Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0155E79247DD11EFA3E9717A762E951A.roa
File: 0155E79247DD11EFA3E9717A762E951A.roa (raw, json)
Hash identifier: OouOP+wnuLXCJToD3b8/NiYMyUL1VTqDjEh18WV3op8=
Subject key identifier: 00:C0:A3:F0:2C:E4:38:BE:52:F7:D5:46:34:FB:EE:EA:73:14:5E:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E09
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0155E79247DD11EFA3E9717A762E951A.roa
Signing time: Mon 22 Jul 2024 03:46:41 +0000
ROA not before: Mon 22 Jul 2024 03:46:38 +0000
ROA not after: Fri 23 Aug 2024 03:46:38 +0000
asID: 62240
IP address blocks: 45.200.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40457 (0x9e09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 03:46:38 2024 GMT
Not After : Aug 23 03:46:38 2024 GMT
Subject: CN=669dd621-975d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1a:be:33:0f:f8:54:7e:d5:16:15:d7:db:0f:
bb:38:69:61:4f:b7:25:15:0f:58:a5:21:79:91:de:
cb:71:c8:40:3a:94:b2:77:ff:a4:64:cd:3e:8a:f6:
3f:3c:00:5f:2b:37:12:70:78:b7:31:c3:a9:c3:be:
62:69:3f:c4:8f:ec:a9:eb:28:a1:1a:fa:10:67:ce:
81:b7:1c:91:9f:ce:82:ed:a2:28:55:fa:d8:b9:b9:
3e:07:86:bb:52:2d:fb:76:4b:1d:97:42:c6:03:3b:
b9:70:aa:86:ea:f5:11:87:85:f5:55:c3:f7:a6:dc:
4b:b3:a4:a0:c3:cf:0c:9c:b6:5c:7a:e9:b5:66:cb:
56:39:ce:9b:07:44:fd:64:23:f4:c2:94:bb:f6:18:
6b:14:3e:d3:d6:07:30:e5:70:c8:c3:eb:37:a6:9c:
ad:dd:65:0c:1a:7e:6b:4e:9a:08:a5:a2:80:a7:a0:
50:3f:54:ea:4f:a4:91:ac:0e:66:0e:7f:02:c6:2a:
9b:eb:89:c8:37:b8:eb:b2:73:50:fa:8f:81:25:3a:
cc:cc:2f:b8:28:18:3d:68:b4:92:2a:81:f3:09:ef:
5e:70:70:68:4b:24:ee:7b:73:92:f3:48:04:01:2f:
ee:45:69:5e:b8:ab:fb:40:b0:6d:8e:50:36:91:54:
6a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C0:A3:F0:2C:E4:38:BE:52:F7:D5:46:34:FB:EE:EA:73:14:5E:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0155E79247DD11EFA3E9717A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.176.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:16:64:c1:a4:a1:ca:f8:67:c8:af:93:b5:30:04:c3:55:2b:
73:c6:b3:0f:19:b5:24:78:6f:32:1d:e8:9c:b8:79:c7:8c:7f:
19:56:c7:f6:e9:2b:69:17:07:63:7b:7c:64:1c:c4:dd:78:b3:
8e:a1:00:5f:db:1e:3f:0f:74:e9:76:dd:2d:e3:e9:a3:58:7b:
aa:4d:f8:8a:47:2f:3c:20:cc:89:6d:6e:d9:6b:f0:da:f4:81:
6a:31:8f:5b:b7:86:0f:44:34:ea:ba:8d:f0:e4:52:8c:9d:97:
5e:d4:d1:cf:17:00:38:d1:50:5d:b7:94:8f:24:87:d9:d7:81:
d2:e9:8a:71:86:54:12:cd:59:30:2f:bf:2c:98:b2:1d:d2:9a:
09:28:13:94:d7:6c:2f:cf:6e:6f:48:e0:5c:33:40:26:c4:ac:
59:85:db:fc:fd:40:9f:4d:81:cd:e8:28:5b:ee:d4:27:6a:44:
3d:d6:5b:fb:e9:84:3a:ea:32:c1:32:98:89:37:28:5a:2d:79:
f8:88:50:5f:3c:08:d4:6f:d1:ab:f2:94:80:17:80:7e:cf:45:
3a:33:a0:1c:78:1b:24:ae:00:cb:1d:4e:ae:71:3e:2b:02:26:
1c:32:60:68:18:2f:38:f1:9d:f2:02:2c:3f:c1:38:de:2b:bc:
4f:54:b0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:47 2024 by rpki-client on console-fra.rpki-client.org