Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31A83B3445A811EFB9A27D7C762E951A.roa
File: 31A83B3445A811EFB9A27D7C762E951A.roa (raw, json)
Hash identifier: spbVW1lkMGQTVSwb0fiGK9zkTc3vFMcC/mdK2TVQqsM=
Subject key identifier: 9B:C7:1B:13:82:22:BB:E5:58:AC:8B:49:8C:7A:BB:78:2A:F0:5F:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9DA2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31A83B3445A811EFB9A27D7C762E951A.roa
Signing time: Fri 19 Jul 2024 08:23:36 +0000
ROA not before: Fri 19 Jul 2024 08:23:33 +0000
ROA not after: Mon 29 Jul 2024 08:23:33 +0000
asID: 142062
IP address blocks: 45.204.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40354 (0x9da2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 08:23:33 2024 GMT
Not After : Jul 29 08:23:33 2024 GMT
Subject: CN=669a2288-cf62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:ae:15:d0:0d:fe:33:7a:91:4b:c2:fc:4d:
ef:be:78:13:da:32:f5:19:04:3b:ce:87:44:6d:0c:
a2:35:97:15:5d:15:05:19:bc:9c:30:5b:aa:7c:9d:
ab:8b:e5:ce:f2:ea:6e:a3:85:56:a3:a2:59:86:8f:
e7:c6:8e:7c:b9:f3:49:3d:24:e2:30:a1:f3:ec:d4:
7d:f8:43:cd:64:66:61:45:37:35:f5:7c:e2:7c:cf:
5e:d2:98:cc:42:49:3e:76:8d:94:0d:cf:8f:3b:3f:
4a:ca:62:9a:8a:d1:8a:b3:1b:83:09:79:65:ed:f7:
03:d8:62:97:66:96:58:fd:52:20:b9:8e:6d:9d:a7:
68:20:23:d4:96:3a:bd:6a:c1:f6:3e:62:5b:2b:4c:
28:0f:cc:44:36:9c:de:56:53:58:75:6e:87:0c:4c:
90:4c:ee:ed:1d:cc:dc:33:a3:ca:82:e6:49:7a:e0:
5f:03:89:e4:2a:63:76:e6:26:bf:7f:b5:50:29:94:
e6:dd:e8:5c:49:23:72:79:15:a5:3c:d9:0e:29:25:
a4:bf:b9:b4:3d:b8:2c:af:42:41:74:b2:77:ef:b3:
99:12:f1:95:02:90:a8:93:4f:80:70:85:cd:59:65:
ba:b4:a5:14:1a:e6:65:34:56:10:d2:82:c2:70:6a:
53:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C7:1B:13:82:22:BB:E5:58:AC:8B:49:8C:7A:BB:78:2A:F0:5F:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31A83B3445A811EFB9A27D7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.89.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:c8:82:77:fc:d3:ee:0e:cc:6d:c8:16:24:e2:a1:98:0a:8c:
4c:06:9b:37:d8:9f:ae:83:52:e9:06:3b:e5:92:ee:5b:60:b8:
0e:46:d1:97:c0:c8:db:18:08:ee:4c:88:fd:27:4e:d9:5a:2a:
3e:17:26:d2:a2:f1:6d:90:78:1c:0f:82:d5:16:30:1c:25:2d:
56:1b:d4:00:01:69:dd:b2:51:2a:2a:fb:0c:ff:39:89:a4:8b:
70:d4:6e:22:51:c7:54:25:59:f4:36:91:09:9f:a3:c1:09:60:
47:0e:fc:5f:95:43:4b:a5:19:8e:81:09:60:8e:bf:5b:9f:f6:
15:fd:c9:49:36:48:05:0d:25:46:b9:ab:65:97:af:09:95:fd:
01:56:ee:98:60:48:53:9b:ef:0c:cd:3d:b6:55:a2:dc:a9:53:
d5:1f:9b:7c:8d:bc:88:62:57:ab:64:54:98:51:28:7a:f2:95:
38:f4:f6:03:8a:bb:67:c7:46:09:c6:3d:67:dd:01:e0:f8:c9:
24:a3:0e:07:42:9d:92:a3:2f:c2:70:94:db:49:d8:e5:4d:94:
4a:6d:e5:74:3a:90:85:3d:e5:86:e0:c9:42:57:4e:6a:5a:09:
fa:ba:83:e7:d4:0e:8b:ec:08:d3:9e:3d:0e:db:fe:ee:63:36:
2e:28:7b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 10:02:42 2024 by rpki-client on console-fra.rpki-client.org