Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/934F74F83A9311EF889EBAA2762E951A.roa
File: 934F74F83A9311EF889EBAA2762E951A.roa (raw, json)
Hash identifier: zkEpcGo2WVbt7MzhN+T7GHBWdfQM29zb9FN3vEccDiw=
Subject key identifier: 49:7A:27:69:A9:04:D9:42:9D:B2:0C:D7:F6:96:74:1C:5D:A1:16:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 988D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/934F74F83A9311EF889EBAA2762E951A.roa
Signing time: Fri 05 Jul 2024 05:58:18 +0000
ROA not before: Fri 05 Jul 2024 05:58:15 +0000
ROA not after: Thu 01 Aug 2024 05:58:15 +0000
asID: 39600
IP address blocks: 156.252.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39053 (0x988d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 05:58:15 2024 GMT
Not After : Aug 1 05:58:15 2024 GMT
Subject: CN=66878b7a-a9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:71:29:de:55:63:bc:d1:34:33:b0:f7:fc:
ea:1c:ea:69:93:d0:07:6e:c2:30:df:e8:91:74:f3:
47:dc:64:7b:41:25:c0:bb:be:79:ad:10:58:f0:85:
5f:58:b7:78:9a:c8:19:5f:dd:38:69:34:7b:aa:47:
fa:23:6e:68:3c:92:18:ae:df:a2:b5:e4:57:fd:f5:
0e:71:fb:11:39:80:53:0c:0d:f8:2e:72:dd:35:19:
25:f8:2d:5b:b1:d3:51:05:1d:28:04:f6:66:bc:61:
55:9a:e6:85:a9:55:45:a4:60:a2:2a:e5:46:78:26:
aa:6c:45:88:34:8d:e1:6f:61:76:7d:31:e0:2d:1f:
e2:d5:b1:ab:e3:e6:9b:5e:db:07:24:e4:fa:55:11:
99:dc:cd:e3:9a:3e:8c:a7:c4:d7:d9:25:69:21:6f:
97:e4:99:d8:47:50:1d:fc:8f:c9:ca:9b:08:6a:e3:
bc:0f:6b:c6:10:9d:08:52:6d:22:09:88:0c:2d:71:
d1:1b:fa:ba:e7:39:14:88:56:0a:09:fa:43:a8:23:
82:9a:e3:31:53:0e:01:bb:2c:bd:b7:7f:f3:c9:04:
3a:6e:95:2d:64:cf:27:80:27:5f:22:4b:89:64:5b:
51:c8:71:62:c7:1f:b7:9e:b6:21:1a:55:f3:b0:8a:
5a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7A:27:69:A9:04:D9:42:9D:B2:0C:D7:F6:96:74:1C:5D:A1:16:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/934F74F83A9311EF889EBAA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.8.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:32:9d:d7:22:84:3d:16:25:a3:4c:85:a0:df:ff:b5:f2:2e:
ee:ca:fb:f2:0a:4a:74:46:6b:91:c9:bc:3b:67:df:c7:00:94:
d8:c1:10:0f:bf:d3:6e:c5:41:a3:50:4b:84:2b:bd:5d:ab:4c:
62:f3:81:1c:7f:e5:57:2e:88:6e:64:0e:f4:6f:27:c8:cf:da:
78:8a:d0:d7:6f:c5:b4:7e:64:95:15:41:db:98:64:7c:18:eb:
f4:31:1c:21:3e:8e:9b:51:3e:8d:79:84:8a:c7:08:10:d9:dd:
1a:05:dc:d7:31:70:95:9e:4d:84:8a:df:39:e6:b5:1c:6b:82:
63:03:b4:d8:de:ee:d6:e3:7d:08:8f:79:2f:f8:a4:71:59:ec:
8c:c2:0d:d5:21:c8:89:d6:2a:5c:76:91:43:ab:56:a6:a6:86:
db:d7:05:af:67:f5:d3:77:3e:9e:de:15:04:a5:6a:34:e0:31:
0e:51:43:24:7a:60:d6:3c:51:9e:05:c6:dd:08:a2:55:c6:c3:
9e:dc:c7:9d:a1:e2:7a:e3:3a:17:8c:e0:69:a4:54:d2:d4:d5:
3a:2b:df:ba:e3:43:16:20:8e:54:58:0d:98:d2:3b:36:ff:05:
46:e0:9e:11:57:01:2a:86:ac:39:ce:79:25:a6:92:74:2d:c0:
3a:ad:d5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 08:35:32 2024 by rpki-client on console-fra.rpki-client.org