Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F8B95A0499C11EFA8C3755A762E951A.roa
File: 3F8B95A0499C11EFA8C3755A762E951A.roa (raw, json)
Hash identifier: s6HU2Y+dO/qPhDDg76Tat80e7FKBTXpkA9i9iNGHgjk=
Subject key identifier: 94:A1:17:69:39:68:CD:90:57:BE:65:F5:56:2A:BA:39:76:82:7D:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F37
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F8B95A0499C11EFA8C3755A762E951A.roa
Signing time: Wed 24 Jul 2024 09:08:10 +0000
ROA not before: Wed 24 Jul 2024 09:08:07 +0000
ROA not after: Thu 01 Aug 2024 09:08:07 +0000
asID: 139805
IP address blocks: 45.195.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40759 (0x9f37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 09:08:07 2024 GMT
Not After : Aug 1 09:08:07 2024 GMT
Subject: CN=66a0c47a-bd83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c3:73:65:f0:6a:fd:f8:60:bf:58:df:48:2d:
5e:d1:9d:de:7f:76:5f:11:7a:dd:b0:70:44:c6:ff:
74:32:0c:d7:23:0a:52:31:e6:dd:16:36:14:f7:02:
1f:79:8f:27:02:49:50:34:1d:3a:f8:3b:c1:5a:52:
68:e6:b4:5b:b2:95:54:3e:68:82:71:ad:dd:33:5c:
f1:17:ce:ec:ab:86:f9:a1:b6:af:aa:d6:e1:0f:fe:
47:ad:0b:f7:88:20:ff:9f:a6:02:4c:bb:63:e7:12:
14:a3:70:f1:96:99:0c:dc:8c:ec:0d:63:d5:15:4f:
0f:90:53:b5:c3:57:91:d3:11:fc:09:9c:a4:9e:46:
c6:3a:8c:67:81:a0:3a:c7:96:a0:5d:c6:29:7f:de:
53:bc:1a:95:84:cd:47:75:f5:b2:63:f0:e3:80:8c:
aa:53:55:eb:1e:94:40:b9:ba:2a:51:26:53:e8:71:
a3:f0:69:49:29:fa:16:3a:be:1c:92:29:15:1c:8b:
fd:b2:3b:d8:69:08:a9:f9:70:94:cc:43:89:b3:20:
e4:15:48:2c:c1:26:97:8c:02:f1:d1:30:69:b7:e8:
a5:d4:f2:3f:37:3b:6d:8a:c7:de:d1:74:67:84:07:
02:d7:00:79:06:71:11:58:9f:e1:c2:55:e6:06:0d:
90:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A1:17:69:39:68:CD:90:57:BE:65:F5:56:2A:BA:39:76:82:7D:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F8B95A0499C11EFA8C3755A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.85.0/24
Signature Algorithm: sha256WithRSAEncryption
04:3e:65:72:b8:f8:5d:fb:f9:ef:e8:56:35:c4:4b:f3:6b:85:
10:bb:38:e3:76:ad:e6:94:c1:66:d3:ab:3c:33:87:6e:20:b8:
c1:d9:2a:67:51:4f:5e:2f:7e:bb:aa:a0:eb:6d:ca:52:db:a7:
28:94:15:f2:d2:3d:3f:99:4c:1c:df:b2:f4:cc:77:58:4f:f2:
42:d2:1f:88:c8:86:3c:6f:ba:ab:1b:49:e0:e3:47:0c:70:7c:
1e:53:07:a2:70:07:2f:31:ee:8c:69:2a:6a:0f:fd:c7:46:4d:
61:f5:ef:02:55:32:8f:c7:98:75:0d:dd:1c:0e:a9:76:10:85:
7f:36:df:a7:da:87:58:3a:19:15:3d:a6:a6:13:b2:95:0a:58:
a1:86:f8:2b:72:45:72:ce:8c:5c:41:6b:a9:50:d9:bc:42:f4:
27:17:a3:44:81:db:a9:f5:6f:90:de:ac:19:32:10:3d:29:2c:
ef:7f:bb:e6:42:9e:0f:eb:c0:fe:94:21:ae:df:51:cc:c7:10:
28:5f:38:7d:7e:63:5b:2c:cd:82:e1:49:fa:fc:be:e4:61:c6:
ec:73:ae:e5:a2:f7:45:ff:b5:77:1f:4d:16:01:40:dd:6a:0e:
88:7b:e8:09:6c:c7:6c:7b:1b:b5:e9:07:fa:09:9e:5f:c5:00:
af:36:42:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 04:03:11 2024 by rpki-client on console-ams.rpki-client.org