Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BFC4C72088D11EF914ED714017001B1.roa
File: 3BFC4C72088D11EF914ED714017001B1.roa (raw, json)
Hash identifier: 3XDnQJWO7jgbWZhRHR0J/WH2KGyz2L3MZMwUeSGldHM=
Subject key identifier: BB:DE:8E:D8:1B:AF:9D:61:C6:7B:2B:A7:93:65:C0:D0:29:A9:22:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8760
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BFC4C72088D11EF914ED714017001B1.roa
Signing time: Thu 02 May 2024 14:06:56 +0000
ROA not before: Thu 02 May 2024 14:06:53 +0000
ROA not after: Sat 11 May 2024 14:06:53 +0000
asID: 39600
IP address blocks: 45.203.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34656 (0x8760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 14:06:53 2024 GMT
Not After : May 11 14:06:53 2024 GMT
Subject: CN=66339e00-7dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:ec:93:38:c6:d8:81:da:c7:d4:aa:c2:3f:
38:b7:a7:52:c9:d5:6c:f4:76:45:4a:b6:3a:73:99:
ee:13:f5:75:1a:86:08:65:8b:4d:a0:ec:53:f4:de:
56:81:02:81:4b:33:3f:e3:4f:5a:0b:f4:fe:c3:b7:
f7:60:fe:91:f3:28:9f:6e:74:bd:fc:ee:3c:e8:01:
a4:bd:91:49:85:cf:dc:03:3b:b5:4e:4e:41:6f:5a:
07:54:5c:c3:e1:d8:57:37:e5:d5:97:c1:4c:31:1b:
32:ce:81:f5:b7:62:a8:67:c8:e8:81:0b:92:77:3e:
8c:33:5a:69:8c:3b:0d:f0:96:b7:b6:7d:0d:7b:d0:
50:f3:21:a4:ee:75:94:15:70:46:24:1d:7f:95:38:
79:f2:e5:b9:d4:1d:4e:1f:a9:2e:49:2d:5c:54:5e:
8e:70:66:21:b5:e2:41:67:b2:1c:74:34:92:bd:73:
c0:bf:38:fe:15:56:4f:71:ee:c0:21:42:bc:0b:52:
0c:20:8d:e2:9d:7e:92:71:c6:26:54:dd:f8:0b:e8:
84:6c:d9:40:a0:de:a6:e0:4a:2c:a3:ff:35:ce:2d:
2b:f5:c5:94:e9:22:42:69:3b:e8:59:75:17:b9:72:
ee:94:c9:d0:1d:8a:c9:e0:ac:80:02:da:51:88:6d:
9c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DE:8E:D8:1B:AF:9D:61:C6:7B:2B:A7:93:65:C0:D0:29:A9:22:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BFC4C72088D11EF914ED714017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.56.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:b7:59:ae:a6:f0:f8:be:14:cc:3f:44:05:72:65:1e:9a:ee:
48:83:3d:f0:e4:a7:86:84:7d:53:78:48:17:a8:8e:82:7b:fd:
b8:64:b7:12:de:c8:e3:d4:e2:9d:eb:07:cd:15:cb:f4:6e:a3:
de:0b:5c:df:1b:8b:67:1a:b3:ad:32:4d:78:36:19:83:d2:55:
be:18:ac:fe:f6:f7:b2:b1:6d:67:97:17:8e:49:85:19:24:ec:
4e:f1:ea:83:5d:ff:0e:82:7c:ce:ac:e7:5b:1e:c7:04:8c:ce:
2e:b0:45:62:e4:34:bd:99:4c:18:f3:9b:39:20:74:fd:6d:3f:
13:26:a2:78:59:6e:9f:68:69:08:0e:5d:f9:5b:41:f2:b1:35:
4b:18:61:16:0f:a9:db:78:87:a4:19:a1:9e:4f:0e:f9:05:1e:
56:88:60:d6:0f:bf:b9:d4:26:37:cf:f8:8e:9b:f1:44:80:98:
86:74:bc:a0:72:78:de:b4:1d:ee:e2:3f:30:85:03:7a:02:f8:
b4:e5:f5:b1:8d:aa:45:62:91:30:7d:b5:4d:05:11:34:6c:f6:
17:85:cd:73:1b:3d:8c:c9:5d:0b:0e:df:a5:61:a2:20:3a:90:
a7:6e:dc:60:dc:56:af:04:4f:d0:3d:87:ff:e6:6d:7e:06:55:
0d:9e:95:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:49 2024 by rpki-client on console-fra.rpki-client.org