Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35EF596C499911EFA70C8B43762E951A.roa
File: 35EF596C499911EFA70C8B43762E951A.roa (raw, json)
Hash identifier: TPAZprH2lI/o0tXeVxgQXLooQkEcRoBrpHLNKKQYDL8=
Subject key identifier: 74:E8:45:F8:DC:40:F6:2C:95:8A:70:2C:23:05:F8:69:7E:42:00:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F29
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35EF596C499911EFA70C8B43762E951A.roa
Signing time: Wed 24 Jul 2024 08:46:26 +0000
ROA not before: Wed 24 Jul 2024 08:46:22 +0000
ROA not after: Sun 18 Aug 2024 08:46:22 +0000
asID: 138456
IP address blocks: 45.194.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40745 (0x9f29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:46:22 2024 GMT
Not After : Aug 18 08:46:22 2024 GMT
Subject: CN=66a0bf61-30ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:37:41:6b:14:1f:ad:56:36:31:ea:79:7c:
26:c7:37:83:84:b3:68:99:d5:51:e9:0e:36:0f:0a:
08:f4:52:24:74:9a:98:3c:69:b6:86:bd:e1:95:0d:
11:93:69:06:92:5f:0c:48:21:7d:c3:91:60:7a:9b:
4b:88:1b:f3:21:32:13:ee:3a:03:a1:1c:32:05:f9:
c1:80:71:48:5b:07:81:aa:a4:02:d3:4c:3f:f2:05:
35:09:d0:7a:88:c6:fb:41:5c:53:09:9c:73:90:e4:
37:af:94:54:ed:bc:3c:1b:34:7f:f7:d9:02:00:fe:
f1:52:be:0c:c6:da:a2:a4:c1:8c:d4:42:d5:d0:45:
31:47:df:df:52:65:3d:e0:13:59:8c:a7:b5:64:7c:
60:8c:e5:6f:58:d7:55:22:0d:1c:0d:48:1a:b6:c5:
5e:30:86:c3:b1:2d:7d:f1:85:62:bd:93:08:1f:07:
43:f3:3d:a4:33:dc:34:6b:ca:36:1a:b8:88:f9:08:
88:15:e8:a5:5b:ab:ae:a5:2c:aa:21:20:5e:46:a5:
ef:e6:88:f6:db:d7:92:68:56:6d:51:df:4f:7e:8f:
b6:17:df:99:ad:78:80:ce:af:41:1d:21:4d:14:b0:
8b:a0:05:9a:0d:1d:3b:c0:ce:4a:a2:16:33:f6:9f:
c0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E8:45:F8:DC:40:F6:2C:95:8A:70:2C:23:05:F8:69:7E:42:00:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35EF596C499911EFA70C8B43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.123.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:b0:41:06:bc:5b:d1:55:65:73:23:3f:6c:7d:aa:42:a1:c0:
6f:df:cd:80:48:53:05:2d:54:31:da:43:f3:4e:0e:57:d6:10:
48:fb:48:05:3a:38:0f:b0:44:db:75:13:93:3a:2e:02:ec:42:
34:0f:d2:d5:c8:68:a4:03:3f:dd:15:fd:de:ba:bf:cd:bb:98:
1f:53:12:ab:43:d9:2c:03:16:ed:d0:2a:08:29:75:2e:47:d7:
ec:a0:44:83:0c:52:28:f4:40:cb:be:25:8c:18:4a:4d:34:31:
66:56:cf:7f:08:e4:62:34:3c:f0:14:bb:8d:ca:60:62:1a:b2:
b0:fe:e6:36:bc:aa:87:54:1a:01:b3:b5:60:71:ae:fc:3b:ba:
dd:b7:9e:9d:09:ab:1a:5b:d0:34:4e:9a:55:13:34:41:ac:f5:
b5:2d:a7:44:4d:b8:e3:32:99:2c:f5:d1:bd:21:43:73:ee:2c:
98:8c:27:55:55:e0:ec:51:c0:ad:17:90:cb:70:c2:b7:d6:84:
3f:ec:b5:b0:0f:99:33:0d:be:b0:06:79:89:00:86:c2:a6:74:
27:b9:74:98:8b:0f:dc:92:78:c6:92:d5:8a:e2:bf:f1:48:ff:
ea:76:a3:3a:92:c1:95:2c:76:40:d9:f0:8b:8e:a8:78:75:bc:
2b:85:58:ff
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ8pMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI0MDg0NjIyWhcNMjQwODE4MDg0NjIyWjAYMRYw
FAYDVQQDEw02NmEwYmY2MS0zMGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAovA3QWsUH61WNjHqeXwmxzeDhLNomdVR6Q42DwoI9FIkdJqYPGm2hr3h
lQ0Rk2kGkl8MSCF9w5FgeptLiBvzITIT7joDoRwyBfnBgHFIWweBqqQC00w/8gU1
CdB6iMb7QVxTCZxzkOQ3r5RU7bw8GzR/99kCAP7xUr4MxtqipMGM1ELV0EUxR9/f
UmU94BNZjKe1ZHxgjOVvWNdVIg0cDUgatsVeMIbDsS198YVivZMIHwdD8z2kM9w0
a8o2GriI+QiIFeilW6uupSyqISBeRqXv5oj229eSaFZtUd9Pfo+2F9+ZrXiAzq9B
HSFNFLCLoAWaDR07wM5KohYz9p/AeQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHTo
RfjcQPYslYpwLCMF+Gl+QgDDMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zNUVGNTk2QzQ5OTkxMUVGQTcwQzhCNDM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcJ7MA0GCSqGSIb3DQEBCwUA
A4IBAQA6sEEGvFvRVWVzIz9sfapCocBv382ASFMFLVQx2kPzTg5X1hBI+0gFOjgP
sETbdROTOi4C7EI0D9LVyGikAz/dFf3eur/Nu5gfUxKrQ9ksAxbt0CoIKXUuR9fs
oESDDFIo9EDLviWMGEpNNDFmVs9/CORiNDzwFLuNymBiGrKw/uY2vKqHVBoBs7Vg
ca78O7rdt56dCasaW9A0TppVEzRBrPW1LadETbjjMpks9dG9IUNz7iyYjCdVVeDs
UcCtF5DLcMK31oQ/7LWwD5kzDb6wBnmJAIbCpnQnuXSYiw/cknjGktWK4r/xSP/q
dqM6ksGVLHZA2fCLjqh4dbwrhVj/
-----END CERTIFICATE-----
Generated at Mon Aug 19 05:25:49 2024 by rpki-client on console-fra.rpki-client.org