Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45F63B5C8D6111EBA8C9645CF8AEA228.roa
File: 45F63B5C8D6111EBA8C9645CF8AEA228.roa (raw, json)
Hash identifier: DW6wuuA24roKg9hv2R8OIfYgTead1lXryqwD4rCp1XY=
Subject key identifier: 84:46:B7:9C:C3:50:8B:A4:5F:93:6D:7A:D6:53:A0:3E:E5:A6:58:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0535
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45F63B5C8D6111EBA8C9645CF8AEA228.roa
Signing time: Thu 25 Mar 2021 11:57:29 +0000
ROA not before: Thu 25 Mar 2021 11:57:23 +0000
ROA not after: Sun 19 Jun 2022 11:57:23 +0000
asID: 60609
IP address blocks: 45.200.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1333 (0x535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 25 11:57:23 2021 GMT
Not After : Jun 19 11:57:23 2022 GMT
Subject: CN=605c7aa9-aa20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7f:88:1e:fd:56:cf:37:f4:fd:27:13:ca:0e:
6f:ec:a5:2f:0c:47:6f:fb:10:10:2e:db:79:90:58:
fc:00:5b:7d:89:50:8b:66:e0:93:7e:8d:76:70:89:
4b:71:eb:f3:32:76:2f:44:1a:6c:fc:df:8f:b4:58:
d1:83:04:90:b6:8a:48:26:69:e8:fd:8f:8b:53:6f:
18:ec:a4:a1:a1:09:53:79:73:bc:a9:76:6a:43:fb:
d6:f6:cd:15:95:05:6d:92:0e:e6:f1:83:1c:43:82:
4b:68:26:13:8e:b5:52:43:69:10:58:6c:4a:17:d5:
35:a0:56:11:0d:fc:bd:65:32:66:7c:da:81:65:78:
22:8a:f0:f8:a9:b2:b5:ad:32:ec:cb:c5:10:88:10:
cd:f0:ee:44:91:fe:22:52:69:d4:49:de:cb:76:9c:
e7:eb:e2:64:9a:9e:99:7c:01:13:1b:f8:fd:9a:74:
4d:27:66:88:f0:38:17:1a:89:d4:51:57:58:1a:79:
13:97:58:57:5a:00:29:2a:41:2b:3e:da:46:77:40:
28:00:25:de:b2:ea:99:32:19:e3:0b:98:07:51:c9:
9a:ad:58:46:01:4d:45:44:50:b0:64:d1:70:1c:50:
cd:73:ca:9a:57:03:5d:07:fc:ab:42:0e:ee:8f:97:
a0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:46:B7:9C:C3:50:8B:A4:5F:93:6D:7A:D6:53:A0:3E:E5:A6:58:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45F63B5C8D6111EBA8C9645CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.136.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:39:c3:dd:0d:f1:bd:a1:d0:07:b8:b2:8f:33:25:20:a4:d1:
64:9e:67:bc:43:6f:e2:b0:f4:9a:2a:3f:12:e7:4c:12:4b:8d:
3a:fd:71:b2:40:58:eb:97:92:0b:f3:d3:83:3d:4b:07:76:6d:
97:7d:58:fb:77:dd:65:73:2e:26:e9:22:7b:ea:eb:de:d9:6f:
22:9a:dc:72:d8:7f:4d:ae:fe:c8:15:5d:0c:6c:fd:eb:07:b5:
3a:fa:45:c4:80:8b:07:0e:71:50:4e:b9:7a:03:27:98:ce:13:
b6:e9:b3:8f:a4:b9:7b:ca:d0:77:44:97:b3:bf:86:30:da:42:
fb:65:67:58:2a:54:f8:66:ac:83:34:88:84:db:7f:10:15:6c:
7a:7b:a2:be:c4:8e:81:67:87:c5:10:12:b1:55:da:8c:6c:9f:
39:f3:b8:f5:13:c2:2c:a4:a1:22:81:c8:6f:3b:fc:30:3d:b5:
98:8a:18:cb:69:38:d3:68:99:b3:6c:87:fc:f3:bd:d9:31:f5:
6e:d8:ca:32:56:3c:c7:84:49:f3:c7:ce:41:d9:ab:fc:ea:d4:
35:f3:df:30:6c:e1:73:d3:47:ec:fd:30:01:9e:fc:a3:37:39:
70:9f:c9:8e:8a:83:7b:a8:0f:2a:7d:d3:82:08:45:ba:e9:d0:
d8:c7:47:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:17 2023 by rpki-client on console-ams.rpki-client.org