Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8359D0064A7011EFBED8DD7A762E951A.roa
File: 8359D0064A7011EFBED8DD7A762E951A.roa (raw, json)
Hash identifier: NzByKm3iKz5g13Gzj5mqBwT3ma/3PIy2l5ePP+uRmCo=
Subject key identifier: BB:41:E9:EF:CD:FE:03:B2:74:7D:C1:5C:F4:7E:E5:01:FA:9B:A0:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A03B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8359D0064A7011EFBED8DD7A762E951A.roa
Signing time: Thu 25 Jul 2024 10:27:37 +0000
ROA not before: Thu 25 Jul 2024 10:27:34 +0000
ROA not after: Sun 04 Aug 2024 10:27:34 +0000
asID: 5065
IP address blocks: 156.240.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41019 (0xa03b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 10:27:34 2024 GMT
Not After : Aug 4 10:27:34 2024 GMT
Subject: CN=66a22899-f306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c0:3f:6a:60:78:21:08:12:a9:f1:5b:92:20:
ba:76:82:2d:8e:98:08:5b:c8:98:a6:f2:39:a6:5e:
4d:88:47:71:da:10:be:b4:97:b2:a0:a8:23:ce:2a:
6c:86:6e:d3:57:68:66:77:e7:f7:5e:03:6d:fc:18:
0b:7e:4e:54:fd:35:a0:59:d6:da:20:44:d6:f2:de:
18:61:e5:6d:4c:bb:2d:e8:60:95:74:a3:f0:9c:17:
c3:63:cc:e9:21:bf:b2:a2:13:ac:2c:38:e4:25:68:
44:d8:7a:de:cf:17:58:48:d7:02:32:ee:36:b1:7a:
d2:5e:a3:98:2a:d7:ce:40:33:a3:9a:01:2e:64:68:
43:be:5e:ea:e8:99:32:4f:7b:c2:6a:d8:14:7b:34:
c1:c4:a7:0e:ba:8b:84:d9:c8:36:2a:70:e8:fb:a2:
3f:60:81:35:10:ec:4c:f3:9a:42:9d:9d:94:1c:c1:
5c:fc:6b:00:56:40:9b:9a:41:ba:c5:03:6a:c0:83:
6b:42:3a:34:cd:d4:be:f5:27:6c:fb:f9:5a:85:42:
1e:a0:2d:24:6b:92:99:f9:07:58:5f:62:f9:4a:3a:
bf:54:1e:b4:a0:f6:19:97:21:1d:b7:7b:8e:c8:b1:
01:e3:5a:a8:bd:d3:3c:69:7d:03:4a:93:03:1c:5d:
59:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:41:E9:EF:CD:FE:03:B2:74:7D:C1:5C:F4:7E:E5:01:FA:9B:A0:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8359D0064A7011EFBED8DD7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.100.0/22
Signature Algorithm: sha256WithRSAEncryption
56:4d:10:d9:eb:14:7c:16:46:d3:ac:39:e3:bf:1d:9e:3c:5a:
dc:70:80:1d:1b:dd:5d:80:d6:8a:61:7e:99:43:6b:d6:13:34:
17:6a:0e:43:73:9c:2f:d5:c0:57:58:f2:ed:69:4d:9a:2a:8f:
b1:47:66:45:f9:ed:dc:99:fb:08:aa:bd:11:93:67:6a:54:1b:
b9:67:9c:35:68:68:07:59:73:74:df:55:0d:d7:2e:15:66:97:
b7:4b:82:d9:ef:9a:d1:b9:a4:77:7b:50:75:5f:cc:3b:29:ed:
81:f6:2d:80:ac:d4:bc:c2:bc:3f:06:a9:a2:f4:35:d0:40:30:
3f:a1:da:50:ba:b8:c2:48:bb:36:47:c4:9c:bf:a8:30:67:8c:
3f:e9:bd:fd:94:0f:ae:58:59:12:39:4e:5d:41:c3:e3:5d:10:
07:f5:a7:06:71:96:5d:bb:21:d3:4e:3b:76:ee:09:2b:63:57:
0a:dc:2c:9b:56:26:58:64:04:52:ea:8b:0e:e9:89:a9:fc:35:
5d:f5:b9:38:aa:11:af:d9:61:1c:95:90:f2:4a:f9:58:21:11:
e7:1e:31:40:c0:66:e1:20:3c:5a:f8:29:69:f5:78:0c:ee:31:
00:64:b3:19:82:0e:19:45:eb:93:4a:d2:9f:db:de:c6:7c:c9:
fd:39:c3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 03:05:36 2024 by rpki-client on console-ams.rpki-client.org