Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F4884963F5311EF99C9D040762E951A.roa
File: 0F4884963F5311EF99C9D040762E951A.roa (raw, json)
Hash identifier: OcpmqU4CiU8QeC9qS+casp/csBEBJqDExVTIZdp0bwE=
Subject key identifier: 8E:A5:F5:91:9C:E3:AC:70:53:AA:FA:D2:2A:78:4D:7F:0C:C7:B4:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9B82
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F4884963F5311EF99C9D040762E951A.roa
Signing time: Thu 11 Jul 2024 06:59:04 +0000
ROA not before: Thu 11 Jul 2024 06:59:01 +0000
ROA not after: Tue 13 Aug 2024 06:59:01 +0000
asID: 397423
IP address blocks: 45.194.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39810 (0x9b82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 06:59:01 2024 GMT
Not After : Aug 13 06:59:01 2024 GMT
Subject: CN=668f82b8-2301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0b:ba:be:47:e2:37:cb:a1:89:82:11:5e:38:
89:3d:3b:3b:72:d4:bd:10:cd:cc:45:d1:67:6e:5d:
07:c2:f3:7b:e4:7e:a2:27:61:b7:9e:72:90:33:82:
42:14:34:0e:a9:c6:9a:7f:49:3e:84:f2:fe:7c:de:
12:12:30:59:30:9b:e1:68:a6:63:87:c3:75:73:a0:
20:09:6e:06:cf:e6:33:0f:a9:7e:af:e4:37:08:1d:
03:44:96:ee:17:48:13:7d:fb:ea:3a:25:90:78:4b:
47:7b:f2:fb:b7:9f:08:10:07:bd:fb:a1:68:9f:bd:
19:72:17:38:79:8a:0a:7e:5d:28:48:91:10:98:44:
70:07:44:66:0e:4d:ef:da:e9:fc:c3:30:29:b7:f4:
61:5b:8b:1b:6a:1b:4a:ed:b9:ad:e0:f7:44:b1:38:
69:05:52:2f:71:4f:7a:12:1f:1a:e0:9f:35:9a:68:
39:fb:68:27:f8:fa:da:76:f3:e7:73:2a:1f:c6:ea:
ba:2d:f4:ef:b9:b2:71:8a:68:56:3c:0f:c6:94:83:
8a:f6:67:95:bb:fc:01:df:db:3c:e3:20:69:05:88:
ea:91:29:71:a2:b7:a1:ce:9c:d0:5d:bb:0a:67:cb:
9a:9d:b2:6e:5c:b1:d3:ed:69:2e:0f:06:2e:03:cd:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A5:F5:91:9C:E3:AC:70:53:AA:FA:D2:2A:78:4D:7F:0C:C7:B4:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F4884963F5311EF99C9D040762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.28.0/24
Signature Algorithm: sha256WithRSAEncryption
97:df:42:d9:3b:fd:d2:46:ea:4b:43:a6:18:25:a3:60:60:22:
6a:2e:75:42:11:1d:25:3a:aa:e8:54:92:3f:3e:dc:32:c8:ab:
f0:c6:00:6a:6f:66:39:7c:5a:5f:04:dd:f6:37:ae:c2:f6:8c:
4b:01:de:fc:94:60:bc:79:f0:83:2a:b5:83:d2:f6:3a:6b:ca:
42:c3:11:fc:37:8e:18:76:03:c8:ce:81:46:ff:f0:5b:13:0a:
5a:74:4a:b1:53:df:c3:45:e1:87:ee:6d:43:09:e2:81:1f:34:
91:09:ab:2f:e1:71:7d:d5:6e:64:24:94:ed:f5:74:69:ce:76:
d2:67:22:3a:cf:1e:8d:6a:a2:08:e3:3c:00:b7:77:87:77:80:
8d:cc:87:a5:8c:f6:f8:07:b7:aa:fd:85:b4:4c:4d:52:c8:e0:
d1:a4:11:92:2a:5f:17:3a:1e:50:30:6a:81:f7:e6:0f:66:40:
11:cc:42:6e:ff:71:a3:bd:50:9f:e8:e1:25:10:63:98:e1:12:
e4:94:f7:2d:e5:e5:1f:c7:75:e5:04:db:6e:a7:0a:69:00:e7:
60:42:cb:25:51:06:21:0b:43:a6:ff:a4:e3:53:65:77:4f:8d:
68:00:cc:27:cd:dd:12:ea:40:e0:82:05:0d:cd:35:31:db:c7:
58:35:93:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 09:22:17 2024 by rpki-client on console-fra.rpki-client.org