Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F20528A074711EDBF5A67C6F1222468.roa
File: 2F20528A074711EDBF5A67C6F1222468.roa (raw, json)
Hash identifier: D9BA2+3PY6at+JX9E1g0Kprub9OP0nbtQgwUYELX+ao=
Subject key identifier: DF:08:B7:6A:73:AD:99:5C:CC:D1:AA:30:78:43:10:B3:73:56:2E:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1588
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F20528A074711EDBF5A67C6F1222468.roa
Signing time: Tue 19 Jul 2022 09:43:03 +0000
ROA not before: Tue 19 Jul 2022 09:43:00 +0000
ROA not after: Tue 11 Jul 2023 09:43:00 +0000
asID: 138630
IP address blocks: 45.204.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5512 (0x1588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 09:43:00 2022 GMT
Not After : Jul 11 09:43:00 2023 GMT
Subject: CN=62d67ca7-ea31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:84:39:c0:ba:87:51:6a:66:ff:e2:26:0b:
4b:ec:2c:fb:bd:a9:62:5c:6e:08:83:1a:95:6e:6c:
d3:b5:2d:87:1c:65:ce:7c:79:5b:0a:cb:16:5a:a4:
f3:70:7a:1b:11:59:61:95:d5:98:c0:3c:8b:8f:b7:
fc:9f:98:2f:bf:1a:06:f8:b1:e2:19:06:e6:00:14:
89:2b:7f:8c:6c:d5:ab:2b:c9:f3:ba:64:63:77:7a:
e0:33:41:f2:77:ac:60:17:13:f7:c3:66:56:9b:ed:
b2:ab:9c:25:3c:20:7c:4f:76:5d:5e:49:18:8f:2a:
3d:eb:cb:ca:27:c0:49:b4:23:3f:3d:85:9e:42:bc:
7b:5d:cf:70:99:34:e6:99:d8:a9:84:99:ed:9a:2a:
0d:54:ae:17:3c:f8:e4:e0:c2:24:6d:04:db:81:d4:
c4:46:55:6e:ab:8c:54:79:05:3c:6b:61:e1:c6:dc:
1c:c5:1c:60:8d:13:3e:af:c0:47:e8:b5:f3:44:e5:
f0:d2:a0:94:4b:0e:0a:71:dd:30:23:4f:ef:8e:c8:
e9:be:cc:c3:03:55:b6:39:e2:c8:54:ac:05:66:84:
6e:5b:57:90:6c:6d:be:dd:60:58:ab:78:c2:5d:ae:
49:5d:4d:aa:b2:8a:fa:93:0c:10:29:65:0a:be:25:
73:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:08:B7:6A:73:AD:99:5C:CC:D1:AA:30:78:43:10:B3:73:56:2E:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F20528A074711EDBF5A67C6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.87.0/24
Signature Algorithm: sha256WithRSAEncryption
98:33:b3:70:c0:68:cf:f9:15:57:de:08:6a:9b:78:ff:a5:c0:
e4:74:82:32:c6:f0:07:e4:81:8b:b5:43:b0:a9:25:dc:af:c9:
2c:20:7f:74:10:c4:76:99:f1:c1:05:46:52:31:58:1c:c6:08:
90:ec:b7:cd:5e:e7:67:49:2a:46:4d:60:23:18:9c:32:c0:32:
cb:a8:30:75:b6:7e:c0:ea:f6:70:e6:65:93:29:f7:1f:0c:b6:
16:6e:72:9a:50:ff:15:48:5b:19:4b:22:a1:15:8a:8e:da:d5:
dd:e1:7d:0a:bf:46:63:56:54:e0:62:2f:5f:bc:3b:2d:fc:7b:
8b:9e:06:25:b9:46:05:03:1c:e0:76:ef:f9:ab:1d:54:13:44:
d1:c1:92:29:9d:c5:76:89:13:c1:36:c2:15:e5:db:66:e9:3e:
6f:16:c6:27:c5:f1:32:31:40:89:90:47:65:df:6e:3c:ab:0d:
a0:d2:6e:aa:97:de:3d:ae:15:75:59:76:2c:fe:7e:81:f5:5e:
fc:1b:6b:1a:27:a7:8b:8f:58:05:36:6f:c7:b3:01:fa:16:2b:
d7:f0:02:f0:a2:e3:2a:0e:d9:b8:d4:64:20:f8:cc:e3:4d:92:
b5:bd:fc:d6:b4:1d:fa:a3:b2:15:bc:ff:4d:9e:13:54:f3:d9:
7e:98:ef:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-fra.rpki-client.org