Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CDC7D264A5D11EFAC9E427B762E951A.roa
File: 8CDC7D264A5D11EFAC9E427B762E951A.roa (raw, json)
Hash identifier: K3HDOeoGuL9/rwJtWH52lCsaa0k5oiKNPihKIEV9bRg=
Subject key identifier: 20:53:60:40:C2:11:89:28:37:4B:99:1E:BC:D4:E3:29:67:E8:9B:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9FD3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CDC7D264A5D11EFAC9E427B762E951A.roa
Signing time: Thu 25 Jul 2024 08:11:53 +0000
ROA not before: Thu 25 Jul 2024 08:11:49 +0000
ROA not after: Sat 03 Aug 2024 08:11:49 +0000
asID: 22773
IP address blocks: 156.246.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40915 (0x9fd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 08:11:49 2024 GMT
Not After : Aug 3 08:11:49 2024 GMT
Subject: CN=66a208c9-098e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:37:d9:51:d0:75:4a:66:35:98:83:83:7a:
7b:88:2d:db:49:f0:b2:29:d6:0b:e2:8b:8b:08:4c:
c6:86:41:18:ad:17:fe:17:aa:e7:2e:89:5e:92:e8:
56:e2:bb:20:91:5d:c1:cf:f8:21:a8:3b:02:10:d6:
44:05:88:b8:0a:5f:67:80:78:6e:85:5c:21:6a:92:
18:88:11:83:59:75:c4:5e:bc:7c:d1:c7:03:97:c8:
30:f0:b3:64:f4:e2:81:a4:ad:a7:ff:51:06:f5:de:
50:d5:c3:7c:ea:33:1f:fe:5f:7c:35:81:3b:96:b6:
c7:3e:81:9b:52:7d:5d:11:b6:99:ea:46:d7:a8:96:
5b:e1:27:45:bb:f4:18:f5:19:9b:60:c4:e9:fc:85:
5d:5d:b2:58:1a:86:a7:5d:d2:1c:18:c8:0c:d0:71:
75:2e:19:77:52:42:d5:1f:54:0b:7c:82:80:06:6f:
3e:e9:71:c6:bd:34:36:b5:26:27:22:76:f2:25:41:
fe:20:f8:47:50:81:9b:ef:78:a4:9e:b9:11:f2:f9:
14:d0:00:ea:89:59:a2:e9:ff:45:ea:2e:39:39:5c:
70:73:cf:25:4b:24:d8:dd:02:ed:2b:7a:25:e9:bd:
fe:31:77:c0:70:c6:7c:5c:06:ad:bc:a5:c3:a8:12:
9a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:53:60:40:C2:11:89:28:37:4B:99:1E:BC:D4:E3:29:67:E8:9B:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CDC7D264A5D11EFAC9E427B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.96.0/19
Signature Algorithm: sha256WithRSAEncryption
81:79:0a:c7:ce:ba:2f:02:4f:8f:b3:da:8a:50:45:16:dd:73:
16:17:d1:94:ea:0f:6c:8f:51:ed:03:1b:58:ca:95:9e:b9:91:
a9:52:f9:27:e2:cf:df:8f:e0:ce:6c:68:66:95:a0:35:f4:37:
6c:b1:fb:9d:0b:03:38:2e:a2:4e:0d:8d:db:3f:61:8f:ee:a1:
2e:84:d4:1a:c6:2a:5b:f6:37:aa:a9:a2:ad:42:af:2f:87:92:
a0:d2:64:3b:0c:5d:10:57:d4:41:20:7e:a0:92:47:a8:8b:47:
45:86:54:bc:cf:2e:c9:07:f0:53:94:43:03:b5:80:3c:51:bb:
58:fa:16:d3:94:b7:e4:a7:07:eb:a4:73:d5:7c:52:d4:e9:8e:
ed:f4:4b:3e:96:3e:17:d2:ee:98:f7:af:3b:d7:67:e1:cf:81:
ba:84:12:bd:cf:f1:12:16:0d:2b:6f:79:1b:f8:33:fb:7c:aa:
d0:52:b2:e1:f3:c6:83:14:92:8c:40:2d:ac:50:59:97:d6:e8:
01:20:57:27:e1:bf:d6:18:8d:e6:aa:32:89:0e:fb:3d:73:42:
9b:2f:bd:99:73:69:86:7b:b8:17:72:e6:cc:13:4c:dd:15:6b:
65:2e:86:85:82:f5:d1:c2:65:d5:8e:af:0e:51:ea:f1:da:bf:
4a:bd:d1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:57:24 2024 by rpki-client on console-fra.rpki-client.org