Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/880CAA5C48E411EF96566779762E951A.roa
File: 880CAA5C48E411EF96566779762E951A.roa (raw, json)
Hash identifier: cerKUgmyA+j7jIpalGDBS3it0iz9KTd3IqUwYDNYGIg=
Subject key identifier: 0B:7D:BD:E7:39:74:11:EB:E0:EC:A8:AE:B9:01:41:26:84:C5:66:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9ECE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/880CAA5C48E411EF96566779762E951A.roa
Signing time: Tue 23 Jul 2024 11:13:04 +0000
ROA not before: Fri 26 Jul 2024 11:13:01 +0000
ROA not after: Thu 01 Aug 2024 11:13:01 +0000
asID: 3491
IP address blocks: 156.230.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40654 (0x9ece)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 11:13:01 2024 GMT
Not After : Aug 1 11:13:01 2024 GMT
Subject: CN=669f9040-7a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4b:dc:e3:f4:cb:fc:68:44:b5:1b:b8:94:bc:
fe:8a:6a:55:4a:c2:1e:51:ee:12:06:fd:b4:c9:a5:
b1:15:67:08:72:d0:6a:14:ee:87:f3:43:3d:24:4c:
c8:ae:a3:5b:01:9b:4a:ab:58:01:e6:93:98:15:5b:
06:b6:1c:e7:7e:ed:32:9b:de:09:82:58:51:54:2f:
2b:4f:62:9c:d1:d6:42:ad:ee:cd:69:f0:1b:57:4c:
b1:ac:7b:f5:c1:c1:fb:84:bc:e6:8c:e3:51:dd:52:
24:37:ab:13:b9:f3:0a:92:26:c2:81:04:29:7e:01:
f9:cf:b8:8e:84:20:80:fa:f1:bb:70:f5:43:70:9a:
d8:ee:0f:44:54:0d:b8:09:23:25:d5:d7:48:91:7e:
43:a0:36:4d:bf:e3:54:7d:75:3e:37:8f:46:5b:09:
fd:4d:0b:10:1e:b8:cc:8e:7e:99:28:4b:48:f6:99:
f4:7f:75:b5:83:fa:77:52:60:97:ce:f0:cc:d1:a7:
9f:67:3b:57:df:53:91:9e:d8:20:54:30:e9:e4:e0:
76:87:e1:33:8a:d0:e6:10:58:f3:2e:db:58:2f:18:
20:62:f0:c1:47:03:42:05:fb:bf:05:78:a2:0d:3d:
23:00:58:16:b9:51:8a:b5:55:a0:44:bb:85:9d:6b:
8d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7D:BD:E7:39:74:11:EB:E0:EC:A8:AE:B9:01:41:26:84:C5:66:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/880CAA5C48E411EF96566779762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.3.0/24
Signature Algorithm: sha256WithRSAEncryption
18:a8:33:ff:43:aa:2f:c7:4d:ac:46:6d:54:4f:09:1c:8b:19:
90:e0:ed:f8:f6:74:0a:0b:f2:74:de:11:5d:7f:ea:bf:ee:9e:
3b:1e:84:8b:c4:88:79:1c:6f:cb:a9:7e:d2:c9:62:5a:46:03:
cc:9b:8e:bd:c4:80:49:a1:d1:d5:f8:39:8b:91:dc:33:b2:2e:
22:4e:28:e2:9d:1f:7e:c5:d2:2f:b5:57:25:3b:20:80:17:09:
03:5b:ee:a9:fe:c6:d0:3e:91:8c:b2:57:11:97:86:8b:4a:0f:
b2:09:20:af:ee:bd:96:d3:f1:56:23:a6:fc:d3:ab:c8:4a:82:
42:84:53:b2:a8:8b:2d:a2:93:f2:5c:b9:eb:be:1a:f5:63:79:
82:ba:06:56:e1:8c:3f:68:09:35:fe:ed:d9:02:af:95:57:30:
14:47:f4:2c:f5:f5:d2:c7:68:40:c8:dd:a1:bd:ef:5a:7f:1f:
76:ca:a9:cb:9d:e1:d8:ec:ff:7a:3d:a5:99:91:92:87:b9:f3:
5b:b9:c3:a2:7b:51:ed:d1:1b:76:e9:47:73:2c:7d:4b:93:65:
f8:5b:31:64:3e:dc:3e:77:11:9d:f1:ef:d7:46:8a:57:27:86:
eb:1f:fc:83:ec:2d:46:19:1d:c4:3e:d6:97:a8:15:b6:6b:4b:
6a:31:dd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 04:03:11 2024 by rpki-client on console-ams.rpki-client.org