Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE8EA51C17DC11EF87DB5D58017001B1.roa
File: DE8EA51C17DC11EF87DB5D58017001B1.roa (raw, json)
Hash identifier: 3afKFYS+23CcYyhPeDsjgwVRqm8hkSXNi+a1mFCm1zE=
Subject key identifier: 90:89:9F:58:92:80:BB:78:35:5C:FA:B4:0B:59:44:A8:B0:8A:86:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8B06
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE8EA51C17DC11EF87DB5D58017001B1.roa
Signing time: Wed 22 May 2024 01:44:47 +0000
ROA not before: Wed 22 May 2024 01:44:43 +0000
ROA not after: Mon 24 Jun 2024 01:44:43 +0000
asID: 272854
IP address blocks: 45.195.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35590 (0x8b06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 01:44:43 2024 GMT
Not After : Jun 24 01:44:43 2024 GMT
Subject: CN=664d4e0e-c27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7d:c9:ac:33:2e:19:73:3b:ef:a4:66:ab:0e:
22:10:9f:c6:01:f5:92:2b:57:a6:8a:92:40:b4:05:
5b:04:ce:dc:27:b3:e2:08:c6:0a:77:4c:f5:ca:bb:
58:0a:9a:a8:92:c8:70:e9:40:e3:0a:57:aa:02:03:
c7:dc:29:57:4d:b9:4d:df:bf:12:64:d7:3c:fc:53:
7a:1e:35:07:40:7c:ad:79:3a:55:42:4e:1b:d6:27:
a1:fe:ee:2d:54:03:0d:79:43:8e:c1:79:7b:c7:73:
16:11:8e:9e:10:26:c5:d7:5a:ee:74:f1:e7:19:36:
c4:ec:51:44:4a:f4:60:1e:f1:26:1c:23:f2:9e:d1:
aa:85:00:a3:07:aa:af:fb:d8:42:a7:14:44:f7:63:
7d:a1:64:26:e8:6e:61:00:a1:8f:a5:af:b4:cd:2c:
a4:e6:1c:c1:a2:75:4e:10:a6:93:66:9a:47:39:4b:
ba:9b:4a:dc:0a:7d:ce:bf:54:f8:03:c1:b6:da:a4:
41:a7:d6:3e:0b:32:24:64:67:95:ed:7e:ca:15:eb:
d7:b5:8e:1d:ec:8c:f2:36:d2:d0:37:ab:14:04:e8:
83:44:c9:92:10:3f:19:7d:91:13:e9:5a:da:22:a0:
76:ee:55:63:45:e5:76:04:05:53:06:01:ec:99:a7:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:89:9F:58:92:80:BB:78:35:5C:FA:B4:0B:59:44:A8:B0:8A:86:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE8EA51C17DC11EF87DB5D58017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.12.0/24
Signature Algorithm: sha256WithRSAEncryption
78:01:16:96:16:b0:6f:6f:5e:f1:d2:f3:f2:f0:f1:51:c8:bb:
79:26:5c:3c:97:a4:e7:a5:ad:bf:22:67:35:9c:bc:be:a9:bd:
21:1d:42:9d:75:7f:f6:43:1c:11:e4:47:04:eb:2c:d4:d3:83:
88:46:63:38:80:93:92:38:7a:b4:31:e1:a0:52:78:52:f5:ab:
e0:1e:76:8c:0c:d3:9c:e1:a3:4d:16:c4:65:a2:f0:a9:6f:eb:
48:52:33:b4:85:81:eb:9d:56:85:5d:1f:55:b7:8c:5b:9c:99:
38:5b:e0:3e:7a:51:8c:32:69:f9:f7:b8:3c:3a:84:0f:f8:bf:
8d:a5:79:e9:0a:85:e6:8a:e0:d3:c0:6d:66:ac:ad:38:3a:83:
fa:c3:f4:71:aa:05:2d:f8:a3:81:9e:96:fd:d2:2b:ee:94:41:
47:05:83:0a:c7:fb:c0:22:45:e9:3f:1f:25:67:88:e7:67:16:
79:03:14:1a:cd:e0:75:3a:ca:f8:c6:f3:c0:1b:29:08:72:18:
de:3b:f5:f2:dd:38:51:6e:3b:71:83:1f:33:3d:f1:0c:af:9a:
27:80:5a:1e:e3:59:85:e5:4c:e6:8d:b0:92:a0:2d:ea:9e:8d:
f5:17:77:0c:8b:52:90:9d:34:75:61:fd:75:ef:a1:b1:cf:b4:
2c:c3:0a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:44:42 2024 by rpki-client on console-fra.rpki-client.org