Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23EB990E095B11ED9E0DD6DDF1222468.roa
File: 23EB990E095B11ED9E0DD6DDF1222468.roa (raw, json)
Hash identifier: Lxz1C25IcSNFQhpMxc/k+GP2yxWZ4OpPBq6vYGZT9IQ=
Subject key identifier: 40:A4:03:C1:93:75:39:F4:44:5A:51:6A:E1:27:BB:0A:B3:30:E4:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 15AE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23EB990E095B11ED9E0DD6DDF1222468.roa
Signing time: Fri 22 Jul 2022 01:10:57 +0000
ROA not before: Fri 22 Jul 2022 01:10:51 +0000
ROA not after: Tue 11 Jul 2023 01:10:51 +0000
asID: 136778
IP address blocks: 45.204.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5550 (0x15ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 01:10:51 2022 GMT
Not After : Jul 11 01:10:51 2023 GMT
Subject: CN=62d9f921-1819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3e:e8:6f:8c:b9:ef:3a:6f:0e:46:3f:7f:75:
b0:6b:e7:94:37:3c:66:36:c7:08:9e:b0:ac:fe:60:
aa:3d:f6:4d:32:62:14:67:5f:ee:d3:45:6e:56:ef:
cc:a1:ec:bb:dd:79:8b:e3:13:89:6e:cb:00:86:fe:
77:0c:c4:bd:de:fe:cc:41:68:92:d5:89:bb:7a:76:
d8:a5:25:b7:03:b3:7d:b1:81:63:ac:89:39:ca:93:
42:09:ad:07:8e:65:e0:b1:9f:85:3e:5c:cd:f7:77:
c0:72:80:33:08:fc:f7:fc:36:f6:f6:0f:0b:17:b2:
6b:af:01:6a:15:1a:b1:4d:e5:13:60:a0:37:01:f3:
a6:4a:f2:a6:18:c9:07:ea:b1:85:41:f8:ac:ae:bb:
8d:66:46:d7:d6:ab:f8:ed:02:b3:04:19:43:56:e8:
a0:95:c9:67:ce:ad:4e:32:3f:f8:35:55:cf:a8:60:
2f:bc:23:29:72:53:97:ae:79:b6:66:5d:b4:a8:08:
38:8e:cb:c1:19:b1:c4:af:34:65:64:db:49:1f:bf:
10:92:d3:77:12:f4:fd:9e:b1:e7:ea:52:53:9f:c7:
58:a6:37:af:78:71:e6:e0:b9:f6:5e:62:18:7a:d2:
7a:66:91:1b:d4:00:28:98:a7:ab:af:06:07:1f:c7:
51:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A4:03:C1:93:75:39:F4:44:5A:51:6A:E1:27:BB:0A:B3:30:E4:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23EB990E095B11ED9E0DD6DDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.82.0/24
Signature Algorithm: sha256WithRSAEncryption
85:4e:c8:5c:a7:1d:9b:39:6d:46:da:a4:4b:ba:19:aa:23:57:
64:5c:40:52:22:e3:5a:a3:23:bf:42:77:fb:2d:7e:10:4a:9b:
11:d0:27:7f:e4:74:02:a0:7d:1b:ee:72:9b:9b:67:c1:a1:1c:
14:17:60:b6:ce:dc:62:05:ff:1a:3f:18:ae:ea:55:0e:f0:b4:
a5:ff:e2:68:39:1f:77:41:b0:73:c3:c3:b1:aa:bd:f3:dd:58:
01:b4:46:b1:3e:23:e2:56:eb:a2:19:bf:9c:7d:c5:90:8d:5b:
a4:4e:24:f8:ca:49:49:d1:43:f8:d0:8e:33:b3:78:8e:76:1b:
5b:f0:c1:38:6a:27:9b:10:20:2a:33:98:84:e4:f7:92:b8:d6:
36:10:2a:be:ae:e3:e3:a7:f9:5e:38:1c:c2:55:da:b6:a8:b0:
e1:c2:a0:34:ab:38:e4:eb:68:10:38:b2:81:f1:2e:20:7c:09:
00:1f:00:b7:48:ea:db:78:c3:1f:bf:01:9d:00:2f:59:8d:20:
13:88:fb:20:84:fe:af:01:8b:5f:68:f0:ec:15:f1:94:37:4f:
12:ec:8a:55:6c:96:d2:d0:ad:db:40:b7:41:c6:1a:fb:0e:0d:
ab:a7:d1:8d:fb:e8:f5:22:f9:2f:71:2c:ee:ff:a7:73:df:a2:
9e:b6:a6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-fra.rpki-client.org