Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0696E1D049A811EFBAFECDA6762E951A.roa
File: 0696E1D049A811EFBAFECDA6762E951A.roa (raw, json)
Hash identifier: fQb/VnmX4tRaTYXECPK4PWB3LYMgkjcDmuF+RI4zQPA=
Subject key identifier: F3:96:21:AD:A2:E5:7A:C6:C1:EB:65:9E:A4:2C:AE:FC:A7:00:73:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F3F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0696E1D049A811EFBAFECDA6762E951A.roa
Signing time: Wed 24 Jul 2024 10:32:29 +0000
ROA not before: Wed 24 Jul 2024 10:32:25 +0000
ROA not after: Fri 02 Aug 2024 10:32:25 +0000
asID: 44559
IP address blocks: 45.200.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40767 (0x9f3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 10:32:25 2024 GMT
Not After : Aug 2 10:32:25 2024 GMT
Subject: CN=66a0d83c-5418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:97:ec:ba:0f:d4:e5:63:bb:45:34:5b:db:
19:f4:dc:80:d6:71:10:fd:1a:c4:dd:79:52:a3:e6:
be:d7:e0:0f:c7:f2:c9:0f:ab:9e:48:e8:ef:e5:0b:
b0:2a:69:3e:eb:aa:aa:3f:1c:91:1f:a5:fe:17:27:
8c:11:19:0e:c6:17:86:9b:e9:d0:c1:a3:f1:c8:b9:
bc:b8:3a:fd:cf:11:dc:d4:8f:f5:c7:7b:f3:f2:a3:
ea:34:c0:2d:9e:d8:12:cd:a4:25:52:18:6d:8d:0c:
f5:0c:83:38:d2:df:dd:aa:2f:c9:20:82:d3:14:cc:
31:c3:01:63:70:88:ef:8e:f5:fe:b7:2e:18:13:88:
41:ee:83:df:bb:0d:25:a4:f7:c5:8e:1e:fb:9e:d8:
50:5b:51:f9:22:e4:8e:24:88:bf:c2:a0:47:16:d2:
20:15:d9:1c:32:aa:9f:d0:ba:f9:26:97:97:89:d2:
9a:c3:29:64:f5:23:58:10:4e:31:3b:fa:c6:42:7d:
b8:1e:1c:d1:21:f0:5d:30:3f:c5:34:1f:23:66:45:
0d:23:24:43:c2:b1:9b:02:03:e7:0c:cf:d2:78:f9:
ce:15:bf:5e:c9:96:df:30:c6:2d:04:6d:96:7e:32:
97:9a:3e:dd:2c:91:02:fe:91:8b:ba:fb:cb:aa:62:
7c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:96:21:AD:A2:E5:7A:C6:C1:EB:65:9E:A4:2C:AE:FC:A7:00:73:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0696E1D049A811EFBAFECDA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.149.0/24
Signature Algorithm: sha256WithRSAEncryption
37:42:69:b2:bb:17:64:fe:8e:13:3c:6e:c3:c0:00:53:8b:9e:
01:03:43:48:cd:e2:7a:b9:81:f0:75:e3:15:3e:47:99:48:2c:
f2:83:66:25:88:e1:4b:e5:0a:50:11:97:f9:b2:2b:f2:31:37:
1d:b8:1e:08:82:5f:85:8b:89:8c:05:ad:cb:1e:7a:34:68:27:
4f:7c:d6:d8:82:28:a4:1a:12:f2:c6:7c:2b:6b:89:28:35:2f:
c1:b0:de:53:ce:9a:da:6e:bb:b2:ad:30:f5:b9:a0:69:1c:31:
70:8f:bc:05:8e:c7:20:1d:e1:e6:25:b6:59:75:52:f3:58:4a:
d0:14:56:e0:ed:f9:3e:41:64:88:a9:19:73:e7:53:f3:11:94:
93:89:28:cb:f4:99:68:99:01:51:ff:48:e9:70:3a:d4:30:f4:
e2:8b:aa:49:d6:f5:49:a3:c5:9d:93:e5:30:9f:9c:27:8f:52:
db:0e:16:0a:e3:99:8b:13:e8:de:70:1f:81:87:0b:e8:48:dc:
2c:3a:90:5e:f4:15:95:e6:09:85:99:b2:37:c7:c0:41:8f:8c:
fb:fd:d0:0c:b2:dc:a2:3c:42:af:12:18:9e:ae:6c:f8:15:03:
f1:98:d0:1f:36:f3:f4:66:8d:fb:0b:da:6e:5e:d3:0e:dd:6b:
f7:2c:44:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 14:56:24 2024 by rpki-client on console-ams.rpki-client.org