Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E4A733006D711EFB787822E017001B1.roa
File: 8E4A733006D711EFB787822E017001B1.roa (raw, json)
Hash identifier: 1NIhAOhHKdQ0Fw3K9LMG9E7wu1kT7yTcyLPMWhN/PZQ=
Subject key identifier: 18:41:E4:19:69:93:C0:06:1A:A3:D8:3F:E3:FD:1E:B4:41:1C:71:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 86E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E4A733006D711EFB787822E017001B1.roa
Signing time: Tue 30 Apr 2024 09:53:55 +0000
ROA not before: Tue 30 Apr 2024 09:53:51 +0000
ROA not after: Tue 07 May 2024 09:53:51 +0000
asID: 138630
IP address blocks: 45.204.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34535 (0x86e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 09:53:51 2024 GMT
Not After : May 7 09:53:51 2024 GMT
Subject: CN=6630bfb3-b5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:d0:4e:d0:c1:21:b9:e3:35:33:89:5e:d5:
a1:22:94:63:d8:d8:36:cb:42:32:55:73:2b:2e:84:
15:61:00:09:3b:db:1a:12:47:e5:eb:9a:9b:5c:79:
ee:cf:b7:ff:4e:00:bf:46:e1:f4:98:f1:5a:e5:ff:
da:49:81:8f:8b:96:0a:e2:09:5b:40:36:0c:2b:1a:
c1:11:20:33:49:f9:8f:17:47:a8:37:ee:96:cf:4f:
ce:84:a2:66:1a:50:ec:de:79:c6:5a:3b:a1:b9:ee:
e1:2c:46:58:7c:a6:5e:e3:6c:f7:6b:ed:1d:4c:b0:
9b:2d:6b:cb:de:bd:83:7c:e7:0e:26:bd:6a:0e:a1:
c0:50:c5:b9:fa:09:b2:a7:c8:58:83:fb:c0:3a:f0:
54:d9:49:15:2c:a1:63:be:a5:0b:4b:94:b7:4d:3b:
d4:ec:91:02:46:ad:b7:2d:2b:22:f9:44:17:36:81:
da:c8:95:1a:6a:dc:c0:17:4d:99:ff:9d:24:0b:bf:
af:87:3f:23:96:bc:fd:d9:af:5c:a5:7c:15:22:4b:
35:a2:d6:f7:6c:11:cc:ba:8d:77:9a:ea:f3:9b:24:
dc:54:cf:cf:26:03:8e:0c:be:55:4c:4e:2d:62:a9:
1b:89:98:32:91:43:44:4c:8a:f0:93:85:2a:b6:ef:
d4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:41:E4:19:69:93:C0:06:1A:A3:D8:3F:E3:FD:1E:B4:41:1C:71:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E4A733006D711EFB787822E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.86.0/24
Signature Algorithm: sha256WithRSAEncryption
95:56:42:7f:9b:ee:b4:44:86:50:83:b5:9c:b8:66:ac:77:98:
d3:ce:7c:d2:24:e9:37:a6:9c:34:55:ca:2e:42:5d:6a:17:64:
f0:78:dc:e0:56:0e:bf:38:c2:1d:ba:24:6a:1e:8b:06:02:a3:
3c:a7:05:69:a1:03:ea:91:a8:e2:c2:4e:91:e3:5a:f1:35:8d:
6b:a0:e1:d4:4b:9d:a8:50:85:f0:8d:64:16:29:aa:fa:ba:69:
37:5f:00:0c:af:90:ca:24:4a:30:7a:bd:ba:18:66:be:1c:aa:
d1:4b:02:46:06:13:4d:9b:6f:f7:f1:d8:4e:d2:23:99:f9:e7:
bc:f3:4d:87:47:1a:81:8a:26:00:50:bb:c0:bd:ac:d0:ec:3a:
30:d8:c0:47:e8:71:81:93:fc:8f:f0:a5:6b:38:dc:f8:92:9e:
dd:90:f2:f6:21:18:69:f9:1e:40:d1:0b:33:a6:37:1d:80:ea:
05:a9:85:2b:8c:fb:3a:f3:ed:87:89:d5:fc:1b:80:61:46:57:
4b:f0:57:b9:0d:29:a6:72:9e:99:b2:9a:18:2a:47:2b:84:ce:
a1:54:2d:ea:09:76:1e:c6:ac:44:81:ae:16:a7:e7:0a:22:a6:
1f:a1:96:b2:13:6c:39:b7:d6:14:fd:6c:2c:1a:46:b8:5f:c6:
de:bd:fd:85
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIbnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDMwMDk1MzUxWhcNMjQwNTA3MDk1MzUxWjAYMRYw
FAYDVQQDEw02NjMwYmZiMy1iNWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzV7QTtDBIbnjNTOJXtWhIpRj2Ng2y0IyVXMrLoQVYQAJO9saEkfl65qb
XHnuz7f/TgC/RuH0mPFa5f/aSYGPi5YK4glbQDYMKxrBESAzSfmPF0eoN+6Wz0/O
hKJmGlDs3nnGWjuhue7hLEZYfKZe42z3a+0dTLCbLWvL3r2DfOcOJr1qDqHAUMW5
+gmyp8hYg/vAOvBU2UkVLKFjvqULS5S3TTvU7JECRq23LSsi+UQXNoHayJUaatzA
F02Z/50kC7+vhz8jlrz92a9cpXwVIks1otb3bBHMuo13murzmyTcVM/PJgOODL5V
TE4tYqkbiZgykUNETIrwk4Uqtu/U5wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBhB
5Blpk8AGGqPYP+P9HrRBHHHTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84RTRBNzMzMDA2RDcxMUVGQjc4NzgyMkUwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcxWMA0GCSqGSIb3DQEBCwUA
A4IBAQCVVkJ/m+60RIZQg7WcuGasd5jTznzSJOk3ppw0VcouQl1qF2TweNzgVg6/
OMIduiRqHosGAqM8pwVpoQPqkajiwk6R41rxNY1roOHUS52oUIXwjWQWKar6umk3
XwAMr5DKJEower26GGa+HKrRSwJGBhNNm2/38dhO0iOZ+ee8802HRxqBiiYAULvA
vazQ7Dow2MBH6HGBk/yP8KVrONz4kp7dkPL2IRhp+R5A0QszpjcdgOoFqYUrjPs6
8+2HidX8G4BhRldL8Fe5DSmmcp6ZspoYKkcrhM6hVC3qCXYexqxEga4Wp+cKIqYf
oZayE2w5t9YU/WwsGka4X8bevf2F
-----END CERTIFICATE-----
Generated at Wed May 8 03:59:23 2024 by rpki-client on console-fra.rpki-client.org