Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7527810C4A7211EFA1C38C88762E951A.roa
File: 7527810C4A7211EFA1C38C88762E951A.roa (raw, json)
Hash identifier: OJrVhO0iHuh2ha+yn+b2WF5MxCFmpUDYc/ojc2Duu8s=
Subject key identifier: 42:52:3E:26:06:69:41:32:4E:64:40:A4:14:AE:28:56:2E:FD:04:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A03F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7527810C4A7211EFA1C38C88762E951A.roa
Signing time: Thu 25 Jul 2024 10:41:32 +0000
ROA not before: Thu 25 Jul 2024 10:41:29 +0000
ROA not after: Sun 04 Aug 2024 10:41:29 +0000
asID: 5065
IP address blocks: 156.248.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41023 (0xa03f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 10:41:29 2024 GMT
Not After : Aug 4 10:41:29 2024 GMT
Subject: CN=66a22bdc-656c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:91:80:0f:3e:78:9a:22:0a:4a:c5:75:2c:
38:70:f4:7d:d8:71:7e:79:ec:04:11:ba:a6:61:a5:
d0:4c:da:96:10:04:d7:1c:b0:03:31:ca:80:ab:75:
6c:46:40:31:2c:19:2d:ea:7c:75:06:55:12:93:92:
f7:13:be:b1:d4:6f:48:16:51:52:1c:bf:9e:3f:35:
0b:36:3d:f4:ba:f4:3b:67:c3:15:f3:d7:5a:4a:a9:
58:34:9b:85:e9:83:a8:c1:d7:fa:f9:42:49:a5:8c:
03:c4:04:ff:fa:9b:25:e3:b9:6f:8d:dc:c5:7e:b8:
85:98:ab:13:17:6f:15:98:95:51:44:64:8a:b4:a8:
91:03:4d:9e:71:97:17:91:1d:96:9f:7d:f1:cd:b4:
42:1c:f1:9b:52:a0:26:06:6d:55:e2:5d:df:8a:bb:
de:d8:e6:43:23:a8:70:2d:43:29:00:40:d3:7d:ff:
f3:1b:a6:97:70:06:0e:47:2e:e9:2d:f5:d0:c5:74:
c3:1c:86:41:f0:d9:4f:4f:86:6a:e3:e1:e0:8e:fd:
d5:6e:82:8d:14:57:f5:0c:17:5c:d3:38:7e:eb:b7:
9e:23:fc:4e:d9:4f:80:0e:c1:7c:79:bd:5e:a0:d7:
60:84:b8:1f:a8:c5:cd:01:0f:41:dc:12:31:fe:71:
80:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:52:3E:26:06:69:41:32:4E:64:40:A4:14:AE:28:56:2E:FD:04:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7527810C4A7211EFA1C38C88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.8.0/22
Signature Algorithm: sha256WithRSAEncryption
41:1a:f4:c0:a4:61:a4:6e:2d:31:7b:19:84:e8:e4:d6:d4:c9:
45:33:68:3b:1e:22:15:80:da:0f:20:69:25:60:cd:b0:f4:3c:
c8:d0:34:a7:c1:8f:67:21:ff:cf:ac:55:d2:04:6a:a7:d7:67:
da:ee:24:58:d3:11:14:52:f0:24:ea:f7:b0:4b:8d:93:53:22:
e5:1e:eb:3b:ed:8f:19:a7:13:69:a6:53:3d:fd:ef:0d:34:ec:
bd:7f:bc:13:73:bd:55:d8:24:6e:8d:6d:e1:44:5d:13:2a:e0:
a1:5d:d7:66:08:44:db:50:2a:e3:be:0d:10:99:99:81:dc:52:
09:04:6b:c8:32:f1:2a:91:47:91:50:74:1c:66:77:1e:b6:73:
2c:02:34:1c:cb:35:c9:d7:6a:ad:4f:c3:8a:6b:e1:1b:37:05:
ff:13:a8:72:fd:97:05:18:a5:26:14:c9:7b:d7:ef:f2:4f:ee:
f9:c5:b8:dc:a8:95:a0:0c:4e:10:2f:35:29:5d:ca:2f:d2:a9:
7d:fe:aa:9b:f5:39:00:20:f8:a2:33:50:19:a2:36:cd:37:68:
11:05:35:37:29:50:8c:2b:e1:a5:48:b9:5c:cf:89:68:f3:12:
40:e9:f5:4c:f0:e6:58:b0:c8:f1:d4:e9:f9:ff:28:d9:58:6f:
e6:a3:25:a8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAKA/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI1MTA0MTI5WhcNMjQwODA0MTA0MTI5WjAYMRYw
FAYDVQQDEw02NmEyMmJkYy02NTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyKWRgA8+eJoiCkrFdSw4cPR92HF+eewEEbqmYaXQTNqWEATXHLADMcqA
q3VsRkAxLBkt6nx1BlUSk5L3E76x1G9IFlFSHL+ePzULNj30uvQ7Z8MV89daSqlY
NJuF6YOowdf6+UJJpYwDxAT/+psl47lvjdzFfriFmKsTF28VmJVRRGSKtKiRA02e
cZcXkR2Wn33xzbRCHPGbUqAmBm1V4l3firve2OZDI6hwLUMpAEDTff/zG6aXcAYO
Ry7pLfXQxXTDHIZB8NlPT4Zq4+Hgjv3VboKNFFf1DBdc0zh+67eeI/xO2U+ADsF8
eb1eoNdghLgfqMXNAQ9B3BIx/nGABwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEJS
PiYGaUEyTmRApBSuKFYu/QSJMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NTI3ODEwQzRBNzIxMUVGQTFDMzhDODg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPgIMA0GCSqGSIb3DQEBCwUA
A4IBAQBBGvTApGGkbi0xexmE6OTW1MlFM2g7HiIVgNoPIGklYM2w9DzI0DSnwY9n
If/PrFXSBGqn12fa7iRY0xEUUvAk6vewS42TUyLlHus77Y8ZpxNpplM9/e8NNOy9
f7wTc71V2CRujW3hRF0TKuChXddmCETbUCrjvg0QmZmB3FIJBGvIMvEqkUeRUHQc
ZncetnMsAjQcyzXJ12qtT8OKa+EbNwX/E6hy/ZcFGKUmFMl71+/yT+75xbjcqJWg
DE4QLzUpXcov0ql9/qqb9TkAIPiiM1AZojbNN2gRBTU3KVCMK+GlSLlcz4lo8xJA
6fVM8OZYsMjx1On5/yjZWG/moyWo
-----END CERTIFICATE-----
Generated at Mon Aug 5 03:21:47 2024 by rpki-client on console-fra.rpki-client.org