Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/285B34944A5A11EF95233B64762E951A.roa
File: 285B34944A5A11EF95233B64762E951A.roa (raw, json)
Hash identifier: 9gUyrD1MA2lR1IlfO93jTTaxkYFl0WRXahVLCaA5Uhw=
Subject key identifier: 89:32:F2:99:B9:5C:9E:C3:5E:ED:7E:61:96:5A:89:B1:00:EA:B6:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9FBD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/285B34944A5A11EF95233B64762E951A.roa
Signing time: Thu 25 Jul 2024 07:47:36 +0000
ROA not before: Thu 25 Jul 2024 07:47:32 +0000
ROA not after: Sat 03 Aug 2024 07:47:32 +0000
asID: 174
IP address blocks: 45.196.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40893 (0x9fbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 07:47:32 2024 GMT
Not After : Aug 3 07:47:32 2024 GMT
Subject: CN=66a20318-7c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6c:99:dd:c3:df:a9:d1:c3:eb:23:7b:53:a0:
5c:b2:c6:7f:11:3c:54:5d:ca:e5:d7:90:1e:19:56:
a1:89:b8:78:f7:77:10:74:0d:f7:b6:18:eb:11:cb:
2a:7c:6e:37:06:22:6a:ee:a4:9c:77:79:0e:52:fe:
b0:93:49:ce:94:d9:3e:30:c2:b5:b1:55:42:67:1d:
9b:27:ff:f0:10:13:82:67:6d:e2:7f:03:d0:ec:41:
c5:5d:aa:c3:aa:b6:b6:c3:6c:8e:70:b8:f4:66:85:
95:32:6a:6a:a8:41:b6:d1:05:35:02:59:2b:65:98:
3f:4e:de:42:94:40:0a:ea:5a:af:87:24:bd:db:75:
42:25:e6:ca:c2:db:a6:9b:2e:06:4b:64:c4:44:d1:
a8:d8:da:e3:4f:e1:d9:23:de:b5:0f:68:67:4f:d6:
d0:c2:2f:20:ea:81:0d:a6:62:db:a6:39:33:4b:29:
97:89:c4:7a:a9:9e:60:4f:a1:da:17:ab:db:9c:ef:
8c:f3:13:91:63:c8:21:6b:61:2e:5d:6b:f6:c0:00:
37:45:0f:9a:0d:6b:b9:ce:26:b7:a2:04:9b:64:b6:
a4:0c:c5:52:da:92:18:9c:6e:4c:f3:2c:ab:0c:8d:
83:6f:61:67:13:8f:5d:90:9d:9d:ad:8c:31:a6:4b:
ee:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:32:F2:99:B9:5C:9E:C3:5E:ED:7E:61:96:5A:89:B1:00:EA:B6:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/285B34944A5A11EF95233B64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.153.0/24
Signature Algorithm: sha256WithRSAEncryption
28:c7:8c:3c:9f:2e:2f:b3:16:2b:d9:cd:0c:01:bd:56:a1:fd:
0d:89:d3:b0:b2:b4:00:2a:f0:ad:8a:3d:d1:3f:34:c1:f2:48:
eb:21:cf:4c:e8:68:2b:40:dc:07:4b:a9:a9:3d:b2:e1:bd:a6:
3c:09:fc:6a:96:ed:7e:ef:98:b0:51:0b:ad:df:f3:1f:ee:71:
4f:8b:eb:c4:f9:29:64:5e:ec:c7:6b:b3:bc:c2:a4:e7:66:ec:
ce:cd:f6:0d:3b:fc:71:d4:39:29:d5:ee:06:2b:24:0e:30:33:
41:9b:b4:b8:28:7a:f6:fa:9d:85:55:88:5c:81:c3:26:6a:07:
40:85:a1:e1:c9:76:08:27:51:d0:8e:d5:2a:bc:d3:a4:7f:a4:
89:1e:d7:e5:41:d0:32:68:9c:c6:80:c1:fd:2e:7c:32:ba:a0:
a6:4f:e7:b5:ed:20:fa:81:88:8b:19:6a:d7:d3:67:40:71:54:
62:02:fc:bf:f0:3d:7e:ef:33:56:8f:54:9a:eb:91:cb:c9:c0:
1f:ed:be:30:d0:60:ef:c3:99:9c:c3:03:97:a2:f4:73:02:bb:
80:62:9e:e5:fd:e1:fd:1c:d7:79:52:6d:5d:60:57:06:f4:1a:
68:4d:93:40:83:ee:78:b4:9c:64:5f:ec:6b:db:13:aa:da:a9:
bd:80:d0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:52 2024 by rpki-client on console-ams.rpki-client.org