Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3CEBC2C384711EFB7E26EA4762E951A.roa
File: C3CEBC2C384711EFB7E26EA4762E951A.roa (raw, json)
Hash identifier: izoa1N497Qv0E57KiaZ6m4NHDlm0tchdn2/btkqjGBs=
Subject key identifier: D3:B2:18:74:6C:9E:5F:5F:CA:95:C7:6A:0D:14:1D:E3:B8:EC:6A:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9761
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3CEBC2C384711EFB7E26EA4762E951A.roa
Signing time: Tue 02 Jul 2024 07:50:35 +0000
ROA not before: Tue 02 Jul 2024 07:50:32 +0000
ROA not after: Sat 03 Aug 2024 07:50:32 +0000
asID: 211826
IP address blocks: 156.240.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38753 (0x9761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 07:50:32 2024 GMT
Not After : Aug 3 07:50:32 2024 GMT
Subject: CN=6683b14b-6505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:17:f6:56:0d:81:c7:b7:de:2c:c0:e0:af:0c:
25:f4:4e:69:e9:84:68:8d:ba:71:99:1f:ef:82:0f:
5d:05:54:76:7b:d0:6d:bf:ee:3c:26:69:01:a6:e7:
c7:2f:85:da:1b:ba:a9:1c:f4:75:bd:ac:d5:d2:97:
ed:67:b9:95:2f:3a:ab:c6:61:b9:15:fc:6e:48:d5:
b9:d6:79:01:37:44:11:c5:11:43:ba:64:b1:64:a8:
1b:f4:13:51:d4:8a:60:89:b9:c6:cb:cb:96:d6:3f:
03:d0:65:08:2b:a9:16:51:02:bb:fe:ab:e4:b1:ba:
9b:85:92:6d:da:51:1f:c1:f1:f5:bd:99:8d:f5:28:
43:f8:7a:4d:cf:f1:7f:07:00:3d:d4:ea:03:39:3a:
77:ee:a6:3d:02:5c:8b:6d:40:b6:3c:c5:e6:03:fb:
fd:77:78:bf:73:a1:85:62:90:90:73:a5:72:30:8a:
b2:26:8e:a5:ba:d8:12:1f:28:7b:bc:4f:90:7f:a5:
b7:92:f4:da:fd:ef:af:f7:39:5f:e3:e3:90:f3:c4:
1a:f6:0d:0d:f8:be:ea:22:5d:16:bc:56:7f:07:e1:
c9:6d:89:80:ef:a7:0d:02:2b:a0:b3:5e:05:59:41:
10:8a:06:5a:27:73:70:e1:a9:5a:ab:de:a2:43:03:
53:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B2:18:74:6C:9E:5F:5F:CA:95:C7:6A:0D:14:1D:E3:B8:EC:6A:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3CEBC2C384711EFB7E26EA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.95.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:fa:c9:bf:9d:43:c7:bd:dd:bf:a2:7d:50:e4:d2:fd:ad:2d:
e8:40:b4:8e:b2:0f:30:32:57:30:72:2f:75:45:54:2a:49:48:
f5:57:f5:12:a0:93:8a:5c:eb:d4:f9:97:b8:16:97:64:53:36:
85:f1:d5:84:1e:75:a9:e6:45:9e:05:bd:73:09:3d:36:42:fb:
16:42:31:6f:8a:c1:80:9b:82:17:f4:68:24:c9:8c:cd:ce:7c:
d4:8c:29:ea:37:2e:e1:b2:24:d8:f5:6a:6a:55:02:aa:7d:b7:
a8:8f:47:2c:cb:76:2f:ed:dd:7a:25:fb:4c:a5:25:c2:0b:e8:
1d:c5:14:10:7c:21:33:cd:f8:30:8d:82:95:fb:08:69:c1:51:
ae:c8:de:d2:77:61:e5:d0:26:bb:a1:6c:9e:3b:64:e2:1c:2c:
26:f5:3d:d2:13:f4:81:5d:43:52:e7:29:81:44:5a:f3:b5:9f:
ec:07:5c:19:4f:b8:8a:eb:97:24:c1:a6:d8:15:45:2e:5e:a1:
80:fa:28:04:21:9c:d0:42:37:2c:4f:9d:ec:f9:a5:34:13:52:
2e:9b:aa:d1:af:83:80:56:21:67:7b:40:fd:47:a2:ec:11:38:
bf:a4:08:07:c0:cf:11:cb:e5:73:3d:f4:6b:84:41:4c:e0:c5:
4b:db:c6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:57:24 2024 by rpki-client on console-fra.rpki-client.org