Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09DD576413D311EDB2FFDEAAF1222468.roa
File: 09DD576413D311EDB2FFDEAAF1222468.roa (raw, json)
Hash identifier: Y+Dgw9EBm8ynkk1dZNJq6934lIKUzvxX7PIp1Nq7m08=
Subject key identifier: 70:FA:38:E6:0B:E8:6A:A3:B4:2D:C0:9E:04:72:2B:EE:F0:FE:53:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 164A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09DD576413D311EDB2FFDEAAF1222468.roa
Signing time: Thu 04 Aug 2022 08:54:24 +0000
ROA not before: Thu 04 Aug 2022 08:54:21 +0000
ROA not after: Fri 10 Feb 2023 08:54:21 +0000
asID: 133861
IP address blocks: 45.207.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5706 (0x164a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 4 08:54:21 2022 GMT
Not After : Feb 10 08:54:21 2023 GMT
Subject: CN=62eb8940-4ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:98:47:5e:9b:cb:5a:9b:b3:6c:a9:81:3a:59:
07:44:08:1c:ae:7c:8b:a7:4c:34:0a:54:05:a4:a6:
49:7d:c5:57:dd:de:3c:62:5d:57:8a:54:90:17:05:
24:fa:93:14:bd:11:7b:30:03:cb:be:db:fa:57:ac:
2c:e1:62:ae:c2:fd:37:a4:75:c4:32:b9:51:7e:d7:
d9:78:e5:c5:42:c9:91:0c:38:13:21:72:f3:55:69:
8e:5f:50:9c:87:58:e6:68:68:55:12:85:48:89:0a:
af:ba:ec:d2:62:54:65:f5:18:28:80:28:cc:a4:1d:
93:8a:64:1f:07:79:8d:2b:1e:35:d5:db:26:e3:e7:
76:eb:f7:7c:bf:34:90:dc:bc:17:45:02:88:6b:07:
20:80:56:41:e4:93:3a:d7:3b:9b:88:bb:9e:27:2e:
16:0a:4b:c0:e6:ab:46:7d:a2:26:6f:13:bc:c7:04:
46:55:44:ed:1b:d3:38:24:d1:f7:bd:7a:95:d8:d1:
38:e1:ac:3d:c7:3c:0a:9e:55:46:ba:91:e3:cb:51:
3c:ec:d2:bc:d8:72:d4:9a:6b:87:62:64:7b:8d:d3:
eb:61:c4:44:d0:f7:63:30:95:39:6a:3a:d2:1c:f4:
c9:88:ef:a9:30:e0:1e:a9:46:db:19:1d:91:c9:91:
b0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FA:38:E6:0B:E8:6A:A3:B4:2D:C0:9E:04:72:2B:EE:F0:FE:53:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09DD576413D311EDB2FFDEAAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.41.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e6:4d:db:f9:c5:fb:fa:d8:37:61:6a:09:dc:c3:36:e2:d9:
0a:32:24:53:74:ec:ff:d2:29:66:11:47:01:6c:8c:b8:c5:c6:
5d:80:39:9f:f1:13:52:3c:d1:bb:a3:53:85:ae:18:6d:fe:a7:
58:68:92:c3:e0:eb:79:1e:34:db:b9:f5:54:0c:bd:f4:46:dc:
cf:5e:74:c1:7e:0e:b9:79:73:a1:2c:1c:68:82:29:79:f7:eb:
b0:d9:7d:c2:af:79:dd:51:fe:f8:d2:d1:9a:81:ee:40:3c:0c:
71:0d:95:ec:8b:cc:36:e8:89:ee:30:1e:f1:f2:73:d1:8d:1e:
0f:a5:03:dc:4c:fb:7e:94:f4:d0:7d:8b:4f:fb:48:f7:09:ba:
12:f0:9b:d3:5e:30:8a:29:b0:13:f2:79:e6:8b:76:bc:bc:b5:
98:f8:a3:3a:66:0a:2c:a9:a2:f9:6f:b7:03:85:de:0a:ee:b1:
92:ca:93:13:a7:1d:14:89:61:96:54:00:64:4e:2f:41:80:bd:
53:5f:67:b3:52:1e:ea:ad:b0:93:9f:72:cb:a2:27:94:15:f1:
a4:b1:ad:ec:9c:cf:c4:16:79:4b:8d:a9:57:5e:4a:9f:e4:c2:
d9:47:0c:0e:7b:06:d7:a8:bb:05:40:0b:77:56:9e:29:be:d4:
0b:fc:49:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-ams.rpki-client.org