Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23FF4DEC018811EF88916A5C017001B1.roa
File: 23FF4DEC018811EF88916A5C017001B1.roa (raw, json)
Hash identifier: R9pxVmQIkobb448yd+JHPDS3mFj6FZCGzHo7pDyKtpg=
Subject key identifier: C4:A7:A3:23:9E:F6:71:76:44:98:C0:C7:37:87:F0:EB:DD:2A:B3:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8495
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23FF4DEC018811EF88916A5C017001B1.roa
Signing time: Tue 23 Apr 2024 15:42:50 +0000
ROA not before: Tue 23 Apr 2024 15:42:47 +0000
ROA not after: Thu 02 May 2024 15:42:47 +0000
asID: 136950
IP address blocks: 45.204.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33941 (0x8495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 15:42:47 2024 GMT
Not After : May 2 15:42:47 2024 GMT
Subject: CN=6627d6fa-c1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:39:7b:db:c2:8a:1a:7d:ea:33:f0:fd:0c:
b5:6d:de:db:f2:be:d3:85:3e:cb:44:61:75:1f:11:
6b:d8:11:ea:cb:1f:8f:be:25:7a:1b:6f:44:78:ee:
da:01:f3:21:1a:f0:42:c9:d4:38:1a:4c:53:d7:f3:
2c:57:d8:fe:4e:ab:b6:8e:5c:43:df:d6:9d:78:2c:
6d:7f:a7:4d:cf:2e:a9:ad:ac:1d:87:ac:48:fb:62:
8b:3a:ae:4b:d9:02:7a:bb:79:01:70:c3:40:66:1f:
63:f2:e2:aa:50:1b:6e:e9:9b:20:e1:e1:a5:fc:01:
e9:0b:8b:49:65:f5:d8:9e:15:03:a5:6d:85:d1:13:
f4:14:e2:32:73:6b:da:b6:a8:4f:8c:e2:0b:69:39:
95:db:d2:69:a3:d6:26:bd:7a:3d:1c:76:06:84:a3:
c3:1a:fd:59:ac:1a:d8:67:31:5d:87:3d:9e:d6:3c:
e2:1a:3b:13:0e:af:14:97:7b:22:da:d4:76:3c:65:
af:14:1a:9d:e1:95:4f:b7:7d:a0:92:f5:39:9c:6f:
4b:72:bd:cd:04:bd:ab:10:18:c0:8c:00:cb:59:08:
93:31:62:2a:0c:ad:29:af:bf:27:31:bf:3e:ce:79:
28:6f:60:f2:06:11:a8:1b:49:73:ec:e4:ad:f4:ce:
b6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A7:A3:23:9E:F6:71:76:44:98:C0:C7:37:87:F0:EB:DD:2A:B3:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23FF4DEC018811EF88916A5C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.85.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:67:4f:35:23:36:0f:a3:31:03:8a:5a:24:90:d8:e9:c8:29:
f6:74:48:17:28:05:ee:f5:0d:c0:83:91:21:84:de:01:da:74:
07:77:e3:35:7a:fb:54:bb:c3:6d:89:f4:9e:83:0a:d0:81:dd:
b7:44:96:b9:cc:ac:43:fc:4c:d4:3c:24:a4:d8:12:4a:b0:c4:
19:7b:0f:1e:da:08:da:c4:70:06:d8:07:6c:e0:ca:36:68:20:
d4:62:2d:24:ce:ea:65:14:73:ff:9d:4f:a0:73:97:91:e7:09:
3b:d7:c5:09:e6:bd:44:c1:ed:da:25:ae:c5:da:83:c7:3e:13:
2f:bc:91:a7:6a:fb:12:f3:c3:be:bc:b0:6c:58:e6:9a:dc:f4:
77:39:5a:79:8d:9a:5b:c0:ef:96:07:e6:44:a0:31:17:1f:d0:
76:7e:fb:18:69:f0:8d:b8:3e:da:e3:10:06:ff:32:1f:99:d2:
28:29:53:da:de:e3:85:9f:ef:8e:8a:f5:38:e1:98:cf:8e:5a:
58:c6:1f:da:2a:c2:e7:af:31:94:09:af:b9:61:17:a1:27:68:
0b:5a:03:24:e0:79:4f:44:a5:cc:b1:3f:86:21:81:ef:1d:ec:
31:9d:80:35:a5:35:fa:12:a3:d7:b1:99:b6:d2:cc:de:1b:f4:
80:26:55:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:45:05 2024 by rpki-client on console-ams.rpki-client.org