Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4346A81606DE11EFB7308F61017001B1.roa
File: 4346A81606DE11EFB7308F61017001B1.roa (raw, json)
Hash identifier: 1gXzSYJEP9k8UVIABChljCzp1bnxfkWNiG/WVOREvdI=
Subject key identifier: 07:FD:CA:CB:A6:6E:37:9B:35:50:F9:C1:47:6B:34:D8:38:51:68:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 86F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4346A81606DE11EFB7308F61017001B1.roa
Signing time: Tue 30 Apr 2024 10:41:55 +0000
ROA not before: Tue 30 Apr 2024 10:41:52 +0000
ROA not after: Tue 07 May 2024 10:41:52 +0000
asID: 142062
IP address blocks: 45.204.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34547 (0x86f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 10:41:52 2024 GMT
Not After : May 7 10:41:52 2024 GMT
Subject: CN=6630caf3-829a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:84:a4:c2:3e:27:bc:00:e1:c9:c4:5d:36:
6d:10:ad:6d:a5:75:23:b3:5b:2f:05:b5:d7:84:b3:
e2:5f:46:9e:f3:79:c7:29:f1:0a:ac:51:b3:12:9c:
d0:4b:2e:19:fb:ae:39:f4:85:a0:cb:f6:d0:e0:1e:
bf:2b:9e:da:91:8b:2a:bc:78:81:6a:5a:da:c1:a4:
20:99:86:66:76:3d:35:b2:81:22:a7:98:ca:b3:58:
d2:99:8c:17:e6:8a:5a:01:d8:2f:e9:79:e8:1f:99:
f0:a5:b0:1d:a3:7b:84:62:89:d7:81:be:b6:e6:89:
ee:a4:86:95:2c:cd:3f:02:13:7b:85:ac:27:b9:ed:
a9:04:8d:43:94:7a:f3:3b:3e:5d:5e:b0:31:ba:94:
16:e0:89:94:d8:07:eb:ef:db:c5:91:0d:7e:b2:f6:
5c:09:5d:dc:89:f3:fe:05:f7:17:4f:12:52:be:dd:
3d:89:4b:50:58:0c:df:b5:6b:7d:57:97:a5:b1:fc:
49:d7:15:c7:f4:60:f7:5f:f6:b7:e1:c2:4f:f7:db:
67:94:dc:51:5a:7c:71:e9:ab:7f:b4:df:c1:36:e4:
6e:62:94:27:5e:16:13:6c:17:5a:88:ea:95:40:86:
b0:48:1b:9a:a0:8d:05:e4:c4:ce:fe:f8:5c:23:fa:
1a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FD:CA:CB:A6:6E:37:9B:35:50:F9:C1:47:6B:34:D8:38:51:68:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4346A81606DE11EFB7308F61017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.94.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:3f:64:0a:4e:3c:cd:3f:f8:d5:dc:ef:85:85:d4:a3:bb:0b:
f4:b5:2d:96:92:1a:a8:58:05:c7:9c:f2:e6:91:d8:c2:0c:e2:
a1:c6:fa:ed:7c:aa:d4:5f:86:29:06:77:4f:e9:cb:2e:c3:56:
4c:6f:8c:1c:dd:8f:1b:09:30:c1:09:d0:6d:07:fe:89:31:9b:
f1:ca:b5:9d:fa:84:91:69:75:f4:57:55:cf:51:f1:f2:b3:f1:
32:14:f5:7f:9b:ec:53:42:9d:7e:a3:9e:ec:ab:0b:b6:85:d0:
cb:1c:12:fa:d5:78:2f:a6:91:76:e9:bd:fe:d0:29:4e:2f:42:
92:f7:f8:4c:61:ea:eb:ef:33:0a:94:33:c0:60:4b:8a:7f:bb:
4e:13:d8:88:8b:13:72:c6:88:d5:a8:09:77:c9:18:4b:c6:2c:
0e:9c:bb:87:46:77:65:d7:6e:cd:7d:ba:32:72:55:be:11:0b:
be:4b:61:4a:e1:4b:43:1b:38:44:60:1e:b0:65:da:ce:ec:aa:
19:d8:a8:bd:e7:16:88:d5:86:f2:e3:9a:42:07:e6:bc:6c:64:
d1:3c:26:64:05:5f:9c:b9:9e:56:67:80:47:cb:36:d4:30:52:
a7:22:8f:83:d3:ed:0b:a9:27:96:5c:12:06:6a:d6:84:43:8e:
1f:73:ee:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 03:43:29 2024 by rpki-client on console-ams.rpki-client.org