Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A39FC98377411EF94C65083762E951A.roa
File: 8A39FC98377411EF94C65083762E951A.roa (raw, json)
Hash identifier: 2AZe8OK09I9UYChBfAcpfkW3VKlz8nV7jK6elDZ6NZ8=
Subject key identifier: AD:9C:25:40:C8:99:91:89:9D:9A:BF:76:4F:91:48:B7:79:51:4B:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 96E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A39FC98377411EF94C65083762E951A.roa
Signing time: Mon 01 Jul 2024 06:38:35 +0000
ROA not before: Mon 01 Jul 2024 06:38:31 +0000
ROA not after: Fri 02 Aug 2024 06:38:31 +0000
asID: 269070
IP address blocks: 156.249.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38624 (0x96e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 06:38:31 2024 GMT
Not After : Aug 2 06:38:31 2024 GMT
Subject: CN=66824eeb-1a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:74:9e:8f:f9:2b:b6:85:f4:2f:7f:7d:f8:a7:
cb:d3:cf:17:b2:fd:bd:14:ff:31:49:09:fd:bc:13:
e7:6f:65:45:22:77:0e:47:ed:51:21:96:b0:39:01:
ad:8d:87:57:2a:21:1d:c6:ca:83:69:86:d2:3d:36:
21:40:ba:c0:8d:7f:4f:66:f0:f7:d2:01:12:66:fc:
0c:7c:40:18:e1:b6:73:19:a4:5d:33:f0:46:cd:47:
3a:cc:b8:46:14:42:c5:4e:73:ed:fa:7f:31:5f:ef:
44:05:8a:1f:08:df:5c:d0:b8:d6:bd:c5:07:9f:d3:
fd:96:64:16:c9:a1:99:68:02:eb:33:b6:df:1f:e8:
46:af:24:87:d9:bd:1f:d9:4c:e4:84:31:86:44:2a:
a7:2c:dc:e1:04:5e:b6:34:c1:76:6d:9d:39:00:13:
4f:af:c3:d1:26:2c:d6:17:20:eb:d3:ec:73:a5:f0:
a5:b4:8c:71:62:4c:07:7a:ef:22:e8:f4:03:81:0b:
db:dd:8f:c0:18:40:81:72:7e:a7:27:8e:e8:9d:40:
96:77:90:4a:2d:bf:9a:ca:59:b7:94:e3:2e:1f:5d:
cd:40:15:26:bd:5c:52:67:a6:6e:78:87:2b:48:f5:
80:f3:79:77:e5:99:01:bf:2a:76:48:19:cd:14:62:
f8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9C:25:40:C8:99:91:89:9D:9A:BF:76:4F:91:48:B7:79:51:4B:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A39FC98377411EF94C65083762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.64.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:fd:93:a9:84:1f:61:70:11:a9:a9:48:b7:68:35:e6:ca:9f:
a9:04:fc:35:ef:a1:40:eb:99:7c:26:5e:5c:6c:d8:1e:71:c5:
8d:fa:34:3e:4c:15:71:07:9b:53:65:26:b4:88:17:e0:f6:0f:
fa:44:cc:15:13:c7:3d:68:b6:20:d0:a0:e2:e7:54:03:32:de:
6e:71:ff:d4:95:4d:7a:9d:12:4f:e8:b9:51:63:37:2f:1e:27:
77:ed:62:54:17:7a:c9:7d:db:12:02:3b:f9:69:d3:79:a4:58:
9d:02:72:86:6e:2b:2f:fd:f2:7e:17:52:67:56:30:7d:82:c3:
9c:79:92:ec:cd:07:f6:18:82:1e:88:23:ac:3f:37:41:e9:35:
df:d1:36:bf:d0:e7:7b:04:3b:94:8c:f9:58:65:6f:7e:7e:ba:
9e:b8:22:1e:b0:95:cf:ef:cc:b4:29:10:66:f5:ae:ea:08:aa:
0f:cf:73:68:59:7b:57:16:73:83:4a:c6:cf:5e:ef:83:9d:52:
c0:b6:d3:db:d6:b7:51:9f:a6:5f:ef:13:38:db:bb:74:3f:43:
c2:20:c2:6b:ab:a5:10:87:86:13:c8:f3:34:0f:ed:31:8a:76:
11:82:29:91:fe:3f:d5:0f:ac:ac:68:10:06:6d:6d:db:7a:78:
ad:dd:fb:d4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJbgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzAxMDYzODMxWhcNMjQwODAyMDYzODMxWjAYMRYw
FAYDVQQDEw02NjgyNGVlYi0xYTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAl3Sej/krtoX0L399+KfL088Xsv29FP8xSQn9vBPnb2VFIncOR+1RIZaw
OQGtjYdXKiEdxsqDaYbSPTYhQLrAjX9PZvD30gESZvwMfEAY4bZzGaRdM/BGzUc6
zLhGFELFTnPt+n8xX+9EBYofCN9c0LjWvcUHn9P9lmQWyaGZaALrM7bfH+hGrySH
2b0f2UzkhDGGRCqnLNzhBF62NMF2bZ05ABNPr8PRJizWFyDr0+xzpfCltIxxYkwH
eu8i6PQDgQvb3Y/AGECBcn6nJ47onUCWd5BKLb+aylm3lOMuH13NQBUmvVxSZ6Zu
eIcrSPWA83l35ZkBvyp2SBnNFGL4MwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFK2c
JUDImZGJnZq/dk+RSLd5UUvjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84QTM5RkM5ODM3NzQxMUVGOTRDNjUwODM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPlAMA0GCSqGSIb3DQEBCwUA
A4IBAQAe/ZOphB9hcBGpqUi3aDXmyp+pBPw176FA65l8Jl5cbNgeccWN+jQ+TBVx
B5tTZSa0iBfg9g/6RMwVE8c9aLYg0KDi51QDMt5ucf/UlU16nRJP6LlRYzcvHid3
7WJUF3rJfdsSAjv5adN5pFidAnKGbisv/fJ+F1JnVjB9gsOceZLszQf2GIIeiCOs
PzdB6TXf0Ta/0Od7BDuUjPlYZW9+frqeuCIesJXP78y0KRBm9a7qCKoPz3NoWXtX
FnODSsbPXu+DnVLAttPb1rdRn6Zf7xM427t0P0PCIMJrq6UQh4YTyPM0D+0xinYR
gimR/j/VD6ysaBAGbW3benit3fvU
-----END CERTIFICATE-----
Generated at Fri Aug 2 10:00:17 2024 by rpki-client on console-ams.rpki-client.org