Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8CCAE6C3DC111EFADC1B097762E951A.roa
File: C8CCAE6C3DC111EFADC1B097762E951A.roa (raw, json)
Hash identifier: FOXGmUVBqCh6qUOZAlX9LiBt1bgk60eQb5J0iP0spPo=
Subject key identifier: 33:40:A7:9C:87:69:B9:BB:EE:D7:DE:FE:9F:C3:9B:4A:36:38:84:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 99FB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8CCAE6C3DC111EFADC1B097762E951A.roa
Signing time: Tue 09 Jul 2024 07:06:38 +0000
ROA not before: Tue 09 Jul 2024 07:06:35 +0000
ROA not after: Sun 11 Aug 2024 07:06:35 +0000
asID: 49981
IP address blocks: 156.225.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39419 (0x99fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 07:06:35 2024 GMT
Not After : Aug 11 07:06:35 2024 GMT
Subject: CN=668ce17e-9519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:1a:d7:3c:98:fd:f7:4c:41:0a:77:b4:b0:f6:
86:5b:c3:91:b5:60:d9:77:95:b5:0a:ec:3b:38:b1:
16:83:b2:f7:76:58:08:98:5f:81:27:58:ea:a3:e0:
51:a3:45:8c:a1:74:21:d6:4a:7a:70:6d:3a:cf:fa:
63:4b:02:8d:e8:5d:2e:b0:0b:7d:76:1b:19:49:c0:
4d:bd:9f:8c:ac:56:a9:6f:7f:bb:4b:ec:e9:aa:4d:
c2:cb:88:57:a6:2a:74:07:8e:a7:2b:42:58:e7:8f:
1e:55:af:90:de:7f:44:14:06:d4:62:e9:fb:30:c0:
39:63:98:ac:6f:1f:6f:9d:bb:da:72:a8:da:8b:e2:
89:98:f4:b5:2b:fc:08:6f:26:f6:9d:88:d5:97:8f:
44:8b:a8:4b:03:cf:98:14:7a:07:67:23:5a:72:b6:
df:91:da:db:9d:47:a9:16:26:a1:f7:0a:92:e7:26:
f2:3d:84:8a:d9:07:6d:3d:e9:28:b5:59:ce:a5:9a:
59:f4:6d:64:31:be:9a:97:95:c4:5a:82:f2:11:28:
af:97:26:be:66:b6:8a:ba:a0:e0:94:c1:3b:15:4f:
5c:c6:b0:7a:c5:55:e3:6b:b0:63:64:bf:8b:0c:5b:
a6:37:ff:97:79:89:c2:28:4a:92:32:cf:26:ca:85:
d4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:40:A7:9C:87:69:B9:BB:EE:D7:DE:FE:9F:C3:9B:4A:36:38:84:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8CCAE6C3DC111EFADC1B097762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.73.0/24
Signature Algorithm: sha256WithRSAEncryption
61:48:d3:a0:ae:1b:8f:10:7e:fa:ea:37:96:bf:38:d6:22:a1:
3b:e6:68:04:ee:bf:a7:58:a8:84:6a:7f:25:55:ab:a4:f3:10:
38:8c:fc:98:c8:65:d6:34:72:fe:f0:93:ee:c7:ab:6e:a5:92:
d4:53:e9:bb:a9:d8:c3:5a:66:0a:6b:b1:a8:18:34:9c:18:16:
39:70:c2:f9:ee:60:0e:5d:c9:0a:97:20:55:90:2a:6a:22:d2:
e4:15:c2:14:15:2e:34:8d:a7:fb:69:00:7a:01:27:42:7a:08:
20:dc:c6:9e:c7:95:99:47:f3:aa:42:39:59:42:df:b5:f3:c5:
93:09:bf:f4:80:6b:44:5e:cc:75:b2:f3:a9:b4:32:62:eb:84:
25:2f:45:59:fa:0d:ab:7f:53:17:08:5e:c4:92:eb:93:cb:0c:
b3:25:e1:ec:1a:26:8a:cc:ff:02:4f:72:3d:3d:64:61:dd:2a:
76:d1:7a:17:0a:cc:c1:c9:10:37:24:aa:63:7b:34:e5:c4:1d:
c8:7b:b8:6b:e1:95:98:24:28:86:cf:cc:88:63:5b:10:df:83:
31:1c:ad:2e:16:f0:0f:9c:38:e3:07:59:20:b8:84:31:45:e5:
f4:58:5e:83:8d:29:31:67:4c:a8:79:a3:4b:fc:8f:8e:e5:d1:
2f:17:09:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 10:00:56 2024 by rpki-client on console-ams.rpki-client.org