Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BE6CF0406D111EFBCC019FC007001B1.roa
File: 8BE6CF0406D111EFBCC019FC007001B1.roa (raw, json)
Hash identifier: pv2yFsJ+soZtjSrsy5eiUBLW/WPyCqlh8hNT6m8PGOk=
Subject key identifier: 8F:74:60:2D:71:53:D2:2A:AF:0E:6A:34:38:DD:69:57:E9:00:70:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 86C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BE6CF0406D111EFBCC019FC007001B1.roa
Signing time: Tue 30 Apr 2024 09:10:54 +0000
ROA not before: Tue 30 Apr 2024 09:10:50 +0000
ROA not after: Mon 20 May 2024 09:10:50 +0000
asID: 39600
IP address blocks: 45.195.156.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34501 (0x86c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 09:10:50 2024 GMT
Not After : May 20 09:10:50 2024 GMT
Subject: CN=6630b59e-cca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:76:0a:df:e9:5e:52:40:2c:98:c7:1f:c1:
c7:55:1e:10:76:34:5e:6b:4e:b7:dc:24:fa:d2:85:
37:30:02:61:fe:e5:b6:85:73:aa:c2:f0:b5:bb:b7:
06:ef:a3:f4:55:59:2d:c6:17:0d:79:52:be:1f:4d:
f2:22:a6:0f:7f:f0:ac:d4:78:97:90:8d:df:d3:a8:
dc:8e:5b:97:c2:a1:ef:0c:78:36:90:a5:1a:86:42:
1c:45:13:18:53:66:65:ba:8a:0c:ec:28:24:d5:30:
dd:d8:1b:c0:18:ed:4c:0e:60:14:c0:74:3d:af:f1:
c9:52:53:c8:7b:70:e0:c9:a4:b4:57:1b:9c:94:88:
a6:a3:1e:1a:ad:d1:6c:44:cc:46:60:1b:ba:6b:49:
02:1f:af:5c:81:8d:22:a5:8c:49:bb:3e:48:5c:34:
c0:73:b5:29:3a:fc:6c:ae:2b:58:13:9f:21:ff:a6:
62:a2:dd:34:ed:4e:1e:5a:f7:6b:e2:b4:26:84:15:
2c:49:3e:1d:c5:46:3d:1c:88:9f:44:67:43:c2:b0:
c0:c8:fd:e6:96:cd:e6:19:33:0c:bf:e3:e1:96:95:
91:43:47:2b:9c:c1:dd:e2:0a:c3:25:b5:3b:3e:37:
5a:c6:99:21:b7:e2:08:2f:e0:19:f3:6b:f6:e8:67:
d7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:74:60:2D:71:53:D2:2A:AF:0E:6A:34:38:DD:69:57:E9:00:70:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BE6CF0406D111EFBCC019FC007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.156.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:6f:4d:36:6d:06:7e:89:00:5f:60:7a:a5:39:9b:05:de:6d:
87:7a:83:bc:0d:5b:5c:2a:e7:1d:de:de:ed:18:ea:3d:ea:74:
e5:31:66:02:33:50:04:4d:a9:a9:f0:61:3f:ce:88:62:94:a5:
03:45:48:d3:e9:5e:80:1e:3f:be:0f:36:79:b2:81:1c:53:64:
7f:6a:7e:2a:e4:9b:6b:6e:05:8c:9d:bd:03:b9:84:5b:ff:87:
17:cd:3d:20:53:c3:76:24:56:70:d7:c3:61:74:05:c6:62:bf:
08:d9:a2:14:2d:f7:e5:9c:90:5a:17:79:17:82:bb:d5:99:52:
7f:98:7e:f9:d1:57:a4:ca:34:14:41:03:b7:2d:c8:29:9d:5a:
9d:35:62:78:c3:ff:f3:27:38:b7:2d:0f:d4:87:f1:31:d7:2b:
b2:a1:9f:c5:94:09:9c:e2:ae:9c:7f:ef:17:47:bb:3d:70:49:
f5:2f:a0:75:78:e2:dd:c9:07:27:00:fc:73:3d:4e:e2:01:3a:
5e:fa:15:ae:f7:07:96:f3:5c:6d:de:f5:51:e6:8e:7e:0a:cd:
db:58:02:d8:83:31:48:b8:e0:8a:0f:70:a2:1a:8b:59:ce:4d:
52:12:f6:4c:e3:28:f9:9f:49:33:1e:8b:e2:ed:5b:d1:02:e8:
c6:39:33:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:17:28 2024 by rpki-client on console-fra.rpki-client.org