Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88796BB04A6011EF976D6892762E951A.roa
File: 88796BB04A6011EF976D6892762E951A.roa (raw, json)
Hash identifier: DRUDsoa1qLFz8yavDh+oqgEmvwiPl4Ef4w3EX9SY4wA=
Subject key identifier: EE:EA:B8:4F:39:11:89:6C:5D:EC:EB:89:B5:76:3E:2B:2D:A8:FF:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9FDD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88796BB04A6011EF976D6892762E951A.roa
Signing time: Thu 25 Jul 2024 08:33:14 +0000
ROA not before: Thu 25 Jul 2024 08:33:11 +0000
ROA not after: Sat 03 Aug 2024 08:33:11 +0000
asID: 22773
IP address blocks: 156.239.144.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40925 (0x9fdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 08:33:11 2024 GMT
Not After : Aug 3 08:33:11 2024 GMT
Subject: CN=66a20dca-adcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:d9:62:5f:73:e8:8f:84:a7:a6:3b:ab:f0:
16:e3:2d:58:8c:50:1a:67:c1:c3:54:f4:7e:77:d9:
2b:20:e7:64:b8:31:9a:30:d4:b4:c9:47:90:01:cb:
7a:ca:69:ff:ba:c7:de:f1:45:3e:45:b8:ec:ca:f9:
de:30:7d:90:37:42:0c:e7:12:37:fb:5a:b7:d2:46:
73:f3:14:1e:b6:a2:91:ec:87:87:b3:39:c4:9d:1b:
8c:b1:61:0f:ac:07:a5:d2:52:74:33:4b:7f:1c:f6:
ed:a6:be:da:14:04:52:75:90:06:35:0d:94:2e:0c:
24:72:c7:ab:20:d7:2c:be:c9:f9:1b:e8:b3:06:c1:
83:76:2f:d9:cd:6d:05:c8:40:a8:69:8b:e7:2a:87:
53:f4:c1:1e:80:b7:41:7f:90:16:9e:7c:79:74:fc:
3f:2b:a4:a1:d9:f2:34:53:94:43:6e:cf:42:95:3f:
94:f6:bb:f5:ba:f8:c3:28:27:cb:32:71:5b:6d:3e:
05:f2:ac:ac:9f:0f:e2:a6:71:f0:14:0f:41:a7:e6:
6b:be:f7:b8:fe:97:c1:5d:43:33:08:80:6e:8d:ef:
2e:94:a1:f5:99:55:a7:3e:cf:16:0b:a5:ed:83:8f:
0a:a4:7c:14:6c:00:4f:f1:9e:94:e4:7e:27:e0:5d:
65:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EA:B8:4F:39:11:89:6C:5D:EC:EB:89:B5:76:3E:2B:2D:A8:FF:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88796BB04A6011EF976D6892762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.144.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:1b:de:1f:71:70:4a:f8:75:25:5d:e4:3a:40:23:71:d9:55:
f5:09:4b:03:3a:ab:27:1f:03:c6:e3:f0:99:34:f0:36:61:ab:
6f:5f:3e:47:1c:2b:1d:ac:4c:d3:f8:0d:89:b3:76:c5:d1:25:
6e:58:c9:6d:79:55:8b:b3:cb:29:a9:a4:b9:47:5d:08:5d:04:
c6:80:59:e7:a4:3a:4d:fa:a2:d8:b4:b8:89:c5:51:de:15:fd:
ef:d2:00:35:5f:71:d9:dd:c4:a3:93:47:99:35:7c:3e:de:e4:
1b:e9:40:4d:4c:98:6d:3c:c6:b5:56:39:2f:29:a3:f0:04:fc:
6d:91:da:10:b4:29:f9:43:12:f4:29:2b:db:f6:ed:10:7a:b8:
3f:c7:18:24:46:76:f4:b2:58:5c:de:ea:68:14:b1:eb:bc:3e:
0b:98:6d:a1:a9:99:aa:af:da:83:87:8a:11:93:5b:aa:fb:ad:
4f:cd:c6:13:0f:aa:ab:52:68:f5:bd:63:a3:02:48:8c:3c:d1:
c2:3a:d9:16:cd:fc:a1:7f:a7:b8:eb:b6:f5:dc:65:38:5f:27:
f5:43:81:51:b6:5f:87:d6:4a:76:ac:8f:cc:5b:52:5e:08:41:
f7:f7:68:ef:f7:65:01:04:22:b8:68:de:78:dd:f1:55:40:3b:
5e:8f:5c:1d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ/dMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI1MDgzMzExWhcNMjQwODAzMDgzMzExWjAYMRYw
FAYDVQQDEw02NmEyMGRjYS1hZGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA03rZYl9z6I+Ep6Y7q/AW4y1YjFAaZ8HDVPR+d9krIOdkuDGaMNS0yUeQ
Act6ymn/usfe8UU+RbjsyvneMH2QN0IM5xI3+1q30kZz8xQetqKR7IeHsznEnRuM
sWEPrAel0lJ0M0t/HPbtpr7aFARSdZAGNQ2ULgwkcserINcsvsn5G+izBsGDdi/Z
zW0FyECoaYvnKodT9MEegLdBf5AWnnx5dPw/K6Sh2fI0U5RDbs9ClT+U9rv1uvjD
KCfLMnFbbT4F8qysnw/ipnHwFA9Bp+Zrvve4/pfBXUMzCIBuje8ulKH1mVWnPs8W
C6Xtg48KpHwUbABP8Z6U5H4n4F1loQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFO7q
uE85EYlsXezribV2PistqP+FMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84ODc5NkJCMDRBNjAxMUVGOTc2RDY4OTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnO+QMA0GCSqGSIb3DQEBCwUA
A4IBAQCNG94fcXBK+HUlXeQ6QCNx2VX1CUsDOqsnHwPG4/CZNPA2YatvXz5HHCsd
rEzT+A2Js3bF0SVuWMlteVWLs8spqaS5R10IXQTGgFnnpDpN+qLYtLiJxVHeFf3v
0gA1X3HZ3cSjk0eZNXw+3uQb6UBNTJhtPMa1VjkvKaPwBPxtkdoQtCn5QxL0KSvb
9u0Qerg/xxgkRnb0slhc3upoFLHrvD4LmG2hqZmqr9qDh4oRk1uq+61PzcYTD6qr
Umj1vWOjAkiMPNHCOtkWzfyhf6e467b13GU4Xyf1Q4FRtl+H1kp2rI/MW1JeCEH3
92jv92UBBCK4aN543fFVQDtej1wd
-----END CERTIFICATE-----
Generated at Sun Aug 4 03:57:24 2024 by rpki-client on console-fra.rpki-client.org