Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04C8ED123CD311EF8E185A67762E951A.roa
File: 04C8ED123CD311EF8E185A67762E951A.roa (raw, json)
Hash identifier: 11zO7P/q57wGgofb+sAtTWOmxKPFJdsSFs84t9ePP1A=
Subject key identifier: 6A:C2:13:5F:25:61:51:F6:AF:0D:29:1E:94:70:DE:3C:DA:8C:68:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 997A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04C8ED123CD311EF8E185A67762E951A.roa
Signing time: Mon 08 Jul 2024 02:37:29 +0000
ROA not before: Mon 08 Jul 2024 02:37:25 +0000
ROA not after: Sat 10 Aug 2024 02:37:25 +0000
asID: 64267
IP address blocks: 156.248.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39290 (0x997a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 8 02:37:25 2024 GMT
Not After : Aug 10 02:37:25 2024 GMT
Subject: CN=668b50e9-7478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:8e:a7:ef:96:86:fa:2c:f2:f7:97:5d:c0:
16:d5:7d:4b:ff:07:04:36:e3:71:0e:d0:44:9b:5b:
fe:0e:ef:72:67:7b:c6:11:98:c4:a6:f9:24:bf:b3:
92:03:f3:5b:5c:34:61:74:8c:4e:11:67:df:ca:9b:
40:83:e4:b4:23:67:67:5b:3e:d3:60:34:a3:b1:e7:
2b:c4:52:ef:4b:3a:bf:92:10:1e:f8:c9:4c:ca:25:
3d:17:62:67:fd:d6:ae:c2:a0:b2:0a:57:a7:f2:13:
b7:32:18:39:68:6a:f3:81:d3:97:f6:64:84:43:c1:
c3:71:88:92:a9:65:00:d0:4c:de:5b:99:be:96:03:
df:0d:62:d4:a0:d2:cc:49:84:4d:90:31:db:67:69:
83:e1:80:b0:54:3e:a4:4b:73:7f:29:f4:84:73:b3:
10:e2:aa:93:c6:f7:4a:67:51:65:48:43:15:d5:e4:
0a:c5:22:bb:c6:ec:02:a5:ba:85:c3:77:a3:9b:66:
3f:b7:f9:ce:18:34:c1:28:83:ec:97:75:01:f5:f9:
1a:1f:41:bd:22:27:d0:df:91:b5:d8:08:2c:99:9d:
cd:73:a5:27:56:01:b0:85:cd:d1:1a:23:29:94:6c:
bc:d2:94:65:88:d8:d0:70:1f:67:9d:52:15:b7:ab:
9b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C2:13:5F:25:61:51:F6:AF:0D:29:1E:94:70:DE:3C:DA:8C:68:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04C8ED123CD311EF8E185A67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.67.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:de:2b:cd:5e:42:91:f0:f8:b9:46:11:bd:5d:f3:0d:27:c9:
36:bf:bd:38:02:da:cf:d1:47:a0:18:78:2a:6a:58:a5:e2:7f:
59:fb:b5:98:06:f6:fc:c2:d0:ad:5f:2e:6a:92:f5:61:0f:63:
24:eb:7c:80:47:07:27:c5:70:4f:52:85:dc:1e:e4:04:dc:52:
b0:8d:a4:5e:63:cf:8f:ea:3c:39:9e:09:77:79:f9:40:9b:ba:
f8:5d:da:23:d2:c6:9c:ff:6c:7b:2f:c9:42:be:43:e5:12:00:
68:f2:06:6e:4a:64:cd:46:8c:d7:38:f6:c2:37:d9:fe:0d:0e:
e5:56:b9:81:c3:4e:e5:a1:b0:c5:44:e0:e5:c6:dc:8d:9c:83:
82:f1:35:4a:0e:7d:72:9b:88:3b:89:40:b6:d6:0a:1d:be:7c:
50:4f:8a:d2:37:a4:f7:72:7a:d2:a3:b3:41:9a:ab:d1:0e:0e:
11:ab:a2:43:fd:72:1d:85:0b:bb:9d:6e:49:29:a0:94:14:41:
15:99:79:71:1d:2b:0d:16:2d:e4:33:8e:4d:6f:7b:5e:53:a6:
1f:28:79:89:9f:6d:df:89:36:47:59:24:ca:0f:6e:8a:91:73:
fc:2d:30:93:85:90:f1:79:c9:db:bc:bd:d0:ce:c7:8d:27:a4:
87:4c:44:45
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJl6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzA4MDIzNzI1WhcNMjQwODEwMDIzNzI1WjAYMRYw
FAYDVQQDEw02NjhiNTBlOS03NDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvIWOp++Whvos8veXXcAW1X1L/wcENuNxDtBEm1v+Du9yZ3vGEZjEpvkk
v7OSA/NbXDRhdIxOEWffyptAg+S0I2dnWz7TYDSjsecrxFLvSzq/khAe+MlMyiU9
F2Jn/dauwqCyClen8hO3Mhg5aGrzgdOX9mSEQ8HDcYiSqWUA0EzeW5m+lgPfDWLU
oNLMSYRNkDHbZ2mD4YCwVD6kS3N/KfSEc7MQ4qqTxvdKZ1FlSEMV1eQKxSK7xuwC
pbqFw3ejm2Y/t/nOGDTBKIPsl3UB9fkaH0G9IifQ35G12AgsmZ3Nc6UnVgGwhc3R
GiMplGy80pRliNjQcB9nnVIVt6ubHQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGrC
E18lYVH2rw0pHpRw3jzajGiWMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNEM4RUQxMjNDRDMxMUVGOEUxODVBNjc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPhDMA0GCSqGSIb3DQEBCwUA
A4IBAQAv3ivNXkKR8Pi5RhG9XfMNJ8k2v704AtrP0UegGHgqalil4n9Z+7WYBvb8
wtCtXy5qkvVhD2Mk63yARwcnxXBPUoXcHuQE3FKwjaReY8+P6jw5ngl3eflAm7r4
Xdoj0sac/2x7L8lCvkPlEgBo8gZuSmTNRozXOPbCN9n+DQ7lVrmBw07lobDFRODl
xtyNnIOC8TVKDn1ym4g7iUC21godvnxQT4rSN6T3cnrSo7NBmqvRDg4Rq6JD/XId
hQu7nW5JKaCUFEEVmXlxHSsNFi3kM45Nb3teU6YfKHmJn23fiTZHWSTKD26KkXP8
LTCThZDxecnbvL3QzseNJ6SHTERF
-----END CERTIFICATE-----
Generated at Sun Aug 11 02:41:59 2024 by rpki-client on console-ams.rpki-client.org