Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12D2F2AC88C811EC8C4944935A40D577.roa
File: 12D2F2AC88C811EC8C4944935A40D577.roa (raw, json)
Hash identifier: mfiC2JraPD78cdIkWsK5tGxELmUJSPqmsDKIjSPD+YM=
Subject key identifier: 4C:FB:36:34:73:12:57:4F:95:58:6E:22:AD:F7:34:E5:E8:C5:A6:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 11D1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12D2F2AC88C811EC8C4944935A40D577.roa
Signing time: Tue 08 Feb 2022 10:15:43 +0000
ROA not before: Tue 08 Feb 2022 10:15:38 +0000
ROA not after: Thu 10 Nov 2022 10:15:38 +0000
asID: 7018
IP address blocks: 45.194.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4561 (0x11d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 8 10:15:38 2022 GMT
Not After : Nov 10 10:15:38 2022 GMT
Subject: CN=620242cf-2687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:9d:94:17:8a:8c:d3:9c:2d:c2:94:d5:74:
44:ad:6b:4a:a5:2a:53:57:a0:0b:22:b2:21:24:a0:
9a:c1:55:1b:22:ce:78:ca:8f:62:3f:2b:05:85:b7:
36:3a:da:d4:b2:65:84:ec:04:fc:c9:68:61:7e:55:
d4:3a:0a:b5:5c:45:e3:30:78:d6:8a:a4:ce:c4:92:
81:e9:2d:fe:12:3c:33:a8:f9:e3:2a:10:02:8c:35:
3a:74:d8:ec:66:fa:c9:68:fb:04:02:13:37:98:4c:
bc:9e:e7:d2:1a:2d:fd:a5:b5:20:d7:57:86:3d:40:
47:60:84:49:74:c1:d0:e0:26:83:51:1e:ee:5d:65:
e1:69:98:f7:ff:23:b8:e4:92:3a:5b:d8:b0:62:8e:
0d:11:ee:81:ab:64:24:43:d6:b2:82:c5:a6:eb:16:
f7:92:61:66:02:38:8e:2c:4a:51:cc:b3:5d:00:fa:
3d:97:49:32:9f:91:41:0d:e2:59:ea:f6:b0:3c:ba:
13:d6:c1:e1:65:90:37:3c:6f:d0:f1:d7:97:01:c6:
99:e0:4e:bb:ec:83:25:d0:97:c2:82:1d:8a:c4:06:
2a:52:32:df:e8:ab:ee:1b:1c:8b:29:75:01:a5:c6:
ed:cb:fd:28:34:3a:90:7b:b8:6f:82:54:78:48:9d:
8a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FB:36:34:73:12:57:4F:95:58:6E:22:AD:F7:34:E5:E8:C5:A6:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12D2F2AC88C811EC8C4944935A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.0.0/20
Signature Algorithm: sha256WithRSAEncryption
20:fd:e7:9f:04:6a:a9:83:67:53:8a:d5:7e:b1:a0:0d:1b:29:
07:25:6a:da:21:a1:5b:b4:72:1a:34:33:22:4d:80:99:24:cb:
a7:1a:52:3b:47:3c:d3:ef:74:91:1d:69:17:8c:f4:aa:72:b7:
1a:86:14:f4:31:f0:3d:c6:01:12:ee:10:12:c5:cc:74:7d:33:
3c:eb:9f:22:fb:c0:30:ae:6f:4d:6c:02:7d:2c:1e:5e:2d:fb:
2c:fe:a1:22:8d:7c:6a:de:56:25:0b:f5:3f:87:48:96:19:6f:
4c:26:ff:cc:24:fa:06:50:dd:0e:ca:37:ee:b1:23:0a:6c:42:
48:8a:3d:ca:c1:e8:3a:30:51:02:3c:d6:c7:f6:1d:0e:59:58:
0d:cf:b7:db:a9:4a:13:13:89:3e:04:bd:18:c9:84:b5:58:d4:
53:84:80:73:9d:b7:55:5d:8c:72:e6:2a:27:d4:7e:96:d1:a6:
ed:3c:c5:3f:61:bc:51:6c:58:45:2b:7e:29:dc:0c:23:17:14:
5a:41:43:70:b8:ca:0e:9b:13:bc:ec:c5:91:ab:b7:bd:10:23:
7f:0c:b1:42:cf:63:71:97:52:19:fa:b6:ad:17:83:eb:c1:a5:
92:4e:c7:e6:6d:45:81:bc:28:26:a0:76:24:8f:14:b3:ad:ad:
b5:22:6d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-fra.rpki-client.org