Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3547233835AE11EDB3C871E5F1222468.roa
File: 3547233835AE11EDB3C871E5F1222468.roa (raw, json)
Hash identifier: nBvuGhdga3Ob+t8zU4ScQro8ceZpaN7cQ1YIrLAM+j0=
Subject key identifier: B7:F1:3A:40:3E:63:8D:F4:EB:75:00:3F:FB:D2:7C:95:AC:99:E6:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1802
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3547233835AE11EDB3C871E5F1222468.roa
Signing time: Fri 16 Sep 2022 10:56:25 +0000
ROA not before: Fri 16 Sep 2022 10:56:22 +0000
ROA not after: Wed 20 Sep 2023 10:56:22 +0000
asID: 136907
IP address blocks: 45.203.40.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6146 (0x1802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 16 10:56:22 2022 GMT
Not After : Sep 20 10:56:22 2023 GMT
Subject: CN=63245659-c7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:93:a9:a6:66:11:78:18:ce:15:29:b2:63:ca:
75:6e:07:b3:cd:b2:bf:d3:c1:43:b4:7f:68:12:49:
00:c7:21:4c:56:bb:43:b2:63:aa:a9:a8:20:14:9b:
90:63:9d:a0:a1:7a:08:0a:3f:3d:9f:f5:e0:bd:d9:
8c:83:84:e6:e5:d4:81:d6:e0:69:28:04:69:0a:89:
fc:27:c6:fd:38:42:43:3f:0c:77:8d:12:90:c6:2a:
14:13:1a:f0:33:2c:a8:9d:89:5d:d8:27:be:b5:5d:
7c:99:63:91:d0:6e:d7:4c:ee:b6:f3:f4:52:15:df:
75:dc:e3:d3:52:8a:34:30:77:10:3c:6c:0f:57:de:
50:39:03:79:56:4a:67:33:7c:38:83:46:fd:0f:c0:
f9:6a:8d:fc:2a:2b:ba:a2:db:84:88:35:85:ce:e2:
20:cb:ed:ab:a6:4f:97:d7:b0:16:74:47:ac:90:9d:
b6:d1:43:1f:97:92:0e:cc:b4:05:81:c7:4f:7f:16:
12:ec:ae:a3:17:54:37:f5:a0:54:03:de:46:ea:6f:
7d:5d:a0:82:57:c7:24:cd:11:27:7c:64:96:c9:03:
17:1a:2f:5d:eb:14:49:a3:d2:d7:41:58:99:f8:63:
97:b1:0f:de:81:51:c8:ff:21:02:af:d0:ba:af:a2:
6d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F1:3A:40:3E:63:8D:F4:EB:75:00:3F:FB:D2:7C:95:AC:99:E6:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3547233835AE11EDB3C871E5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.40.0/21
Signature Algorithm: sha256WithRSAEncryption
04:90:26:26:ba:c8:82:07:d5:99:be:a4:41:c3:f8:b7:66:64:
14:f8:43:b7:fa:c8:31:22:11:32:a3:a4:14:08:b0:54:8a:b0:
af:33:65:b9:2c:fa:73:3c:77:14:76:86:11:c0:a5:35:db:b2:
28:ed:47:32:54:fa:37:f9:03:58:0a:80:4f:da:67:63:e2:2f:
36:e5:2e:a5:2f:09:5c:96:9c:e4:02:2e:19:ec:1b:a5:2d:d2:
ea:3e:79:fb:7d:da:bd:cb:5b:f0:d8:c8:c5:d5:55:bd:01:9f:
65:84:49:c1:77:74:6b:39:02:84:56:fc:95:6b:98:2d:3f:ba:
80:f8:61:49:d7:c1:8d:bf:2f:eb:a1:4c:9d:3a:57:99:83:e1:
60:9d:9b:01:a3:76:d3:e4:67:7f:61:a3:b7:c8:c9:db:b9:d6:
b2:74:cb:d1:4e:ff:44:7f:16:fb:24:2c:6a:40:d6:8a:77:cd:
fc:ba:2c:79:3c:e6:13:37:92:5b:cf:f4:0d:50:e0:e0:e9:b5:
b8:46:0b:4f:0f:26:88:7d:f4:d5:46:5c:82:17:26:80:64:f3:
28:ba:29:b5:9a:e9:44:8e:d5:50:5d:8c:cb:11:b7:ac:b0:78:
99:71:d4:04:71:df:42:31:ab:1c:33:76:4b:05:9c:8d:e2:4b:
6b:b0:4e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 01:16:31 2023 by rpki-client on console-fra.rpki-client.org