Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1391523A018711EFBDBA0952017001B1.roa
File: 1391523A018711EFBDBA0952017001B1.roa (raw, json)
Hash identifier: kYeuRLGo6GKW6teeFrO+2ZddRa1xsoE3UUtO0t9oCZ4=
Subject key identifier: 76:34:1E:6D:31:90:71:47:C1:D0:EA:9E:03:4B:B7:DF:B9:62:21:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8483
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1391523A018711EFBDBA0952017001B1.roa
Signing time: Tue 23 Apr 2024 15:35:13 +0000
ROA not before: Tue 23 Apr 2024 15:35:09 +0000
ROA not after: Thu 02 May 2024 15:35:09 +0000
asID: 138630
IP address blocks: 45.204.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33923 (0x8483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 15:35:09 2024 GMT
Not After : May 2 15:35:09 2024 GMT
Subject: CN=6627d531-bcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:5e:e1:7d:e3:76:6c:7c:b9:55:42:06:66:
25:33:22:88:bf:0f:4a:87:a6:11:a5:2b:74:39:22:
60:b4:58:40:26:64:7a:65:f1:cd:b2:99:c2:43:97:
9c:b0:56:27:9b:dd:26:6e:a8:39:8f:4f:53:db:df:
7e:77:bf:50:5e:53:90:46:d4:87:61:93:d2:e0:3f:
30:75:a8:fa:f9:ed:f1:28:e0:ee:5d:6e:ff:59:a8:
93:f3:98:46:6c:cf:8d:04:7f:08:6d:e8:40:7a:09:
1a:03:7a:bc:8e:21:17:4d:7d:ba:55:76:43:2d:d2:
a2:1c:1a:87:68:aa:6a:80:a2:16:aa:fb:49:8f:b2:
11:70:55:41:ac:09:e7:df:83:3e:6a:75:b7:ab:d8:
8c:4c:79:5a:ce:1a:2d:b8:3e:75:2f:b2:5f:d5:ae:
90:25:66:2d:09:6f:56:1d:d4:10:34:8a:ab:66:59:
84:df:cb:68:e4:66:00:de:4a:95:55:00:31:d2:9c:
8e:b4:f5:35:75:05:0c:ab:19:1a:db:1e:3e:52:c9:
bc:67:4f:b7:dc:85:8f:04:e2:45:c6:8f:58:f8:7a:
c4:ee:ba:6d:75:f0:6c:d5:c2:e9:92:4d:e8:16:36:
a1:c7:d8:f8:59:b8:d5:4a:84:26:fe:05:85:1a:3d:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:34:1E:6D:31:90:71:47:C1:D0:EA:9E:03:4B:B7:DF:B9:62:21:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1391523A018711EFBDBA0952017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.95.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:08:6c:ac:29:93:e3:43:29:2c:01:93:32:72:3d:01:6a:3e:
ef:39:a9:89:ed:b8:e3:bb:e4:f8:4f:34:ac:10:78:98:26:06:
76:58:1a:bd:73:60:bd:44:01:dd:1e:06:d1:b9:ef:ed:f2:c7:
45:61:29:30:cc:c1:59:de:d1:91:7b:fe:f8:03:44:64:35:61:
5f:e6:f1:d1:1c:94:2e:ee:e2:16:ae:7e:39:33:5e:cf:3b:4f:
06:ef:86:94:c2:62:84:6b:93:d6:4a:83:ac:07:3c:f3:77:35:
18:32:a4:46:1e:04:5f:f0:df:e0:26:95:84:8d:40:8c:ba:61:
a8:43:cd:90:d8:6a:f6:b5:ab:af:cb:88:f2:d1:a0:11:08:05:
c8:9d:7f:d8:d2:94:9e:b4:80:4a:fa:e5:1f:d6:6d:f5:35:38:
ac:a3:87:69:a7:14:c2:95:14:8a:18:0a:bc:b2:85:1d:12:22:
5d:6a:fd:a2:d6:3e:ef:95:da:72:26:6d:20:d6:66:3b:03:fa:
75:a3:58:15:64:47:f3:50:a6:23:9c:cd:84:c1:dd:8f:32:6a:
63:ee:43:b4:18:e1:64:85:40:9a:0e:8d:8d:36:90:38:d2:25:
b5:d7:9d:02:63:f5:4e:b7:06:5b:d4:55:c9:e2:b1:92:da:f0:
fa:88:6e:e4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAISDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDIzMTUzNTA5WhcNMjQwNTAyMTUzNTA5WjAYMRYw
FAYDVQQDEw02NjI3ZDUzMS1iY2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1UBe4X3jdmx8uVVCBmYlMyKIvw9Kh6YRpSt0OSJgtFhAJmR6ZfHNspnC
Q5ecsFYnm90mbqg5j09T299+d79QXlOQRtSHYZPS4D8wdaj6+e3xKODuXW7/WaiT
85hGbM+NBH8IbehAegkaA3q8jiEXTX26VXZDLdKiHBqHaKpqgKIWqvtJj7IRcFVB
rAnn34M+anW3q9iMTHlazhotuD51L7Jf1a6QJWYtCW9WHdQQNIqrZlmE38to5GYA
3kqVVQAx0pyOtPU1dQUMqxka2x4+Usm8Z0+33IWPBOJFxo9Y+HrE7rptdfBs1cLp
kk3oFjahx9j4WbjVSoQm/gWFGj1ZewIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHY0
Hm0xkHFHwdDqngNLt9+5YiFRMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMzkxNTIzQTAxODcxMUVGQkRCQTA5NTIwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcxfMA0GCSqGSIb3DQEBCwUA
A4IBAQCOCGysKZPjQyksAZMycj0Baj7vOamJ7bjju+T4TzSsEHiYJgZ2WBq9c2C9
RAHdHgbRue/t8sdFYSkwzMFZ3tGRe/74A0RkNWFf5vHRHJQu7uIWrn45M17PO08G
74aUwmKEa5PWSoOsBzzzdzUYMqRGHgRf8N/gJpWEjUCMumGoQ82Q2Gr2tauvy4jy
0aARCAXInX/Y0pSetIBK+uUf1m31NTiso4dppxTClRSKGAq8soUdEiJdav2i1j7v
ldpyJm0g1mY7A/p1o1gVZEfzUKYjnM2Ewd2PMmpj7kO0GOFkhUCaDo2NNpA40iW1
150CY/VOtwZb1FXJ4rGS2vD6iG7k
-----END CERTIFICATE-----
Generated at Fri May 3 03:52:32 2024 by rpki-client on console-fra.rpki-client.org