Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E33E344418711EFBA743896762E951A.roa
File: 0E33E344418711EFBA743896762E951A.roa (raw, json)
Hash identifier: Ll/Ad/W7aMTb9A0wnjmi2PLPLWY6Zee/FcUwmxH3vjo=
Subject key identifier: FF:A6:D3:33:E4:49:39:BF:AB:0B:CC:A3:C5:E3:00:10:CE:39:ED:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9C3B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E33E344418711EFBA743896762E951A.roa
Signing time: Sun 14 Jul 2024 02:16:19 +0000
ROA not before: Sun 14 Jul 2024 02:16:15 +0000
ROA not after: Wed 14 Aug 2024 02:16:15 +0000
asID: 23470
IP address blocks: 45.194.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39995 (0x9c3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 02:16:15 2024 GMT
Not After : Aug 14 02:16:15 2024 GMT
Subject: CN=669334f3-9e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fb:17:6c:bc:6e:aa:6a:b9:96:35:d0:99:e2:
a7:96:08:2f:93:b0:07:6d:2c:0e:a2:9d:86:1b:38:
c1:b9:d6:a1:73:e0:0b:df:d6:d4:ac:45:b7:f1:9f:
41:e8:91:ea:44:52:0b:05:45:83:f5:e0:b1:89:af:
b3:61:75:a9:03:c7:02:38:9b:8e:4c:83:f8:55:de:
00:41:8d:ad:87:a6:00:28:b3:42:60:be:d2:1e:78:
cf:85:0f:73:2a:43:c0:b7:e1:e6:d9:cb:23:f9:d4:
89:7b:1a:7d:96:3a:14:48:f3:49:3b:0e:a6:89:c0:
11:4b:ca:b4:6d:53:20:0d:60:a0:f5:7e:b0:e0:70:
47:9e:bc:dc:68:d7:b7:64:cd:af:7e:49:c1:ad:57:
3b:84:e8:8b:3e:bb:66:c4:53:1f:4f:f7:69:01:a7:
97:b8:80:1e:51:18:97:5b:8f:55:d2:ef:4b:a7:cf:
c3:a5:92:23:20:8d:37:62:bb:8a:29:9b:6f:e2:5e:
82:f8:77:52:2d:23:8f:f5:d6:f2:c8:07:81:dd:c2:
bd:8d:d2:77:20:b6:da:56:19:3c:e0:14:cc:43:d2:
93:5a:70:0f:28:ce:8e:68:97:33:c4:da:21:be:b3:
16:62:1e:4f:b4:ec:00:20:0d:e4:ec:85:78:43:11:
3d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A6:D3:33:E4:49:39:BF:AB:0B:CC:A3:C5:E3:00:10:CE:39:ED:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E33E344418711EFBA743896762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.54.0/24
Signature Algorithm: sha256WithRSAEncryption
06:08:49:e2:51:c1:58:93:fc:72:f3:8f:35:ba:35:05:e0:4d:
8b:dc:ad:3d:53:39:f3:b7:25:63:62:4b:46:87:55:76:2b:41:
f0:b1:87:ae:d3:19:1b:b9:30:47:58:b4:65:d6:78:d5:fa:9c:
d0:6c:f0:76:32:94:45:b1:42:c3:7b:05:3c:c3:95:3b:f3:16:
6c:96:54:d8:a5:33:f2:e9:b8:6e:f4:be:77:45:fb:0c:1c:04:
cb:71:c5:64:2c:3c:b5:fc:17:b1:74:4f:8f:c4:23:bc:14:3d:
60:dc:ff:e7:f3:0d:fd:e3:55:4a:12:8f:06:aa:36:60:8b:2a:
88:cf:11:1e:58:8f:06:2a:0a:8d:ff:f8:30:52:07:8a:b9:03:
1f:79:d3:fb:77:da:af:11:e2:c8:85:44:f5:27:15:95:4e:8e:
3e:3d:29:93:40:8b:60:2d:43:c2:b8:c7:be:cc:c6:71:e4:01:
66:15:4b:41:9d:06:13:d1:18:a1:fb:b9:8b:5c:84:87:a6:10:
6c:12:15:84:0a:a4:7f:ad:98:14:05:62:33:f1:f0:80:78:8e:
c5:c7:72:01:18:4a:a3:91:c8:88:b3:28:a0:69:d3:4b:54:ef:
46:71:0f:06:ea:71:44:d5:96:c7:f9:3e:04:24:6a:a0:cc:d4:
31:c2:5a:f2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJw7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzE0MDIxNjE1WhcNMjQwODE0MDIxNjE1WjAYMRYw
FAYDVQQDEw02NjkzMzRmMy05ZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2vsXbLxuqmq5ljXQmeKnlggvk7AHbSwOop2GGzjBudahc+AL39bUrEW3
8Z9B6JHqRFILBUWD9eCxia+zYXWpA8cCOJuOTIP4Vd4AQY2th6YAKLNCYL7SHnjP
hQ9zKkPAt+Hm2csj+dSJexp9ljoUSPNJOw6micARS8q0bVMgDWCg9X6w4HBHnrzc
aNe3ZM2vfknBrVc7hOiLPrtmxFMfT/dpAaeXuIAeURiXW49V0u9Lp8/DpZIjII03
YruKKZtv4l6C+HdSLSOP9dbyyAeB3cK9jdJ3ILbaVhk84BTMQ9KTWnAPKM6OaJcz
xNohvrMWYh5PtOwAIA3k7IV4QxE9lwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFP+m
0zPkSTm/qwvMo8XjABDOOe1AMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wRTMzRTM0NDQxODcxMUVGQkE3NDM4OTY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcI2MA0GCSqGSIb3DQEBCwUA
A4IBAQAGCEniUcFYk/xy8481ujUF4E2L3K09UznztyVjYktGh1V2K0HwsYeu0xkb
uTBHWLRl1njV+pzQbPB2MpRFsULDewU8w5U78xZsllTYpTPy6bhu9L53RfsMHATL
ccVkLDy1/BexdE+PxCO8FD1g3P/n8w3941VKEo8GqjZgiyqIzxEeWI8GKgqN//gw
UgeKuQMfedP7d9qvEeLIhUT1JxWVTo4+PSmTQItgLUPCuMe+zMZx5AFmFUtBnQYT
0Rih+7mLXISHphBsEhWECqR/rZgUBWIz8fCAeI7Fx3IBGEqjkciIsyigadNLVO9G
cQ8G6nFE1ZbH+T4EJGqgzNQxwlry
-----END CERTIFICATE-----
Generated at Wed Aug 14 08:58:52 2024 by rpki-client on console-fra.rpki-client.org