Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EF993C44A6111EFA4A2AE97762E951A.roa
File: 8EF993C44A6111EFA4A2AE97762E951A.roa (raw, json)
Hash identifier: VVBrHUlUHGZbYRFMuay6pRbrpILfwq+LgMg3+6NaNYY=
Subject key identifier: 0C:F5:A2:69:BE:BA:4F:82:05:38:98:1B:A0:D7:87:BB:A5:4F:7F:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9FED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EF993C44A6111EFA4A2AE97762E951A.roa
Signing time: Thu 25 Jul 2024 08:40:34 +0000
ROA not before: Thu 25 Jul 2024 08:40:31 +0000
ROA not after: Sat 03 Aug 2024 08:40:31 +0000
asID: 22773
IP address blocks: 156.237.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40941 (0x9fed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 08:40:31 2024 GMT
Not After : Aug 3 08:40:31 2024 GMT
Subject: CN=66a20f82-0ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2d:76:1c:9f:63:d8:d9:fb:70:48:b6:9e:cc:
b5:4b:21:d1:ac:1d:1b:4a:0e:82:a8:02:55:cd:45:
90:31:48:27:0f:93:94:74:34:72:83:ca:d0:35:54:
75:9f:e9:25:f0:a8:45:b6:c9:ca:b6:b0:52:01:d1:
e7:bc:bc:d3:b4:8f:db:4e:92:76:87:5c:e5:d2:9b:
fa:5b:39:a3:62:9c:65:c6:18:70:c2:fa:51:06:bc:
b4:a4:68:9e:22:1d:5d:7c:ba:4f:64:01:39:8c:8a:
57:dc:23:e1:8f:cb:e3:b0:73:72:3d:9f:c6:ea:bb:
84:54:8d:59:12:1b:70:52:2a:a0:3f:66:aa:3d:6d:
25:03:51:7f:dc:b4:57:19:60:07:db:c8:45:c0:6c:
21:c8:b0:53:8a:92:d0:55:5e:bf:8a:f7:5d:e9:00:
07:6a:71:c3:b5:e1:16:2a:90:0d:bd:e2:b3:37:f9:
89:14:51:c2:5f:d0:61:9e:0c:84:9c:04:78:75:3a:
5d:13:85:38:4c:50:d8:1b:f5:b0:b3:65:a4:b8:c4:
81:2a:4a:c1:cd:84:e9:82:c6:04:57:26:74:6f:02:
32:6c:5e:16:5d:2b:b0:dc:e7:f4:c7:73:6d:26:78:
4c:86:0d:50:b5:92:c6:47:42:55:a8:58:17:22:56:
aa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F5:A2:69:BE:BA:4F:82:05:38:98:1B:A0:D7:87:BB:A5:4F:7F:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EF993C44A6111EFA4A2AE97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.0.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f9:c5:e5:62:69:2d:66:21:f5:d9:3e:a4:81:29:e0:0d:0f:
9f:24:25:0f:ff:d0:44:f2:5f:08:32:d5:7e:c1:ac:a7:ae:36:
de:cc:86:3d:69:f4:af:9d:f8:35:4b:0c:ec:9b:68:cb:49:76:
dd:ce:16:14:8b:6f:b4:38:94:76:b1:b5:f1:e8:0d:4d:d6:a9:
e0:68:d6:e1:43:7f:79:f3:d4:c4:da:1c:17:36:4e:aa:ca:8f:
71:43:01:08:30:44:ba:a4:9e:c8:be:06:0a:e1:92:62:37:e3:
11:40:8f:01:60:8a:d9:2a:ec:63:fd:2b:0b:04:29:0a:46:b0:
d0:6c:28:61:af:fe:8c:55:1e:70:bd:1b:b0:8a:59:c9:db:00:
8a:64:68:77:1a:d0:59:a0:fe:89:ba:2c:b9:68:28:0f:c1:fb:
2b:c3:4a:65:a9:6e:02:cf:51:a5:38:ab:ce:87:4d:bf:a3:b9:
ea:de:45:0d:fc:c6:31:70:59:ab:ee:71:02:cf:c6:91:03:69:
64:09:39:a6:17:ce:7e:1c:59:12:02:72:d5:7e:af:08:df:03:
3b:dd:75:49:aa:99:62:c8:6f:64:f2:00:13:93:b8:cd:e8:7e:
ac:ba:c9:9d:56:16:c4:4c:45:ac:a7:8b:cb:23:78:ee:50:c7:
81:87:2e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:52 2024 by rpki-client on console-ams.rpki-client.org