Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E222242406DE11EF8E4C0267017001B1.roa
File: E222242406DE11EF8E4C0267017001B1.roa (raw, json)
Hash identifier: WMAf7Yke+kUtweCFHT0GqS9f7CVfBSlwyMs4w6rXcVo=
Subject key identifier: 75:35:58:39:12:43:3C:44:3C:0B:4C:6C:9A:80:60:19:13:F1:EF:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 86FD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E222242406DE11EF8E4C0267017001B1.roa
Signing time: Tue 30 Apr 2024 10:46:22 +0000
ROA not before: Tue 30 Apr 2024 10:46:18 +0000
ROA not after: Tue 07 May 2024 10:46:18 +0000
asID: 142062
IP address blocks: 45.204.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34557 (0x86fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 10:46:18 2024 GMT
Not After : May 7 10:46:18 2024 GMT
Subject: CN=6630cbfe-4d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:66:32:22:9a:85:6e:96:fb:3d:fc:66:f1:
81:c0:f5:b2:60:92:cb:89:bf:f1:1f:d2:9a:b9:cd:
72:70:3e:f0:92:53:6c:29:a6:ed:4a:2c:f5:24:75:
99:8c:19:ef:ec:d9:62:fd:42:ce:78:a1:7b:6f:fa:
c3:71:c3:c1:95:88:b1:70:bb:cc:7f:07:0c:43:41:
9d:65:77:03:24:96:b5:03:e5:87:f0:4d:0f:f0:6f:
c7:d0:f7:72:c8:ad:15:3b:ac:60:4e:dd:d2:4c:a9:
7e:50:5b:c5:a0:36:d8:7c:7c:5b:a1:86:df:fd:f6:
34:88:6e:de:56:b9:76:1d:32:06:d6:62:ef:22:d2:
d9:ea:a3:41:f9:04:b7:97:16:80:7d:df:a4:4f:3e:
e4:84:fb:d3:69:2e:5e:37:79:bc:56:ba:a2:00:a7:
e8:6f:67:b1:55:a9:b9:40:6c:35:5e:94:61:4e:6d:
13:04:dd:e7:3b:92:f2:f7:7a:e3:8d:5b:5a:4d:3a:
4d:85:7d:46:e3:cf:78:5d:85:07:08:6c:14:ee:d2:
0d:72:bc:77:3a:6f:26:f2:8c:e9:8c:de:dc:d9:ca:
66:a5:fb:04:a4:ba:b2:e5:88:d3:9b:43:fc:31:71:
4b:f1:d7:ec:1e:46:35:74:46:8b:5b:0f:5e:af:74:
1f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:35:58:39:12:43:3C:44:3C:0B:4C:6C:9A:80:60:19:13:F1:EF:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E222242406DE11EF8E4C0267017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.89.0/24
Signature Algorithm: sha256WithRSAEncryption
90:5a:1f:26:5a:4f:4a:c9:81:16:c6:15:59:e2:3c:d2:37:1f:
98:3f:e2:d1:7d:97:73:f4:d6:68:5a:98:da:f4:f3:44:a9:8d:
21:b5:41:bf:95:5d:38:d4:19:38:67:d2:c1:9b:c7:76:92:52:
6e:23:3c:6a:e6:84:2e:3b:2a:1a:e7:ee:42:dd:45:f3:7e:c2:
1c:21:0a:92:cc:df:d9:5c:3b:1c:63:b4:a6:c3:1a:b5:8e:d3:
1b:7b:74:bd:e7:c3:24:d6:b5:b6:f6:87:be:06:25:0f:c0:94:
a1:b2:59:ec:e3:11:e7:2c:7f:f6:85:f6:78:dd:a2:c0:00:82:
59:c8:4c:8c:20:e9:c1:e6:c9:b6:99:68:64:18:18:2e:f5:78:
4a:1a:8d:1e:6a:07:27:bc:b9:e9:60:05:e1:d6:7f:f5:30:b9:
74:3b:13:2b:84:f3:2f:58:1f:d4:49:cf:28:72:99:ac:7a:38:
4c:c3:25:17:03:b3:8c:8c:4e:6e:75:50:58:c7:48:8c:61:ee:
88:48:34:28:f0:47:03:2a:ad:eb:b9:e6:35:44:ac:e0:9b:b8:
dc:48:8a:e8:a4:ff:26:3a:17:5c:17:1a:a3:eb:a2:ed:f1:bc:
0f:fd:2c:5d:dd:f2:8d:57:32:9e:15:83:3d:ef:22:6f:4c:d2:
8d:a9:1a:1b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIb9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDMwMTA0NjE4WhcNMjQwNTA3MTA0NjE4WjAYMRYw
FAYDVQQDEw02NjMwY2JmZS00ZDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsrlmMiKahW6W+z38ZvGBwPWyYJLLib/xH9Kauc1ycD7wklNsKabtSiz1
JHWZjBnv7Nli/ULOeKF7b/rDccPBlYixcLvMfwcMQ0GdZXcDJJa1A+WH8E0P8G/H
0PdyyK0VO6xgTt3STKl+UFvFoDbYfHxboYbf/fY0iG7eVrl2HTIG1mLvItLZ6qNB
+QS3lxaAfd+kTz7khPvTaS5eN3m8VrqiAKfob2exVam5QGw1XpRhTm0TBN3nO5Ly
93rjjVtaTTpNhX1G4894XYUHCGwU7tINcrx3Om8m8ozpjN7c2cpmpfsEpLqy5YjT
m0P8MXFL8dfsHkY1dEaLWw9er3QfaQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHU1
WDkSQzxEPAtMbJqAYBkT8e8VMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMjIyMjQyNDA2REUxMUVGOEU0QzAyNjcwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcxZMA0GCSqGSIb3DQEBCwUA
A4IBAQCQWh8mWk9KyYEWxhVZ4jzSNx+YP+LRfZdz9NZoWpja9PNEqY0htUG/lV04
1Bk4Z9LBm8d2klJuIzxq5oQuOyoa5+5C3UXzfsIcIQqSzN/ZXDscY7Smwxq1jtMb
e3S958Mk1rW29oe+BiUPwJShslns4xHnLH/2hfZ43aLAAIJZyEyMIOnB5sm2mWhk
GBgu9XhKGo0eagcnvLnpYAXh1n/1MLl0OxMrhPMvWB/USc8ocpmsejhMwyUXA7OM
jE5udVBYx0iMYe6ISDQo8EcDKq3rueY1RKzgm7jcSIropP8mOhdcFxqj66Lt8bwP
/Sxd3fKNVzKeFYM97yJvTNKNqRob
-----END CERTIFICATE-----
Generated at Wed May 8 03:59:23 2024 by rpki-client on console-fra.rpki-client.org