Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AECBCF4848411EFABFFB5AD762E951A.roa
File: 8AECBCF4848411EFABFFB5AD762E951A.roa (raw, json)
Hash identifier: Ltn1B+fppzeoN45i2K2i2BR+NQl8PwVYMlgNpxRJ0u8=
Subject key identifier: D0:B7:B6:FF:0F:9C:FF:8E:04:AB:20:B5:13:C8:27:CC:B3:5F:3F:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C08E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AECBCF4848411EFABFFB5AD762E951A.roa
Signing time: Mon 07 Oct 2024 08:17:07 +0000
ROA not before: Mon 07 Oct 2024 08:17:04 +0000
ROA not after: Sat 09 Nov 2024 08:17:04 +0000
asID: 397423
IP address blocks: 156.225.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49294 (0xc08e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 7 08:17:04 2024 GMT
Not After : Nov 9 08:17:04 2024 GMT
Subject: CN=67039903-6f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:40:96:3d:a1:e8:f2:1d:4c:cf:57:7e:ce:
59:63:ba:1b:6c:1a:80:db:56:cd:9f:f4:90:4f:94:
c8:d9:ab:03:8f:d1:b6:ef:66:7f:69:01:45:0d:33:
fc:62:8c:7d:3a:34:d0:9f:4b:45:e6:c9:8c:c9:b6:
1c:8a:a9:95:49:36:dc:2a:5d:92:7e:47:73:df:13:
d4:a0:a6:4f:2f:4d:2f:38:bd:5f:98:fe:71:2f:1d:
ed:27:b4:79:a6:9c:45:b3:17:b0:39:cc:a1:9f:38:
4d:f4:e6:ca:63:a1:be:6f:04:7f:88:04:44:bc:d9:
5d:e1:08:c0:72:57:86:36:bc:12:7e:99:63:c3:bd:
17:81:3e:e9:08:36:d9:fa:e6:4a:63:29:06:b7:7f:
03:d0:07:40:b9:12:ea:5b:94:1e:f3:c8:cf:2f:e4:
0b:b9:a1:af:42:c7:d9:33:51:20:a5:c1:fc:c0:1b:
08:fc:71:83:a4:a5:25:4b:78:c3:0d:41:e3:8a:c5:
2e:3d:c9:f2:e7:ce:92:7c:46:2c:e6:cb:db:75:3d:
7d:7e:c1:22:7f:b9:5a:8f:93:27:55:20:89:2f:7b:
24:4d:61:f8:0b:ec:af:23:fa:5d:71:16:87:1f:83:
b7:b5:26:0c:13:6a:5b:96:76:8e:56:c5:54:e0:da:
7d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B7:B6:FF:0F:9C:FF:8E:04:AB:20:B5:13:C8:27:CC:B3:5F:3F:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AECBCF4848411EFABFFB5AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.65.0/24
Signature Algorithm: sha256WithRSAEncryption
27:5c:9f:5d:b7:75:bb:d0:bd:5d:f3:be:a9:d8:88:f3:b1:70:
f2:93:37:77:01:1d:f4:31:51:22:da:69:e8:79:aa:70:fb:ee:
ce:83:83:21:69:e4:5d:9b:77:78:52:40:57:3d:f8:a1:e6:cd:
fb:46:e9:8c:2f:d5:81:be:17:57:1f:25:b5:8f:7f:31:29:79:
60:df:ac:c8:f9:04:08:a7:ad:b9:7e:9c:2d:a6:16:32:46:fa:
6e:d2:20:d7:68:82:2a:75:7c:63:c1:8b:e3:b1:42:0a:96:30:
ff:66:86:26:67:00:a0:cf:2f:c1:54:cb:36:d5:84:23:52:22:
50:cc:f4:46:97:0f:94:35:c8:98:d8:64:b4:47:d2:a1:88:ff:
cd:14:4e:38:78:58:07:af:e0:25:b1:62:85:f2:dc:68:a1:e5:
da:b8:d9:d6:e8:38:0b:82:54:3b:4e:53:a1:26:e9:00:19:0d:
2f:a2:23:04:99:96:60:cb:9a:80:50:3a:bd:21:5d:63:92:26:
7d:fc:9c:b4:f9:35:51:16:bc:ce:1b:52:a4:96:85:58:87:d6:
e3:9f:7a:3c:df:0c:b3:57:e0:70:4b:a2:14:e8:c1:e7:87:0e:
c0:19:9a:6d:34:5a:87:25:6f:9b:df:d3:43:12:5c:b7:5e:a5:
0d:7b:d1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 18:07:20 2024 by rpki-client on console-ams.rpki-client.org