Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33775636784E11ECA4E760C65A40D577.roa
File: 33775636784E11ECA4E760C65A40D577.roa (raw, json)
Hash identifier: 9jWhatjKZBs3jWMGcC9ap3lfNPHKR9glgmcB/WJihFc=
Subject key identifier: 97:0F:C2:2F:CA:66:F9:3C:FD:87:AF:16:86:8E:AD:6E:BE:76:52:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 119D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33775636784E11ECA4E760C65A40D577.roa
Signing time: Tue 18 Jan 2022 11:03:01 +0000
ROA not before: Tue 18 Jan 2022 11:02:57 +0000
ROA not after: Sun 30 Oct 2022 11:02:57 +0000
asID: 136525
IP address blocks: 45.206.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4509 (0x119d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 11:02:57 2022 GMT
Not After : Oct 30 11:02:57 2022 GMT
Subject: CN=61e69e65-cc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:13:ae:f8:8b:27:bf:f1:32:c7:05:8d:64:
24:b8:b9:cb:9f:46:ad:67:2c:51:b5:37:98:58:11:
9f:55:5e:23:16:bf:97:c9:d6:24:3f:ec:dd:18:3c:
1b:5a:3c:3f:0b:e0:61:2c:87:53:5f:04:3f:2b:ed:
66:51:26:43:58:e2:d1:66:0f:51:64:b7:42:ff:f5:
eb:e4:6e:e0:f1:95:9f:9c:fd:3e:15:f4:86:fb:6e:
d0:a1:58:69:64:2b:39:3c:a5:a5:46:93:58:12:0d:
73:fd:91:21:ab:cf:bb:53:59:a5:79:c7:70:f4:99:
f4:c3:6b:dc:1a:8b:b8:52:1d:29:47:66:65:4c:f1:
fb:63:07:89:1d:56:aa:e8:68:39:f2:e2:ee:0c:d0:
b6:e3:60:e0:9d:54:ab:bf:4c:bb:bc:48:b3:94:7f:
a8:28:76:8d:ae:53:48:b8:eb:5f:1d:d2:18:2a:8f:
8f:36:94:ca:1a:74:81:9b:3f:02:d2:d3:78:6c:4b:
02:13:06:f9:3c:26:c1:d9:98:a9:67:05:d8:80:96:
0b:39:d8:92:fb:36:00:68:3e:59:2d:cc:58:d1:ee:
8e:cd:bf:23:f4:05:a6:a3:f6:5b:26:e6:b1:a4:89:
d5:1b:0d:ae:c2:c4:f8:2a:ae:21:f6:7c:52:c6:72:
d0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0F:C2:2F:CA:66:F9:3C:FD:87:AF:16:86:8E:AD:6E:BE:76:52:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33775636784E11ECA4E760C65A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.109.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:e0:19:c8:1d:5e:44:db:30:25:cf:a5:6b:3d:51:2f:04:f5:
38:63:7c:90:90:ff:e0:41:1f:79:a1:c9:95:ea:80:82:22:c9:
38:4c:2a:38:05:ff:67:cd:dd:d8:ca:ea:58:eb:9d:ee:d9:55:
40:9f:79:8a:ec:d4:98:7e:e4:69:aa:e6:a5:53:e4:0c:ff:de:
d6:91:25:5d:e6:80:4e:40:42:e0:66:f1:46:f3:ea:54:49:f3:
6d:cc:0c:b4:d5:d1:ea:e6:84:1a:fe:99:fd:58:de:63:85:50:
39:72:93:57:74:2c:5d:55:ab:b4:27:c8:92:55:83:10:6a:c5:
4b:63:9c:7b:15:f5:0c:7f:bf:d6:cc:e1:7e:cf:a7:96:8d:c6:
25:f5:62:32:bd:20:a7:37:75:cb:49:5a:c5:f6:35:58:38:c0:
4a:bc:7f:56:57:fb:5e:5d:28:56:55:58:e3:45:cb:58:c4:d1:
72:80:7b:b8:f4:aa:70:11:29:f7:50:2c:75:56:24:b6:51:f5:
99:52:ea:b0:83:34:83:fb:97:16:51:54:72:61:27:46:97:14:
4b:a5:1d:b4:14:fd:1f:1f:e5:8b:dc:57:0e:39:e6:a8:b7:66:
0e:77:b6:36:12:0e:60:78:78:84:3f:a0:37:2c:15:f3:01:46:
60:a0:40:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-ams.rpki-client.org