Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89AE4AE603A211EF99445705017001B1.roa
File: 89AE4AE603A211EF99445705017001B1.roa (raw, json)
Hash identifier: 3uylN7BVnIzWtMwk/Vdrp6oIm9McD9+EyTtf/S0fjIQ=
Subject key identifier: 44:C6:8B:E0:AD:97:BB:BB:8E:DE:5F:38:0B:86:51:EA:08:F2:02:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8666
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89AE4AE603A211EF99445705017001B1.roa
Signing time: Fri 26 Apr 2024 07:56:50 +0000
ROA not before: Fri 26 Apr 2024 07:56:47 +0000
ROA not after: Thu 09 May 2024 07:56:47 +0000
asID: 44559
IP address blocks: 45.197.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34406 (0x8666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 07:56:47 2024 GMT
Not After : May 9 07:56:47 2024 GMT
Subject: CN=662b5e42-d30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:75:1e:2e:ae:e8:e4:78:b1:48:66:ef:21:15:
66:a0:92:2b:dc:8e:39:1b:a6:da:a2:ab:66:cc:2e:
28:48:9f:a1:ae:d4:50:fe:a6:37:af:86:a3:9f:36:
59:f1:b2:3d:99:5b:15:da:ae:ff:04:48:7f:93:e4:
72:8d:c0:a7:b3:49:a0:e6:d6:05:c6:80:24:4f:ac:
7a:73:be:fc:5f:9b:63:59:68:6a:67:43:d8:1a:37:
88:6c:1b:15:e2:28:31:e2:da:5a:14:b6:36:12:7a:
21:0d:eb:d3:10:77:f9:d3:0d:ec:3e:d6:ba:e1:98:
8f:61:65:a8:80:45:37:ac:19:e9:03:9b:a7:19:73:
92:7f:b8:93:4a:1a:f2:18:9e:a2:ba:ea:6f:79:1d:
37:a5:ed:c9:4e:1b:b2:13:c4:7a:92:fc:81:95:35:
85:55:77:84:25:5e:81:02:e9:2c:87:b4:d2:7f:cb:
d5:c1:2a:33:08:a9:cc:eb:a9:3d:19:47:e2:8d:c7:
7c:6a:3a:f3:f1:09:1b:1d:db:8c:49:75:04:b1:fb:
7e:e1:e9:4c:bd:30:d2:34:81:81:a5:05:da:d3:89:
35:74:6d:06:35:fb:10:aa:fb:ab:f7:33:9b:86:82:
e1:ca:a6:bc:b0:c6:1a:de:da:1a:11:c2:76:fa:7e:
a1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C6:8B:E0:AD:97:BB:BB:8E:DE:5F:38:0B:86:51:EA:08:F2:02:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89AE4AE603A211EF99445705017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.128.0/18
Signature Algorithm: sha256WithRSAEncryption
b7:92:ab:b1:a9:4b:a5:68:ca:50:44:60:96:36:d1:4b:db:1f:
92:45:0f:46:0e:14:6c:32:bf:bc:7e:a9:2f:a0:ef:52:ff:78:
e5:7c:62:7b:92:f7:15:30:69:2a:4d:7a:59:c1:30:6f:d7:51:
34:e8:44:5a:25:30:34:df:6b:13:2e:b9:73:75:85:81:46:11:
87:15:e2:95:4a:db:30:4c:78:90:71:24:9f:69:80:82:fb:cc:
df:5b:18:52:67:82:71:3c:18:43:7a:8f:9e:d5:7a:da:a4:e2:
12:59:55:6b:b9:f7:d9:c7:e2:0d:31:9b:c3:b9:29:55:52:65:
53:f1:2f:1e:13:04:8c:16:f0:a1:ce:7a:a0:71:b4:7f:11:9c:
da:33:4b:c1:e9:4e:3d:0c:2c:06:c0:a3:9b:af:7d:5c:52:67:
54:65:38:5a:f4:8b:63:70:e2:28:4c:14:e3:ec:c1:9d:f1:4f:
da:56:e2:67:cc:16:88:da:6f:6b:cd:c7:dd:6e:ce:c3:e3:28:
6c:9c:24:53:2b:45:a9:1c:40:b9:b2:12:90:ea:15:fb:f3:ce:
9f:64:e1:dc:bc:a9:98:92:99:66:49:be:f6:99:46:a1:a1:d2:
85:34:89:65:a3:4d:1b:14:b5:ff:e1:05:46:fd:63:dd:3a:18:
e5:6a:46:e6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIZmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDI2MDc1NjQ3WhcNMjQwNTA5MDc1NjQ3WjAYMRYw
FAYDVQQDEw02NjJiNWU0Mi1kMzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoXUeLq7o5HixSGbvIRVmoJIr3I45G6baoqtmzC4oSJ+hrtRQ/qY3r4aj
nzZZ8bI9mVsV2q7/BEh/k+RyjcCns0mg5tYFxoAkT6x6c778X5tjWWhqZ0PYGjeI
bBsV4igx4tpaFLY2EnohDevTEHf50w3sPta64ZiPYWWogEU3rBnpA5unGXOSf7iT
ShryGJ6iuupveR03pe3JThuyE8R6kvyBlTWFVXeEJV6BAuksh7TSf8vVwSozCKnM
66k9GUfijcd8ajrz8QkbHduMSXUEsft+4elMvTDSNIGBpQXa04k1dG0GNfsQqvur
9zObhoLhyqa8sMYa3toaEcJ2+n6hJQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFETG
i+Ctl7u7jt5fOAuGUeoI8gLsMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84OUFFNEFFNjAzQTIxMUVGOTk0NDU3MDUwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGLcWAMA0GCSqGSIb3DQEBCwUA
A4IBAQC3kquxqUulaMpQRGCWNtFL2x+SRQ9GDhRsMr+8fqkvoO9S/3jlfGJ7kvcV
MGkqTXpZwTBv11E06ERaJTA032sTLrlzdYWBRhGHFeKVStswTHiQcSSfaYCC+8zf
WxhSZ4JxPBhDeo+e1XrapOISWVVruffZx+INMZvDuSlVUmVT8S8eEwSMFvChznqg
cbR/EZzaM0vB6U49DCwGwKObr31cUmdUZTha9ItjcOIoTBTj7MGd8U/aVuJnzBaI
2m9rzcfdbs7D4yhsnCRTK0WpHEC5shKQ6hX7886fZOHcvKmYkplmSb72mUahodKF
NIllo00bFLX/4QVG/WPdOhjlakbm
-----END CERTIFICATE-----
Generated at Fri May 10 03:13:31 2024 by rpki-client on console-ams.rpki-client.org