Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B688F7445A411EFA8E51061762E951A.roa
File: 3B688F7445A411EFA8E51061762E951A.roa (raw, json)
Hash identifier: 7G/LhDSlC+D2v3ZYDerlojzS2VPqPxjRUDcEaTvZH0c=
Subject key identifier: 21:E0:F7:47:D4:C2:FD:CB:71:4F:B1:CB:ED:27:1C:6D:DB:4F:E3:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9D80
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B688F7445A411EFA8E51061762E951A.roa
Signing time: Fri 19 Jul 2024 07:55:14 +0000
ROA not before: Fri 19 Jul 2024 07:55:11 +0000
ROA not after: Mon 29 Jul 2024 07:55:11 +0000
asID: 136950
IP address blocks: 45.204.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40320 (0x9d80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 07:55:11 2024 GMT
Not After : Jul 29 07:55:11 2024 GMT
Subject: CN=669a1be2-5e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:83:df:a3:a9:da:e6:14:bf:6d:58:8a:0b:03:
92:f6:d3:d7:53:f9:30:2b:34:22:e2:70:6e:a4:18:
12:64:00:75:5c:0f:9b:0a:5d:d3:d6:ea:e9:15:d4:
49:39:b4:09:4d:a4:78:8c:85:28:ea:de:e3:90:e3:
fb:b9:f8:64:43:cf:62:04:cf:2d:33:ca:2b:a7:32:
74:85:7f:6e:26:a4:de:97:c7:1e:87:3c:31:a9:8e:
da:65:54:e8:27:8b:d8:1f:ff:9a:07:00:0d:af:29:
49:3d:84:83:ba:f9:49:52:0d:ce:85:f1:09:0d:e9:
20:d7:ab:a1:36:83:4e:a4:6f:bd:60:76:5e:42:fa:
09:4a:39:99:c6:81:d8:ae:81:31:e0:b5:1d:b0:c6:
57:eb:b3:b5:a5:61:cd:8d:b6:1a:92:57:f1:35:61:
49:b7:af:a6:9d:da:a0:a5:e8:bf:a0:e1:50:76:f7:
10:21:62:f9:72:a7:9a:94:e5:77:aa:2e:61:3e:67:
61:cf:3a:64:cf:42:b1:0f:31:a9:d1:e5:26:a3:11:
a3:b8:74:2d:a8:7c:9e:76:ca:03:64:4f:1c:74:f6:
7e:df:18:b5:b6:fd:bb:f5:79:4c:bc:0d:1f:dd:96:
7d:dc:d5:f5:82:c1:ec:72:71:a6:e8:d4:d8:aa:2e:
51:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E0:F7:47:D4:C2:FD:CB:71:4F:B1:CB:ED:27:1C:6D:DB:4F:E3:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B688F7445A411EFA8E51061762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.84.0/24
Signature Algorithm: sha256WithRSAEncryption
34:6f:09:95:99:b0:7a:cb:47:25:39:3f:20:31:e3:b6:17:b9:
81:fc:23:1c:b8:62:a4:90:e3:5a:dd:81:46:4f:5c:84:4c:dd:
f4:2e:92:f0:65:53:2e:b0:c5:3a:02:e8:d5:cc:41:2f:56:e4:
49:d8:ea:c6:f7:03:d3:39:87:ff:26:66:38:09:fd:23:53:68:
c7:a2:5e:38:23:f4:8b:1a:c8:63:58:5a:4f:41:35:b3:8a:eb:
fa:55:b8:01:04:4d:d2:36:3b:33:a0:cc:eb:f5:d8:19:2d:03:
76:46:5b:eb:10:23:05:0d:87:5b:a0:68:64:ff:2c:a8:4b:c5:
cb:cf:d1:c1:95:e6:e9:d5:0d:1f:98:24:27:1d:c0:07:b0:91:
60:dc:dd:50:46:1d:ed:04:58:e6:e9:f5:cc:13:54:84:fa:1f:
5f:a8:af:66:3f:66:69:67:49:52:32:f8:5b:ff:75:10:66:fd:
59:50:b8:0c:33:21:49:5e:6a:ee:89:85:41:e8:d2:21:04:fe:
be:3a:2f:1c:19:73:30:17:1a:db:69:2c:ad:05:bf:80:5b:df:
1a:ba:73:22:e8:71:66:77:23:92:bc:5a:95:cb:f5:44:f9:6d:
f6:06:e6:29:a6:0f:bb:f0:4b:c0:1e:0f:da:55:07:b8:1c:d4:
3d:d7:b2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 10:02:42 2024 by rpki-client on console-fra.rpki-client.org