Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36ED00B2074711EDACFA77C6F1222468.roa
File: 36ED00B2074711EDACFA77C6F1222468.roa (raw, json)
Hash identifier: h9J6khqkAFrX+wSHT48SXXaoLeX1jlRSIIko7aw6w1k=
Subject key identifier: D9:DE:3E:30:67:3B:FE:FA:85:0A:D6:81:D0:43:A5:C1:67:51:71:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 158A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36ED00B2074711EDACFA77C6F1222468.roa
Signing time: Tue 19 Jul 2022 09:43:16 +0000
ROA not before: Tue 19 Jul 2022 09:43:13 +0000
ROA not after: Tue 11 Jul 2023 09:43:13 +0000
asID: 138630
IP address blocks: 45.204.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5514 (0x158a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 09:43:13 2022 GMT
Not After : Jul 11 09:43:13 2023 GMT
Subject: CN=62d67cb4-e257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:7a:37:98:d2:8e:fc:50:d3:69:f5:b9:c6:
e0:9c:32:73:7d:e9:57:af:73:db:16:39:4d:35:16:
ad:9e:80:87:6d:81:e2:d9:ca:b9:63:49:84:ff:b7:
77:e7:6f:56:e6:42:66:4c:6d:eb:6d:24:c1:14:53:
01:eb:65:13:7d:3d:8e:c7:b7:b2:83:a9:e9:95:3d:
6e:5a:58:a6:fe:fb:2b:ee:55:13:4f:6b:46:80:56:
5b:e6:c8:32:19:a6:2f:60:0b:51:ce:cf:a7:df:04:
54:6e:ea:a2:c7:2e:99:2b:e5:dd:bd:a0:42:d6:a2:
5a:df:77:50:0e:85:73:41:23:1f:3f:26:ec:ac:a2:
28:fb:af:dd:69:57:c0:34:6a:e2:b1:bf:87:0d:b7:
eb:00:17:da:b7:de:25:6e:1c:c5:3d:22:a5:94:b0:
2d:4c:d3:47:24:c1:b0:1d:7f:17:27:14:95:86:81:
61:b2:35:82:8b:ac:be:28:73:fb:d9:51:d7:bb:50:
9b:3e:df:f1:da:cd:1d:68:23:3d:e7:65:b9:30:a9:
66:e7:c1:28:6b:fa:7d:65:a4:8d:d1:5e:cd:46:6e:
5d:c6:4c:7c:a9:9b:2f:aa:17:b6:7d:99:24:c6:00:
1e:88:b5:7a:57:c2:25:3e:ed:27:37:38:14:b6:dd:
9e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DE:3E:30:67:3B:FE:FA:85:0A:D6:81:D0:43:A5:C1:67:51:71:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36ED00B2074711EDACFA77C6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.88.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:98:b4:bc:4d:f3:a5:ab:52:f1:a8:f6:f7:5e:fe:7c:48:3b:
d2:5b:d3:58:ed:02:2b:4c:9c:9e:73:9b:04:fb:1f:e9:e3:70:
04:f8:bf:01:0c:67:2b:35:8d:bf:76:94:91:fa:86:f2:b5:14:
51:28:a8:3e:73:10:90:ac:14:b9:c7:37:89:6b:4f:bc:ec:9a:
32:72:9a:f5:46:ad:78:6e:b5:7f:a8:9d:bf:83:6d:1b:03:c8:
eb:f6:91:00:0e:62:14:82:03:69:dc:79:52:b3:07:f7:f0:48:
0a:4c:fc:5d:2f:0a:26:03:5b:22:44:cb:07:e5:b2:23:2b:d3:
73:52:55:b0:81:58:2a:cd:71:bf:04:7c:68:98:00:6f:11:62:
79:38:43:30:db:d3:2c:02:ae:8c:d4:f4:be:01:e0:f8:c3:df:
31:06:ff:6e:74:cf:a2:2f:09:ba:54:14:7b:52:68:84:ac:63:
53:c3:47:8a:b0:a3:13:55:09:a6:79:09:75:fe:dd:06:44:de:
48:db:94:fd:a1:4e:72:26:45:e9:d4:4d:8e:e8:ce:af:03:48:
bb:f2:a0:c1:fa:34:bc:2d:17:c0:7e:96:f3:f7:74:c2:fe:7d:
10:1f:95:ad:01:a6:e9:89:b7:af:23:89:76:d4:f6:60:30:d7:
00:54:d0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:18 2023 by rpki-client on console-fra.rpki-client.org