Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/428B74848BA211EBBEBFB27FF8AEA228.roa
File: 428B74848BA211EBBEBFB27FF8AEA228.roa (raw, json)
Hash identifier: qGPHhztmKawaMdMQ4GgNfQAsIzIvgYs7kcMn6kB8bpw=
Subject key identifier: 30:74:92:0B:22:F4:49:B6:83:4A:E4:0A:44:5F:11:6B:BD:42:94:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 052C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/428B74848BA211EBBEBFB27FF8AEA228.roa
Signing time: Tue 23 Mar 2021 06:37:38 +0000
ROA not before: Tue 23 Mar 2021 06:37:33 +0000
ROA not after: Mon 07 Mar 2022 06:37:33 +0000
asID: 137962
IP address blocks: 45.200.8.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1324 (0x52c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 23 06:37:33 2021 GMT
Not After : Mar 7 06:37:33 2022 GMT
Subject: CN=60598cb2-e91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:ae:3c:f0:d5:ff:1a:32:cc:6a:62:27:7d:
af:20:60:be:7d:8c:92:78:51:0f:17:da:33:95:ec:
8c:e6:a5:af:a5:61:95:7c:9c:6f:72:8d:59:14:c5:
d8:93:8f:0e:85:ec:61:30:97:a4:ed:f4:4c:9f:59:
88:54:87:de:b8:e9:1b:72:73:30:6f:e4:0f:0c:6a:
a7:9e:d0:14:89:42:69:7b:20:a0:bd:34:d1:f7:ab:
19:d3:cb:87:1a:ba:b3:76:f5:97:11:ed:2e:03:f4:
fe:6f:fd:03:57:83:20:c5:c5:06:f9:8c:82:76:bc:
e9:aa:0b:3f:90:8c:c0:3c:a6:75:36:0a:28:eb:8e:
25:fe:0f:b7:ac:8b:62:db:e7:e3:a1:d4:fe:9f:c4:
80:d1:7c:ee:22:26:a4:a6:7c:e1:ec:60:e1:11:cd:
f3:e6:3d:5a:bc:f7:4f:0e:22:53:2c:1c:4d:6b:77:
81:b6:91:f5:87:0a:89:cc:c4:88:0f:c9:c9:9a:9e:
d4:b8:79:55:19:e4:a5:cf:54:b5:ba:bd:1d:a5:11:
3c:2d:71:ca:fc:82:ad:49:9e:b2:71:ae:f9:fa:fe:
8a:73:96:f2:46:e2:a0:25:01:02:5e:14:5c:48:fe:
b9:20:cd:cc:93:c6:2c:fe:93:4b:be:b1:df:a3:1e:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:74:92:0B:22:F4:49:B6:83:4A:E4:0A:44:5F:11:6B:BD:42:94:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/428B74848BA211EBBEBFB27FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.8.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:67:ff:c7:f0:02:4f:ba:b0:aa:52:a8:1c:92:41:36:0d:00:
0a:61:ea:cd:72:a0:46:94:f0:bd:88:62:68:a3:1f:2d:92:ba:
df:09:48:9d:f0:e4:a2:00:15:70:33:f9:74:91:8f:fa:16:3f:
9c:40:27:aa:a8:e3:5e:80:15:f6:f2:68:e2:a4:e7:dc:7f:6a:
45:5d:1e:f5:a2:a3:c7:63:77:71:33:4a:10:92:50:90:6b:3d:
ee:4e:73:cf:c2:d7:75:d6:06:9a:35:33:82:5c:3a:ad:fa:5c:
67:d3:64:e2:1b:99:59:12:27:bc:97:46:48:37:f0:5d:a8:ef:
2e:50:7f:75:5f:cf:d3:b9:f9:7b:e6:a4:d0:e3:f8:ef:65:f4:
e8:cb:23:a9:1a:5a:0b:c4:65:87:78:a6:c6:61:3b:fd:3f:ce:
49:07:5e:33:71:d0:60:a1:d2:12:56:71:b9:48:84:80:c5:2d:
b8:47:72:7e:95:bc:83:bf:ad:9f:05:9d:77:4a:58:e1:04:d6:
2f:76:a4:9e:51:3f:68:f0:3b:10:a4:4f:51:ec:80:df:88:6a:
5a:69:d8:4b:9e:c7:e6:82:dd:bb:d6:49:ba:aa:57:bf:59:b9:
7d:26:9d:36:b0:b1:26:a6:3d:12:0a:4a:81:42:0e:e9:e2:bb:
29:8e:a7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-fra.rpki-client.org