32 +0000
ROA not before: Mon 08 Jul 2024 02:36:28 +0000
ROA not after: Sat 10 Aug 2024 02:36:28 +0000
asID: 64267
IP address blocks: 156.248.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39288 (0x9978)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 8 02:36:28 2024 GMT
Not After : Aug 10 02:36:28 2024 GMT
Subject: CN=668b50b0-054a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:35:07:51:ed:81:fc:9e:9d:73:93:dd:bf:81:
e4:c3:19:f6:a7:9a:f7:89:3c:a5:0b:ce:70:71:00:
fa:6f:6a:36:96:66:d1:da:51:86:2e:df:b9:86:1d:
bd:f8:15:f7:19:cd:f0:f7:9f:ad:a3:1d:40:ac:07:
fe:ce:d1:35:a5:58:56:7a:04:48:bf:b5:03:5f:f3:
a3:b9:54:db:ff:fd:91:a3:d1:43:27:bf:47:8f:f3:
78:63:87:8e:c7:e6:eb:5a:36:f6:3b:ab:eb:5d:f3:
d2:35:1f:fd:20:35:e7:ad:43:48:11:94:b9:06:81:
ba:f2:08:34:ac:a3:33:3a:5b:3b:79:2e:51:60:dd:
a5:9d:3c:1a:0c:85:57:45:48:6c:0f:ff:0f:da:44:
52:4a:2f:19:88:35:0b:cb:f9:ad:7c:8e:0c:28:13:
0d:f1:d2:54:4a:b4:71:7c:2b:17:bf:64:d0:72:3a:
d9:79:2e:7e:20:39:4d:b1:85:8c:c2:c2:5f:0c:2d:
d2:1a:19:20:f6:9f:91:5f:57:1f:2e:74:25:36:86:
8c:05:a1:b7:51:6d:d9:0b:8b:bc:d7:cf:63:81:ff:
9e:f9:95:c1:9a:a4:f7:a2:24:5a:df:ad:f4:cd:30:
7a:a8:60:ac:fb:ec:65:b2:6f:dd:b8:4d:fb:1e:e6:
24:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:55:38:B4:D8:39:05:AA:97:C1:04:FB:7D:61:72:60:D2:E2:5C:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2C777883CD211EF8EF3F766762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.69.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:61:73:07:19:98:04:10:b6:6d:91:fc:79:59:e7:42:b7:e6:
43:d9:b3:44:c8:21:1c:a3:48:7d:ff:05:fa:69:b2:65:f1:98:
55:7a:9d:4c:6a:c7:ab:30:5c:bd:78:e5:05:3c:5e:47:50:bb:
a0:95:a8:d3:be:4a:50:c5:bd:f9:95:8c:3b:16:9d:4a:11:68:
3f:5d:6e:aa:06:11:3a:c9:eb:2b:60:fe:5e:7e:32:2b:96:5b:
62:63:ce:4a:1a:91:df:4a:05:75:e7:dc:8c:e7:d8:c2:b7:62:
cf:6e:b7:e5:93:60:25:6a:b5:79:4f:45:b1:5c:4d:f7:5b:c8:
04:e6:58:fe:7b:2d:d8:86:99:db:4c:7d:0d:57:bb:82:94:80:
6d:4e:64:1d:03:cc:e0:6e:d1:22:89:35:22:fb:fe:31:9f:d1:
c3:6e:3f:e2:41:63:32:45:93:d2:07:04:e8:d8:e4:13:ae:6a:
dd:13:6d:f7:e9:61:a7:ce:76:ba:d6:4b:9d:d7:b0:b8:76:97:
cb:57:91:40:a3:12:46:17:1c:e1:1e:d5:83:41:9e:04:74:57:
13:f0:f4:5e:7a:18:60:1e:5a:eb:e9:df:a9:97:9b:2d:3a:ed:
9a:26:3d:c7:f1:05:8f:49:48:7b:31:82:d0:8c:af:57:c6:9f:
94:52:23:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 02:44:32 2024 by rpki-client on console-fra.rpki-client.org