Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75574D8C1D0F11EF957438007DDC24C2.roa
File: 75574D8C1D0F11EF957438007DDC24C2.roa (raw, json)
Hash identifier: Ksdf/Jk4KoAejDZTdje1d4Lbk5cFx+ug2lKeu9N/guQ=
Subject key identifier: C0:89:60:75:D7:54:87:0A:A5:28:08:20:32:C8:D6:95:1C:F3:71:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8CA2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75574D8C1D0F11EF957438007DDC24C2.roa
Signing time: Tue 28 May 2024 16:29:30 +0000
ROA not before: Tue 28 May 2024 16:29:27 +0000
ROA not after: Sat 07 Sep 2024 16:29:27 +0000
asID: 138415
IP address blocks: 156.225.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36002 (0x8ca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 16:29:27 2024 GMT
Not After : Sep 7 16:29:27 2024 GMT
Subject: CN=6656066a-9862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:87:bd:72:9e:e4:9c:01:10:d1:96:ff:71:bd:
c3:c1:61:3b:8b:0f:a2:94:52:6b:8a:2e:17:b6:6a:
37:ba:35:3d:63:13:b6:10:50:5d:3f:5c:3d:e1:c1:
2b:dd:55:53:02:ea:b4:60:bd:9f:41:61:43:64:97:
10:41:f8:86:06:c0:7f:9f:70:af:00:0d:e6:34:97:
fb:3e:c8:f2:c7:db:56:23:d1:3e:ad:d7:f8:89:86:
f9:2b:cb:cd:b5:ec:28:d4:b0:ea:09:eb:42:26:cd:
bd:bd:09:62:4e:35:48:c0:1c:28:1d:f3:a0:33:87:
4d:dd:e8:16:3e:e1:f6:ee:cc:79:63:8d:53:a9:7c:
70:27:a4:24:c6:52:ea:ae:14:f4:4a:69:d5:c0:54:
5f:9a:72:23:0e:6f:0b:4a:59:1b:e3:4a:23:16:3d:
11:ab:bb:c6:8b:ef:17:eb:bc:d1:73:cc:26:6e:2b:
0a:45:52:32:ab:1d:89:75:66:15:3f:f0:ea:f2:e9:
84:5a:ad:85:f4:1d:7b:80:ad:5b:05:4f:a1:85:c5:
22:50:ee:fb:4a:f9:04:79:80:b1:72:5c:a6:f6:7e:
6a:55:33:6b:ee:3d:c5:99:9e:a2:4c:db:26:4c:1b:
20:ca:49:c2:4c:a5:86:24:f8:0d:8b:b3:55:54:cb:
3f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:89:60:75:D7:54:87:0A:A5:28:08:20:32:C8:D6:95:1C:F3:71:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75574D8C1D0F11EF957438007DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.32.0/19
Signature Algorithm: sha256WithRSAEncryption
29:fa:44:20:18:4e:b5:5a:fe:58:45:d1:42:74:10:91:75:e5:
b3:e5:a0:ee:b1:52:b6:ad:e5:38:b5:94:fe:f2:47:8f:f8:12:
1c:44:5d:10:b1:3b:50:e8:79:57:66:4b:ba:bd:70:d0:24:d3:
98:b8:d6:86:51:5f:5a:96:fb:08:9c:0e:93:23:e4:c7:32:e2:
a6:9c:db:bc:d2:10:3b:3f:f3:8c:5c:7f:a9:ec:81:85:42:bd:
37:5a:58:6d:0f:0f:8c:0a:16:6f:a9:01:ec:99:51:65:8e:45:
af:8f:be:ad:f7:d3:af:83:be:66:40:7d:86:39:32:8d:d4:fc:
3b:e8:65:a0:f8:c5:31:e0:46:29:90:9f:38:98:29:f2:cb:cd:
fd:20:81:62:95:37:a3:90:91:93:a9:3b:73:15:a9:5b:21:3d:
c3:c4:15:0b:cc:b9:d2:cd:00:6a:cb:31:6b:8c:02:c0:19:c2:
11:58:6f:41:17:8d:d2:48:4f:47:f3:02:8e:7c:c9:99:45:ea:
24:1c:67:2a:fb:9a:13:08:9d:3b:53:1c:4f:40:f8:78:4f:00:
2b:f4:bf:d2:6d:2e:26:f5:3b:02:ad:82:aa:55:84:1e:bc:9b:
b9:44:90:d8:c1:03:c0:ed:ab:dd:14:11:24:ce:26:c5:3c:38:
04:fd:52:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 8 03:52:17 2024 by rpki-client on console-ams.rpki-client.org