Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11DA32423A9711EF946D10BA762E951A.roa
File: 11DA32423A9711EF946D10BA762E951A.roa (raw, json)
Hash identifier: gzIGvg9wjj8j6014il5PC20BXtaqZf9WGhV8xeNQ1so=
Subject key identifier: 5D:4D:5A:06:75:D7:AE:6F:08:09:96:98:DF:73:E0:13:0A:E3:11:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 98AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11DA32423A9711EF946D10BA762E951A.roa
Signing time: Fri 05 Jul 2024 06:23:19 +0000
ROA not before: Fri 05 Jul 2024 06:23:15 +0000
ROA not after: Thu 01 Aug 2024 06:23:15 +0000
asID: 39600
IP address blocks: 45.204.72.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39085 (0x98ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 06:23:15 2024 GMT
Not After : Aug 1 06:23:15 2024 GMT
Subject: CN=66879156-1d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:13:64:6e:e4:4c:c3:bf:95:dd:53:16:03:4a:
1d:16:64:30:de:6c:14:b0:f5:3a:e4:ed:a5:17:00:
c5:12:fd:49:09:3a:5b:b0:d4:27:dc:be:eb:2f:0e:
35:c5:44:29:be:07:73:58:8a:d1:06:ce:c9:8f:52:
64:fc:20:e3:8e:ed:69:ef:68:7d:28:7b:db:c3:55:
75:e2:33:c8:92:89:74:43:08:0e:42:21:fd:c5:14:
28:d7:f0:ff:a7:92:81:d8:e9:b9:8f:a3:3a:5e:de:
09:37:a3:dd:90:39:65:0e:fc:9d:4b:ea:cf:aa:f7:
18:d1:89:16:41:62:81:e1:12:71:7c:4a:1a:a8:aa:
2a:db:25:48:52:6d:52:b6:5b:4f:3c:51:bd:a6:7c:
ff:d4:52:93:4f:3a:64:a6:c0:fd:18:a1:c1:1c:32:
80:54:be:da:dd:59:2f:5c:42:d8:0a:f0:31:fc:b4:
d5:79:fa:75:ec:ef:c1:a7:f6:5e:4f:6e:f4:40:3e:
59:4d:23:4b:df:99:bc:37:90:7c:07:c6:1a:e9:b1:
d4:aa:39:ed:e5:0c:77:9c:4a:85:20:17:0b:af:e9:
1b:82:63:61:82:d3:35:13:26:8b:b3:4c:e1:b2:c8:
09:e8:b0:47:d6:75:3a:b1:b8:00:4a:c8:6e:6d:17:
e3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4D:5A:06:75:D7:AE:6F:08:09:96:98:DF:73:E0:13:0A:E3:11:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11DA32423A9711EF946D10BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.72.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:17:43:e1:27:80:46:54:a4:1e:a4:02:4f:54:d9:18:2f:c6:
a4:a9:47:8b:f4:5f:1e:bf:05:c5:65:7e:62:5d:ca:e5:70:00:
d3:cc:80:f6:9c:59:70:54:99:d1:82:51:35:01:cd:3b:19:9d:
15:9f:15:09:50:16:37:7c:24:c1:b8:a5:06:9d:88:aa:d1:8d:
db:56:21:de:ce:76:2e:af:59:72:9d:4b:00:74:18:c7:c0:12:
fd:2f:fb:59:89:5e:58:0d:85:f2:20:75:2a:fa:c7:0f:48:a8:
e4:a0:cc:db:be:e6:b6:c9:d5:d1:b1:a4:e7:a5:38:86:bc:11:
a4:de:d4:3e:99:5d:48:4d:2f:54:c8:af:71:96:03:27:45:35:
dc:6e:92:ba:75:7c:bf:1d:31:3e:8e:4f:69:2b:22:c3:1d:42:
64:d5:8d:04:49:45:03:6f:84:20:68:e5:56:ee:ab:d7:95:87:
28:35:15:f0:8a:43:f2:78:33:2c:43:cf:35:1a:fa:ed:2d:aa:
f4:92:8d:6f:2a:63:1a:df:60:ea:3d:10:2d:51:da:d1:13:b3:
6a:4a:55:ae:36:11:68:c0:59:64:ed:01:45:28:a8:c4:6b:e5:
f9:11:ba:b9:19:39:ff:8b:ca:63:ae:e0:51:98:b3:70:9a:13:
6a:f6:20:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 08:35:32 2024 by rpki-client on console-fra.rpki-client.org