Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0693E4604A5411EF96B142BC762E951A.roa
File: 0693E4604A5411EF96B142BC762E951A.roa (raw, json)
Hash identifier: qObKvg8u91AOgK+r5eB0KhJFHZuR0tNgRGBjERDl7Qs=
Subject key identifier: 34:CC:47:EB:6A:AD:C5:23:1A:7B:B4:6F:32:C2:A8:22:77:53:8E:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F8D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0693E4604A5411EF96B142BC762E951A.roa
Signing time: Thu 25 Jul 2024 07:03:42 +0000
ROA not before: Thu 25 Jul 2024 07:03:39 +0000
ROA not after: Fri 16 Aug 2024 07:03:39 +0000
asID: 136950
IP address blocks: 45.204.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40845 (0x9f8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 07:03:39 2024 GMT
Not After : Aug 16 07:03:39 2024 GMT
Subject: CN=66a1f8ce-9ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b2:05:59:1d:87:17:6f:26:b4:47:b0:2d:a8:
6f:12:f9:77:5b:d9:e1:6d:0d:f8:b8:e8:08:05:47:
d9:7e:97:9e:66:bb:62:84:87:56:59:fa:93:64:65:
a3:9c:e5:de:9d:7a:83:6b:9a:b4:78:8c:c3:49:67:
e5:62:60:7c:b3:e1:1c:c4:9f:f9:8a:ca:18:16:fb:
0a:76:b5:70:2e:43:30:5d:b8:9d:8d:f0:90:c4:61:
60:08:fb:43:b3:da:ee:8a:17:d7:a7:be:96:1c:b1:
94:4a:c2:fb:dc:43:78:49:cf:67:d1:ad:9e:96:c2:
b3:16:0d:c1:21:5a:40:9c:c4:42:1e:f3:b3:57:d4:
c2:90:48:85:fe:f5:34:e7:a5:75:8d:bb:35:1f:a2:
21:cb:63:0c:57:c7:b0:20:9a:55:8b:ce:76:eb:e3:
26:40:bf:76:e3:0b:09:57:13:95:f5:d2:5a:65:ee:
68:2e:67:21:98:d4:b3:dd:ff:2a:5c:ff:26:d5:5f:
f2:b5:84:37:af:f1:ff:0a:e4:49:9f:2f:86:02:c5:
80:b0:18:b3:8a:6c:45:76:8f:12:a0:a5:8b:eb:a6:
4a:c2:72:d2:cd:2d:cb:42:06:56:f7:67:7b:40:90:
58:73:ab:e3:92:88:53:73:1d:83:06:32:c6:24:46:
ee:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CC:47:EB:6A:AD:C5:23:1A:7B:B4:6F:32:C2:A8:22:77:53:8E:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0693E4604A5411EF96B142BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.85.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a7:a0:24:6a:fb:71:3e:43:90:57:0f:ae:94:14:4e:fe:a9:
27:ce:48:36:ac:ca:cd:b9:86:28:8f:92:e8:d1:f0:58:61:b3:
cb:64:5f:0e:52:93:45:ba:f5:aa:8a:19:b4:2d:e3:34:8d:78:
cf:2d:28:4a:b0:cb:18:36:dd:fb:f3:78:1e:62:91:3a:72:14:
84:53:68:98:a0:2d:0a:f9:00:02:48:ca:d5:fd:72:a2:66:49:
2b:5f:ad:ed:b5:3b:e9:dd:70:8c:90:bd:bb:c7:72:d6:d0:9a:
11:b4:02:97:b9:bc:5c:14:56:ca:63:3e:86:90:7d:4b:74:91:
54:92:ca:40:18:27:24:df:f7:57:37:a1:2c:ff:5b:e1:cc:1b:
f8:76:07:61:69:10:23:7e:c4:b2:62:8f:16:58:fc:7e:96:31:
f0:f0:2b:aa:fa:62:66:c1:91:3b:c0:08:cf:62:a5:f5:b1:28:
dd:1b:ac:da:ff:e5:df:a9:62:2e:c5:aa:db:96:71:65:f8:c9:
47:bf:3b:fd:4f:c5:cb:6a:24:85:af:16:e1:9b:cb:52:84:8f:
8c:91:2d:db:48:bd:2e:90:6f:0e:f8:34:3b:8d:5d:e6:d3:8a:
3a:98:89:38:71:27:cb:23:b3:50:6e:fb:e2:62:c8:8a:bd:5b:
c2:a7:e2:79
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ+NMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI1MDcwMzM5WhcNMjQwODE2MDcwMzM5WjAYMRYw
FAYDVQQDEw02NmExZjhjZS05YWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy7IFWR2HF28mtEewLahvEvl3W9nhbQ34uOgIBUfZfpeeZrtihIdWWfqT
ZGWjnOXenXqDa5q0eIzDSWflYmB8s+EcxJ/5isoYFvsKdrVwLkMwXbidjfCQxGFg
CPtDs9ruihfXp76WHLGUSsL73EN4Sc9n0a2elsKzFg3BIVpAnMRCHvOzV9TCkEiF
/vU056V1jbs1H6Ihy2MMV8ewIJpVi8526+MmQL924wsJVxOV9dJaZe5oLmchmNSz
3f8qXP8m1V/ytYQ3r/H/CuRJny+GAsWAsBizimxFdo8SoKWL66ZKwnLSzS3LQgZW
92d7QJBYc6vjkohTcx2DBjLGJEbuowIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDTM
R+tqrcUjGnu0bzLCqCJ3U453MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNjkzRTQ2MDRBNTQxMUVGOTZCMTQyQkM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcxVMA0GCSqGSIb3DQEBCwUA
A4IBAQB0p6AkavtxPkOQVw+ulBRO/qknzkg2rMrNuYYoj5Lo0fBYYbPLZF8OUpNF
uvWqihm0LeM0jXjPLShKsMsYNt3783geYpE6chSEU2iYoC0K+QACSMrV/XKiZkkr
X63ttTvp3XCMkL27x3LW0JoRtAKXubxcFFbKYz6GkH1LdJFUkspAGCck3/dXN6Es
/1vhzBv4dgdhaRAjfsSyYo8WWPx+ljHw8Cuq+mJmwZE7wAjPYqX1sSjdG6za/+Xf
qWIuxarblnFl+MlHvzv9T8XLaiSFrxbhm8tShI+MkS3bSL0ukG8O+DQ7jV3m04o6
mIk4cSfLI7NQbvviYsiKvVvCp+J5
-----END CERTIFICATE-----
Generated at Fri Aug 16 09:53:35 2024 by rpki-client on console-ams.rpki-client.org