Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4358372071A011EF81167664762E951A.roa
File: 4358372071A011EF81167664762E951A.roa (raw, json)
Hash identifier: n3PM8XQn0qCkkJ7Iyc52N3wn59XnaePWYR+qHo7PYYg=
Subject key identifier: 5D:19:6D:7D:03:E9:F2:1E:C8:95:6B:9E:FE:35:76:F6:69:27:8E:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B53C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4358372071A011EF81167664762E951A.roa
Signing time: Fri 13 Sep 2024 07:17:41 +0000
ROA not before: Fri 13 Sep 2024 07:17:38 +0000
ROA not after: Tue 15 Oct 2024 07:17:38 +0000
asID: 50580
IP address blocks: 45.200.148.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46396 (0xb53c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 13 07:17:38 2024 GMT
Not After : Oct 15 07:17:38 2024 GMT
Subject: CN=66e3e715-1ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:45:51:36:e3:7a:e5:3e:30:95:a7:fd:7f:
2d:0c:71:3b:ae:d8:70:22:81:4e:2f:70:17:21:b6:
eb:42:7b:8d:ca:d3:40:f0:29:d6:55:d6:b5:0d:16:
2c:8e:4b:0a:91:8f:3f:3a:0b:9a:b2:5f:52:47:a5:
88:b8:a6:44:c9:0d:e8:0f:7d:b1:b9:c2:8d:27:d2:
f9:91:69:7a:f8:c3:09:c3:a0:8e:33:15:12:7e:61:
4e:78:7f:f9:2b:78:38:bb:69:fb:c8:c6:2a:ad:6a:
33:9d:6c:fe:86:58:e2:f4:ec:3a:2f:c1:a4:a8:f6:
f6:e0:03:6d:1d:6b:92:72:c8:d2:37:06:bb:ef:08:
29:f6:83:5e:e2:ac:be:13:fa:27:db:3e:5a:cf:84:
4d:33:0a:c5:fe:89:bf:0a:a6:64:29:82:53:d6:7f:
a2:fa:76:83:2b:83:d4:c1:e5:32:77:df:a5:55:4c:
c3:05:d8:45:25:98:55:0b:5c:f6:aa:9f:55:b8:b2:
26:43:85:f4:e7:23:a0:91:36:de:90:27:78:77:e6:
78:4d:50:4b:70:2a:3d:a2:76:d7:11:1b:c0:af:56:
6b:47:ae:bd:7b:6e:66:13:62:22:b3:b4:35:57:1e:
ba:52:10:2e:5d:f3:16:ce:cf:83:eb:c7:a0:ad:a2:
43:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:19:6D:7D:03:E9:F2:1E:C8:95:6B:9E:FE:35:76:F6:69:27:8E:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4358372071A011EF81167664762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.148.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:cb:fe:e4:f4:56:0f:32:cd:a1:a2:ed:59:4d:bc:73:71:0e:
f4:75:46:93:b1:8c:2b:35:1d:67:6f:de:ec:5a:1f:b4:e1:34:
36:dc:c6:00:99:36:d5:d8:03:d4:85:64:31:cf:94:8a:e6:c3:
2b:f5:56:64:9a:eb:c8:a7:2b:a3:02:f5:f9:82:5f:9a:62:78:
ad:d1:01:d2:a3:53:98:bd:24:e3:56:ac:2e:27:38:a6:f3:11:
66:3c:bf:f2:21:c9:36:6b:5f:f8:38:d8:ea:54:47:92:66:9c:
73:a1:ef:59:3e:21:a2:09:b7:8a:4a:a5:35:71:c5:02:6c:24:
02:e7:da:7e:c0:55:b1:fc:d0:a1:c5:81:6f:7f:67:c3:0f:b6:
73:2d:a4:cb:15:10:23:c9:2c:e5:2d:81:88:21:9d:88:2f:31:
46:99:bf:45:dd:3d:15:fb:42:ce:29:9c:6f:34:32:45:67:8b:
24:6c:86:bc:cc:d1:6f:be:37:2c:fb:72:79:1f:31:ff:fa:5d:
9f:ca:22:7b:45:46:74:05:af:fb:60:cc:7b:c2:a9:ab:e0:51:
d4:88:23:89:4e:56:63:3a:de:21:5e:ee:76:90:93:3e:c4:0e:
44:d1:41:3b:59:23:bb:3b:51:78:4e:c9:8f:78:2f:10:98:90:
82:1e:60:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 09:37:17 2024 by rpki-client on console-ams.rpki-client.org