Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE8BD984008311EFB6A9F615017001B1.roa
File: CE8BD984008311EFB6A9F615017001B1.roa (raw, json)
Hash identifier: wrhzBXXIOoO5g4VfVpdwn4U18X35Wlxf42Jt760IZMo=
Subject key identifier: 5D:B0:85:72:6C:85:B2:E7:EC:24:0D:F7:A2:3B:31:1C:18:C9:E9:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 83D3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE8BD984008311EFB6A9F615017001B1.roa
Signing time: Mon 22 Apr 2024 08:39:19 +0000
ROA not before: Mon 22 Apr 2024 08:39:14 +0000
ROA not after: Thu 02 May 2024 08:39:14 +0000
asID: 44559
IP address blocks: 156.225.74.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33747 (0x83d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 08:39:14 2024 GMT
Not After : May 2 08:39:14 2024 GMT
Subject: CN=66262237-1e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1a:a7:af:72:e9:87:d3:86:6a:9b:ae:80:b8:
89:a0:31:95:d6:f3:3a:c0:c2:a3:0d:8b:77:32:73:
61:7b:2b:c6:1a:45:3d:a7:22:67:4f:65:cc:7a:14:
ff:db:2d:27:dd:76:cd:0b:06:4d:fb:14:e8:ba:62:
92:7a:8f:9e:c6:07:d6:35:90:83:84:90:47:01:15:
4e:f8:f2:37:18:4f:ac:03:f2:e2:0d:65:52:54:28:
f5:eb:ab:bb:64:bd:da:99:46:03:28:5f:e4:b2:21:
53:93:1d:7c:ae:15:0e:d6:41:f4:e5:7b:3c:f6:1e:
3e:04:a2:5f:9c:57:a5:02:82:04:e4:ab:5f:e1:2b:
fd:b4:0b:ce:14:48:18:54:46:d6:62:60:06:9c:cd:
b9:03:e7:7e:71:2b:91:b1:60:d8:f8:17:a2:a7:3a:
27:79:b3:42:84:1c:35:87:d2:4a:8f:52:3e:6c:24:
3c:50:6d:6a:27:93:1b:62:72:4b:9b:7e:29:23:e7:
cc:de:b4:45:00:18:07:65:a2:75:cc:9f:20:c1:16:
a6:1a:04:08:0c:ac:75:2a:da:eb:21:b0:12:a0:1d:
22:cd:99:94:1c:ee:43:17:ff:44:05:03:61:75:57:
1b:4c:74:cd:0d:75:e0:de:9e:a6:b2:c6:2c:3b:6c:
dd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B0:85:72:6C:85:B2:E7:EC:24:0D:F7:A2:3B:31:1C:18:C9:E9:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE8BD984008311EFB6A9F615017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.74.0/23
Signature Algorithm: sha256WithRSAEncryption
78:93:e4:25:dd:ae:a3:be:ee:8d:98:fa:9a:07:0f:63:22:5e:
4b:43:8b:f6:81:1b:d4:59:8f:d9:98:20:30:6e:ba:03:12:8e:
ed:5f:73:87:96:c0:f8:2c:f2:43:db:91:3c:85:7e:aa:a8:9d:
5a:b8:83:18:5f:09:d1:45:7d:26:5c:e0:ca:c1:78:49:b3:74:
80:26:af:70:e2:17:1b:ca:81:ed:5f:f7:b2:9e:c1:ed:e7:c2:
12:5a:65:14:d8:b1:10:ea:92:49:07:30:f5:54:68:a2:02:1a:
87:b3:6c:78:39:7b:6c:ad:f0:7b:ac:2e:26:23:b9:f9:7e:24:
6a:e9:e8:a0:67:5a:49:34:a3:52:4c:09:1a:2d:11:f3:2b:f4:
2d:7a:21:16:b7:2e:c4:4a:8c:6c:7c:dd:ab:40:8a:ad:aa:29:
7e:c4:0e:98:5c:b7:5b:26:04:cb:68:a8:90:30:e4:47:09:81:
96:f8:be:e3:16:ca:36:6b:1e:e6:f9:9e:d8:80:73:58:34:df:
39:1a:22:93:dc:c1:f0:93:31:63:41:56:11:bd:fb:ef:b8:78:
bd:60:5e:fd:98:ef:2e:63:fd:36:09:b7:24:f8:ea:e8:b1:67:
7b:62:8b:6b:da:db:b4:bd:e0:f5:76:36:11:7e:4e:d0:32:5e:
fe:d0:41:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:21:02 2024 by rpki-client on console-ams.rpki-client.org