Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3006611C36E111ECB517506ED8A014CE.roa
File: 3006611C36E111ECB517506ED8A014CE.roa (raw, json)
Hash identifier: NIHwr8J+ReHClZ0U/UtNUAbi8U4ucFcfjVHqWimpG0A=
Subject key identifier: B0:F2:DC:32:E2:47:34:12:31:CA:EE:38:BA:D1:25:EF:0F:CE:55:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0BA7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3006611C36E111ECB517506ED8A014CE.roa
Signing time: Wed 27 Oct 2021 04:48:54 +0000
ROA not before: Wed 27 Oct 2021 04:48:51 +0000
ROA not after: Thu 27 Oct 2022 04:48:51 +0000
asID: 58895
IP address blocks: 45.206.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2983 (0xba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 04:48:51 2021 GMT
Not After : Oct 27 04:48:51 2022 GMT
Subject: CN=6178da36-565b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a2:c2:c5:94:3c:3e:29:7a:bc:af:24:13:02:
1a:d6:38:44:04:fc:dd:4d:29:68:9b:b2:2e:2c:d0:
5c:f1:46:a0:3c:f7:64:e3:26:4b:d6:09:15:7a:fa:
30:1e:4b:b4:36:15:7f:4f:ff:01:77:ef:c8:c0:f8:
76:bf:14:37:a1:3e:cf:c1:8c:e2:8d:fc:75:8f:e2:
0b:3d:02:17:db:55:56:de:05:bd:f3:42:b6:bc:ae:
d0:80:be:e8:0a:26:fd:02:12:86:40:03:e3:3a:c4:
55:35:fb:66:6f:06:d9:11:4d:06:ee:cb:31:87:2f:
ee:74:57:1e:ad:2c:d7:3a:45:04:25:f5:db:cc:eb:
af:1f:ae:10:06:06:44:58:41:4c:a1:3d:dd:de:42:
30:b7:fd:da:47:6b:dc:51:e6:ce:77:f7:39:cd:43:
82:73:4b:b6:e9:a6:47:c7:66:bc:7c:3d:2b:14:30:
42:a5:34:f6:5a:3b:88:69:51:33:d8:c8:0a:48:8c:
d8:d7:4e:7a:b4:0e:1c:25:73:a3:4b:0a:26:90:65:
49:58:b3:79:63:9e:41:25:36:0a:e2:6a:69:26:22:
30:cf:55:55:aa:da:24:a8:64:31:c5:db:ab:b6:47:
76:0d:89:d9:b4:f7:8a:5b:79:d6:f3:7c:05:2e:b8:
5b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F2:DC:32:E2:47:34:12:31:CA:EE:38:BA:D1:25:EF:0F:CE:55:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3006611C36E111ECB517506ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.128.0/24
Signature Algorithm: sha256WithRSAEncryption
89:3f:36:8e:85:bd:9b:17:25:d8:02:f3:eb:d6:19:3c:ed:a1:
ee:c4:6b:d4:68:ee:14:de:9e:34:2f:4a:08:a2:4a:10:ef:b6:
e0:3e:60:6e:3a:39:33:57:cd:90:d5:a6:c3:06:3a:de:76:0a:
22:47:46:c6:c3:39:d9:89:ad:3e:2f:f1:51:65:8f:62:64:03:
57:bd:51:59:f1:56:16:df:58:a6:06:ed:1b:e2:6f:c7:53:c0:
69:ca:9a:94:68:53:7d:6d:5f:45:88:93:6d:6b:d7:dd:49:ae:
3c:2c:30:cc:a3:cc:9b:3b:25:70:b2:e8:24:3f:97:46:c7:ea:
47:15:8f:e0:9a:e8:0a:f1:05:b8:d2:54:40:11:c2:d5:b0:7a:
63:de:6c:05:63:86:f5:80:84:15:7b:21:15:c7:6b:e0:4d:02:
ce:29:9f:25:39:a2:40:5a:15:1e:c0:03:9e:41:fd:47:e8:b1:
a9:ab:e1:5b:c1:a2:ca:15:9c:dd:88:48:61:ec:c8:04:c5:e7:
c9:d6:b2:b1:05:65:f0:2e:43:df:6d:e3:0a:bd:33:73:27:2f:
c6:33:e2:ac:c8:1b:60:f7:a6:f8:d1:dd:c3:e3:36:2e:bf:b0:
a4:ec:3d:44:70:bd:56:e0:95:9d:60:dd:e3:e5:e9:01:5f:e5:
80:f2:21:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-fra.rpki-client.org