Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64010AF6089111EFB920CD36017001B1.roa
File: 64010AF6089111EFB920CD36017001B1.roa (raw, json)
Hash identifier: kaMkHdm/z0b7fRe9zuJAsmaofhOVBcAj6Krjly5phA0=
Subject key identifier: 83:A9:80:CB:DE:20:6B:8A:1C:EF:4E:8D:3A:A2:D1:60:75:95:21:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8764
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64010AF6089111EFB920CD36017001B1.roa
Signing time: Thu 02 May 2024 14:36:41 +0000
ROA not before: Thu 02 May 2024 14:36:38 +0000
ROA not after: Sat 11 May 2024 14:36:38 +0000
asID: 5065
IP address blocks: 45.204.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34660 (0x8764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 14:36:38 2024 GMT
Not After : May 11 14:36:38 2024 GMT
Subject: CN=6633a4f9-6b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:27:61:6d:3f:b7:4f:9b:bb:e3:3c:53:2a:af:
34:17:11:2e:8b:ef:2d:f2:0f:0f:22:5f:05:ac:24:
4a:0d:a5:bd:c7:56:21:d9:75:9a:68:a4:3c:e6:6e:
a4:be:86:79:72:c1:be:03:9b:1f:de:ea:55:90:38:
21:69:39:c2:e6:ae:04:0c:ae:b0:fe:cf:2e:63:21:
34:85:5e:63:77:08:a5:39:6a:63:74:c1:20:63:f9:
ef:a9:99:50:29:39:e5:ea:ac:a5:c0:e6:ab:40:00:
a3:76:48:f2:5d:0b:23:68:1e:f0:37:f4:0f:76:c4:
e9:33:e3:9e:1c:3f:27:08:4c:55:66:c3:c5:65:42:
7e:f0:ae:46:e7:e7:f8:06:a9:ec:ee:7a:1f:9e:d3:
ea:8d:9a:db:d6:37:97:8f:13:b7:ac:8d:86:56:d7:
4c:86:2d:81:fe:09:20:03:ba:cd:5e:32:d8:33:6d:
da:7e:a3:c3:b1:e0:2c:fd:c8:33:43:99:0c:4f:04:
49:15:46:2d:87:4c:6d:26:71:f4:64:a4:ce:aa:50:
42:51:21:78:8e:12:37:48:76:43:8d:e0:ca:d1:5f:
09:5c:87:9d:5a:74:ea:19:44:7b:68:c5:d1:bb:d4:
9f:f6:c2:44:24:51:f8:fb:79:4a:1f:d2:4c:c7:ad:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A9:80:CB:DE:20:6B:8A:1C:EF:4E:8D:3A:A2:D1:60:75:95:21:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64010AF6089111EFB920CD36017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.79.0/24
Signature Algorithm: sha256WithRSAEncryption
07:32:e9:a8:b8:db:12:c0:01:82:33:c6:61:44:3d:ad:45:4d:
24:85:c9:ee:93:47:12:cd:26:16:0a:30:fd:d8:59:a2:ee:2d:
05:47:eb:b6:cf:99:3a:06:0d:72:86:e7:62:b7:7f:82:f6:8a:
ad:6c:48:58:87:d3:e8:f2:cf:b3:aa:7a:53:c5:b7:be:5e:e8:
95:ce:b1:7f:aa:d7:84:61:8c:aa:2b:51:5b:df:d5:be:16:e0:
a9:23:1d:90:35:e2:e4:b2:bf:79:7a:e9:85:3d:eb:c4:2a:67:
ca:33:23:6a:50:6e:fb:31:25:f0:3e:89:80:85:4a:68:15:73:
87:57:72:23:90:13:f1:4e:23:7e:b0:1a:2f:07:2b:33:0e:fb:
ff:e0:b7:5a:2a:c6:3f:66:6c:9b:44:1d:0b:8d:2c:64:e4:d0:
70:fa:11:06:03:b9:4e:a0:3b:41:f4:35:46:b4:26:2c:9d:ee:
ae:02:04:67:2d:ea:8d:6a:22:b2:9c:08:0b:e0:64:60:6d:5e:
fe:64:53:88:3e:56:e7:a7:de:1e:48:f4:3e:26:63:0f:f9:fa:
21:93:8f:45:34:6b:95:ea:2e:fa:a2:20:c0:06:3e:1f:dd:b4:
21:f3:43:5f:1d:4f:74:48:d7:74:f9:b4:45:47:2b:7f:32:35:
d8:45:35:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:49 2024 by rpki-client on console-fra.rpki-client.org