Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0363BEA413D411EDB72708AEF1222468.roa
File: 0363BEA413D411EDB72708AEF1222468.roa (raw, json)
Hash identifier: 1C1Zj0v7+i35La+OS2vQbpuUqfpmCwUsr+nothNdF14=
Subject key identifier: 63:7A:39:D4:30:46:5B:BC:B3:C2:DD:75:A0:5E:4C:42:78:CF:FC:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1660
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0363BEA413D411EDB72708AEF1222468.roa
Signing time: Thu 04 Aug 2022 09:01:23 +0000
ROA not before: Thu 04 Aug 2022 09:01:19 +0000
ROA not after: Fri 10 Feb 2023 09:01:19 +0000
asID: 133861
IP address blocks: 45.207.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5728 (0x1660)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 4 09:01:19 2022 GMT
Not After : Feb 10 09:01:19 2023 GMT
Subject: CN=62eb8ae3-8a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cf:2a:cd:8e:dd:e9:8a:4a:a4:6a:39:02:19:
77:d0:b6:a7:18:95:45:67:01:57:3d:03:55:08:ca:
d0:a1:13:79:71:35:26:48:51:d6:c5:6d:aa:3f:47:
24:ae:42:10:69:b6:d1:e0:bc:97:bf:61:d6:d8:b2:
ad:de:93:5b:a8:e9:50:8a:1a:2f:f6:6d:ee:3a:aa:
5a:88:09:0b:3c:cf:33:11:d3:b9:1a:32:65:8b:53:
01:fa:17:24:c5:70:a9:83:3d:53:0b:51:3c:40:73:
24:b0:61:c1:48:56:f9:cd:d8:4a:b3:0c:3f:0f:43:
9a:f1:01:76:0e:43:67:99:86:27:14:f5:ca:5c:a2:
04:c7:81:71:2d:64:75:f5:d9:fb:11:51:87:18:00:
7e:d2:bd:c5:a0:39:a4:52:c1:95:5a:25:ac:f1:4d:
fa:f5:3a:ab:10:f1:6c:2e:3c:73:b5:a5:bf:b2:39:
fb:36:00:e7:c9:48:57:46:b7:84:8e:75:61:a3:27:
ca:02:5e:0f:1d:33:97:04:4a:ce:ca:bb:49:44:0d:
3d:62:76:e9:3d:a4:17:d9:26:a8:00:49:67:83:0d:
0e:be:16:ca:00:c5:f2:df:3b:73:12:b5:1b:25:09:
e1:36:7a:37:84:a4:0b:06:38:c4:f4:fa:4f:6a:88:
5a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7A:39:D4:30:46:5B:BC:B3:C2:DD:75:A0:5E:4C:42:78:CF:FC:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0363BEA413D411EDB72708AEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.52.0/24
Signature Algorithm: sha256WithRSAEncryption
00:06:2f:65:35:ee:bc:e1:7c:54:a3:07:f0:d9:95:4f:3a:d6:
66:7c:6e:97:95:09:36:32:cf:82:fd:8d:d5:77:2b:d2:04:ba:
b5:75:5a:e7:54:d1:7e:28:71:f9:3a:92:af:bb:38:0d:68:aa:
f5:95:ed:25:b4:d2:aa:1b:be:f1:f8:53:57:8b:77:a5:3a:8c:
1a:e5:a9:4f:6d:76:a4:fa:8c:fd:44:6c:86:84:f6:09:af:89:
04:f3:b6:96:45:80:c6:30:7b:95:44:cc:15:bf:0e:70:01:b8:
7f:c2:cd:2d:1c:8d:af:8c:db:31:db:29:f0:54:9d:8c:3d:47:
a6:f0:9d:96:d8:f9:56:59:15:e6:48:40:40:98:83:b5:d7:86:
90:74:c4:87:cf:41:df:44:3b:6e:14:07:bd:b3:96:1a:6d:b0:
2c:a4:32:0f:3a:85:ed:f3:a8:2b:2f:d0:15:b2:3a:b8:91:43:
57:d7:6d:d8:65:7d:e0:1c:a7:72:05:ef:5c:e3:68:33:48:f6:
1b:da:88:d1:58:72:67:2c:c3:8a:04:c3:a1:11:5f:11:cd:02:
f6:2c:10:ca:65:a6:9d:1b:4a:4c:4f:3e:72:34:2e:89:5f:32:
8d:86:ab:d9:bf:36:0a:0b:e3:9d:20:27:cb:8a:dc:8c:6e:fd:
2d:f2:b5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-ams.rpki-client.org