Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7180FF0C039011EFB228F170017001B1.roa
File: 7180FF0C039011EFB228F170017001B1.roa (raw, json)
Hash identifier: e0id1DE3G2ITSqwv+AFX9ejR8wAki0J/aUG4c3asauE=
Subject key identifier: 64:E2:FF:3F:5A:3A:CE:F7:2E:B8:79:98:1B:76:45:A0:76:FF:9B:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 860A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7180FF0C039011EFB228F170017001B1.roa
Signing time: Fri 26 Apr 2024 05:47:19 +0000
ROA not before: Fri 26 Apr 2024 05:47:15 +0000
ROA not after: Sun 05 May 2024 05:47:15 +0000
asID: 139646
IP address blocks: 45.200.18.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34314 (0x860a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 05:47:15 2024 GMT
Not After : May 5 05:47:15 2024 GMT
Subject: CN=662b3fe7-e97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:65:53:d6:9b:0a:e3:7d:c7:bc:1c:5b:23:84:
ff:69:ed:32:fa:5b:d6:3e:fa:b5:c1:1d:f2:4b:39:
37:a4:d2:cc:86:db:d4:ae:84:1c:bb:59:44:d1:95:
89:b5:a8:16:06:17:75:19:b1:e2:fd:87:b5:b8:28:
02:30:90:a5:fc:b2:c3:5f:36:2f:8e:da:84:12:ef:
b2:bd:fd:b7:c3:76:e4:48:59:a0:60:c0:3c:7c:39:
2a:b6:d4:61:24:99:ef:c2:74:b8:30:31:68:34:d2:
6e:22:3f:a5:59:ea:67:48:bb:be:25:28:52:79:da:
06:c0:07:00:85:e4:cf:17:14:79:b4:9b:eb:0c:cd:
da:cd:a8:4a:f7:1c:d7:3f:b3:70:c3:5c:60:59:7d:
71:cb:37:58:71:2e:3a:e2:3f:f1:e6:e8:41:39:a9:
93:0c:1d:6b:6f:4d:b3:98:a3:12:25:de:fc:dd:e9:
b3:68:5a:5d:b9:ce:6c:3e:0c:f1:7f:50:b6:9f:e7:
6e:ef:05:18:90:46:a0:86:6f:0c:2e:4f:5a:19:13:
45:75:13:51:f1:41:e8:48:9b:50:72:23:e4:0d:4c:
8e:a6:f4:ce:83:72:19:76:f6:48:6a:e1:ad:07:5c:
b3:87:d4:c5:0d:7f:68:7f:9a:66:77:d5:23:ca:48:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E2:FF:3F:5A:3A:CE:F7:2E:B8:79:98:1B:76:45:A0:76:FF:9B:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7180FF0C039011EFB228F170017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.18.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:06:f1:0d:fe:5f:64:2b:10:3f:43:26:2e:49:c5:f6:a2:dc:
be:d8:27:81:95:d8:36:e5:62:ef:c2:e4:9c:2d:a5:37:04:58:
17:73:c3:32:b6:87:bb:85:98:30:42:fb:29:99:41:29:24:23:
bd:31:29:55:89:95:2e:ff:76:c3:b1:67:fe:71:7d:e7:77:aa:
1d:9d:7d:94:77:d5:f1:1a:a6:ee:5d:0d:63:91:51:b8:07:ed:
5e:0a:0e:73:e5:14:19:aa:7c:11:7a:21:ef:45:87:59:40:b1:
e9:64:98:88:a1:69:8a:e3:65:87:89:1c:d9:6c:54:e1:be:6e:
05:94:e2:3a:e2:09:2e:49:87:e6:4b:c2:1b:6b:79:30:eb:02:
a1:00:8c:36:b9:e8:c4:24:a0:70:5a:41:7d:57:0f:86:3b:e7:
a2:9e:46:3c:81:d2:dd:96:fa:3b:7c:f2:0d:03:48:ac:0b:a0:
55:c6:31:7c:e7:cd:72:db:da:c1:97:6f:35:50:83:95:51:33:
19:88:85:db:fb:d0:5e:9c:7b:df:1d:0d:04:d4:24:8d:2c:5c:
cc:cf:95:d5:5c:ef:83:98:d2:d2:c4:6c:a0:11:18:72:4c:57:
87:64:1d:a7:c2:03:3a:8e:c5:72:a8:a7:e5:0e:30:a0:9f:59:
c1:6a:15:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:29:25 2024 by rpki-client on console-fra.rpki-client.org