Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C080EC03A4811EEA3665B0F4AD9E6FC.roa
File: 0C080EC03A4811EEA3665B0F4AD9E6FC.roa (raw, json)
Hash identifier: i5Bo9gF2Kqd1FipWQCpKFta72maGZUKlId3aNbdGezM=
Subject key identifier: 7C:76:E4:97:FF:5A:1B:45:F3:E5:70:0F:72:A8:DD:AD:B6:A8:77:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 351A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C080EC03A4811EEA3665B0F4AD9E6FC.roa
Signing time: Mon 14 Aug 2023 02:12:41 +0000
ROA not before: Mon 14 Aug 2023 02:12:38 +0000
ROA not after: Sat 13 Jan 2024 02:12:38 +0000
asID: 139057
IP address blocks: 156.225.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13594 (0x351a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 14 02:12:38 2023 GMT
Not After : Jan 13 02:12:38 2024 GMT
Subject: CN=64d98d99-0032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:6c:36:99:e8:47:eb:76:f9:3b:6d:93:d8:
c7:ef:b4:8f:27:cb:b7:56:e5:26:be:72:c2:59:36:
f3:c7:5e:8e:ca:8a:a3:c1:3d:37:25:ee:96:b3:dd:
cc:72:5b:86:f1:16:9c:84:d7:9d:20:51:98:0f:e0:
f4:cf:bd:ea:7e:a7:d2:69:19:ab:3c:f4:65:bd:de:
68:03:b9:53:06:6d:6c:d1:9e:0e:1f:94:7c:07:39:
3e:49:12:9a:30:b6:b2:40:b4:31:f1:69:e9:b7:16:
b9:3a:76:8f:41:71:3a:93:78:54:99:ef:f7:64:82:
bf:e1:77:ed:f4:ae:84:0d:1b:7c:c5:c2:c2:80:0e:
1f:b6:8a:3d:82:17:f1:42:21:9a:18:00:16:c2:9f:
15:6d:bf:e3:dd:cd:c3:86:85:ab:f0:c2:3e:08:0d:
b8:bd:88:6e:fd:e4:9c:dd:40:60:f6:77:8b:4a:a8:
7d:bb:5a:02:a8:95:9a:0f:e9:77:bb:04:6d:2d:98:
00:bd:4a:4a:e0:50:e6:ff:b6:04:f6:e6:c1:03:5d:
6b:7a:7d:dc:a4:99:19:d6:f2:45:a4:be:86:53:38:
cc:eb:05:29:a6:bc:9e:f7:67:1b:7c:1d:68:72:b5:
9b:d5:fc:9b:00:79:4b:56:ff:19:4d:41:f0:69:f2:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:76:E4:97:FF:5A:1B:45:F3:E5:70:0F:72:A8:DD:AD:B6:A8:77:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C080EC03A4811EEA3665B0F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.110.0/24
Signature Algorithm: sha256WithRSAEncryption
98:20:b9:9e:a1:db:53:9c:9c:35:3d:5c:d3:18:b2:41:d7:cf:
9c:39:14:25:7e:8b:e1:f4:97:d2:bc:db:d3:38:24:6b:67:3a:
f0:96:13:76:e7:8f:e2:5f:4f:ce:fd:63:0d:38:a2:3f:b3:96:
80:54:c2:17:04:88:50:65:10:67:60:c6:9f:e2:3b:cc:13:39:
25:c6:ee:29:40:ee:1a:e7:cf:5a:73:be:87:07:b0:e1:f4:d9:
db:2c:c2:a4:56:6c:8f:43:c9:02:74:f4:89:50:7b:91:01:2b:
7d:4f:f8:34:cb:05:b3:8f:62:46:bc:2b:ae:0c:90:2a:7c:03:
6f:f7:3f:40:5e:23:7c:4b:e1:0c:d5:0d:48:df:b1:6a:d5:b9:
c5:b7:ef:67:2b:5d:5d:a7:2e:fe:26:ee:56:08:a7:95:50:f2:
50:d8:f7:60:82:eb:69:83:77:85:80:ff:7f:5a:37:b7:6e:21:
23:3f:50:c6:68:26:91:6a:ef:7e:bb:09:8e:63:f8:54:71:0c:
93:06:f1:29:d2:fb:67:b3:a6:4a:19:f3:65:db:f1:e5:95:03:
3c:92:57:82:91:31:6d:47:61:94:86:98:ae:f2:87:09:3c:39:
06:58:69:20:4f:62:80:6b:94:18:22:c9:20:13:28:0c:11:b8:
39:76:f0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:49:36 2024 by rpki-client on console-fra.rpki-client.org