Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C27004043A9411EFBCFCC5AB762E951A.roa
File: C27004043A9411EFBCFCC5AB762E951A.roa (raw, json)
Hash identifier: i/cMC7J8S1cb/iFmNRP7vKlaW041/bH+RU7Nn+j+8AI=
Subject key identifier: 1C:FC:DD:A8:8D:15:1C:32:60:84:A4:69:66:08:74:32:AB:1C:CC:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 98A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C27004043A9411EFBCFCC5AB762E951A.roa
Signing time: Fri 05 Jul 2024 06:06:46 +0000
ROA not before: Fri 05 Jul 2024 06:06:43 +0000
ROA not after: Thu 01 Aug 2024 06:06:43 +0000
asID: 39600
IP address blocks: 156.233.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39073 (0x98a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 06:06:43 2024 GMT
Not After : Aug 1 06:06:43 2024 GMT
Subject: CN=66878d76-a31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7c:0e:11:33:76:fa:62:e6:31:62:00:d1:ba:
33:71:f3:58:ee:74:93:fc:47:98:e6:9e:86:19:f7:
a1:cb:9f:44:97:e4:3c:3b:fa:71:03:c9:7b:30:b8:
c4:ec:51:50:c0:95:a2:66:da:fa:b1:c9:f0:37:b0:
ba:04:25:a3:47:6e:75:04:54:b0:4d:44:1f:aa:7a:
cf:48:ab:da:1d:c9:05:cc:f6:cd:67:8b:89:0a:48:
0a:61:2d:e9:0d:73:6c:e2:6b:a6:7b:7f:45:71:df:
0f:87:de:c9:25:ca:0b:d9:49:51:6f:c5:ae:a9:13:
0c:f1:18:b3:af:75:25:60:ac:fc:08:a6:99:d7:25:
a9:9b:12:a5:bd:d6:c4:7c:ad:9e:79:c6:5d:69:71:
ec:57:7d:be:4c:29:e3:7d:5a:b7:e0:be:a7:f4:4d:
be:90:3f:82:11:15:15:80:12:bb:f9:fd:6e:38:a8:
0d:e0:97:c1:98:54:6b:ab:06:56:36:90:a5:da:aa:
e3:d0:5b:7f:26:dc:db:ae:81:14:4e:69:cd:49:b3:
a1:00:c1:c3:14:81:4b:c9:42:77:dc:d6:cc:64:e0:
0f:61:32:4a:aa:80:d7:a1:a8:23:84:c3:dd:8f:92:
52:7a:20:01:1e:5f:a8:23:8d:c5:40:b7:2d:05:c4:
79:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FC:DD:A8:8D:15:1C:32:60:84:A4:69:66:08:74:32:AB:1C:CC:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C27004043A9411EFBCFCC5AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.8.0/21
Signature Algorithm: sha256WithRSAEncryption
46:e8:bd:66:c3:23:cc:65:dd:1a:c6:7c:52:db:6e:16:81:1e:
97:50:5d:39:67:ed:a4:48:23:83:00:75:d9:00:34:9f:2c:25:
71:9e:ce:fb:b2:c3:74:ce:99:66:84:b3:e4:7f:6b:a7:9b:45:
e1:92:ae:45:86:82:60:38:f3:e0:f2:a4:a4:6c:bf:9e:9b:0f:
18:e4:19:b0:c9:f1:96:3a:8c:ab:e1:1f:a6:f4:2b:0c:33:f9:
25:8d:46:ce:79:8e:9e:5e:12:cc:5b:a9:bf:fd:e6:90:71:92:
30:b4:41:d4:8c:b2:90:1e:53:06:7d:b1:ee:8a:9a:b8:ea:1a:
bf:c1:7e:b1:cc:a8:37:66:2a:cd:19:ef:ae:c6:f4:c3:99:db:
54:28:ae:cc:20:45:3c:e5:c9:88:90:93:b7:87:6f:38:97:1e:
a5:4a:63:6b:ce:79:38:99:f8:04:ce:d7:f4:3d:ea:66:53:d5:
c1:4e:8c:9f:a4:be:1a:1a:ea:9f:93:7d:f8:d2:59:b2:03:cd:
2e:8e:10:50:1f:26:34:1a:8f:da:9a:28:a1:4b:cb:6d:02:9a:
6f:e4:c6:83:56:3a:f2:de:64:50:c7:b7:53:80:5c:2d:5f:20:
4d:be:ff:9c:0d:37:87:b8:c0:2a:d0:23:00:eb:d3:62:54:d6:
56:da:28:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 10:33:29 2024 by rpki-client on console-ams.rpki-client.org