Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B3E56C2039111EFB3124CFC007001B1.roa
File: 4B3E56C2039111EFB3124CFC007001B1.roa (raw, json)
Hash identifier: t8D7Xa0t0QSauahpcnXcbg1iVqjhZoRwTYcHiv/GmRY=
Subject key identifier: 4A:E4:6F:6E:9A:3A:51:DD:3B:89:13:93:C3:74:96:97:26:40:3E:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 861B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B3E56C2039111EFB3124CFC007001B1.roa
Signing time: Fri 26 Apr 2024 05:53:24 +0000
ROA not before: Fri 26 Apr 2024 05:53:21 +0000
ROA not after: Sun 05 May 2024 05:53:21 +0000
asID: 139646
IP address blocks: 45.201.248.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34331 (0x861b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 05:53:21 2024 GMT
Not After : May 5 05:53:21 2024 GMT
Subject: CN=662b4154-5d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ba:ec:ee:9e:4b:29:bc:c5:67:98:f6:f9:12:
3f:ad:f9:a3:30:34:d8:f4:e5:7e:6c:19:3c:7e:2e:
fc:cd:e9:85:04:48:b8:ca:1b:92:ac:3d:a1:03:61:
eb:a2:a9:4c:62:39:58:43:33:7e:84:cb:7a:a2:ed:
b4:51:75:07:92:1a:d0:32:1c:bf:8e:fd:79:04:0e:
64:24:40:59:d9:9d:34:b1:7a:46:50:e1:8d:13:89:
d6:79:3a:b2:ac:96:8e:dc:27:ca:e9:9b:82:80:33:
32:5e:f2:92:76:e5:2a:08:18:f7:74:b7:8f:35:b0:
15:9f:a7:45:d1:c6:e3:e3:02:75:f7:4b:d5:62:b0:
bf:9e:84:9f:77:e7:b1:b6:fb:57:eb:c4:e2:64:27:
8a:bd:e0:f1:f0:c4:8f:6b:d5:3e:f2:fb:f8:8e:89:
75:68:48:6a:69:61:38:b8:ed:30:31:7e:05:67:6f:
9f:98:58:c8:0b:92:8a:57:b3:77:f4:64:25:54:98:
1f:63:40:f1:07:2f:26:ed:97:10:15:66:c9:28:cc:
0a:91:4f:47:2a:ba:8b:e5:63:e8:31:36:5b:c7:8e:
31:1f:dc:ff:d1:9c:fb:2e:1b:08:8d:c7:a7:43:15:
80:b2:b2:0a:eb:0d:bb:3e:b9:10:50:e2:92:1e:3d:
64:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E4:6F:6E:9A:3A:51:DD:3B:89:13:93:C3:74:96:97:26:40:3E:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B3E56C2039111EFB3124CFC007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.248.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:ec:dc:e0:85:a4:56:fb:b1:39:3e:3f:f7:62:3c:e6:6e:ae:
5f:58:53:01:fb:ef:68:e8:e1:f9:77:1e:f7:b0:32:dd:b1:d2:
ce:40:9a:36:dc:80:6f:73:cc:65:be:ed:d9:8c:fd:45:e7:10:
24:ff:42:5d:19:b7:86:b1:c7:86:60:bd:d3:53:3a:76:e8:74:
16:1f:0f:ec:54:1b:da:9b:e0:05:25:02:8b:72:85:5d:14:91:
a7:e8:75:2f:8c:91:e4:da:a4:8f:e0:1b:4a:fb:f7:d9:2c:27:
15:67:38:7f:77:99:ee:f8:9d:6c:64:12:24:65:bf:f5:c9:ea:
6b:41:3d:06:5d:33:d5:ae:8d:1f:05:90:87:0a:a8:b1:83:9f:
f3:2c:eb:a0:e1:d5:54:8f:50:fa:a0:94:ab:45:77:87:d8:17:
6a:7a:5b:1f:79:c9:13:eb:33:5d:66:4d:04:61:ff:e0:9d:66:
f4:c9:f0:72:dc:47:ee:26:3d:27:2c:00:14:2b:38:32:d8:cd:
59:43:0b:8c:ad:4b:a4:3a:03:22:f7:7f:5d:57:bd:1e:2e:28:
dd:67:3c:ed:17:44:a2:46:50:57:7f:18:58:dd:d2:4c:14:b3:
d5:0f:2d:e7:b3:ac:d6:da:65:df:8a:85:2d:96:60:a0:76:c6:
46:0c:e2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:29:25 2024 by rpki-client on console-fra.rpki-client.org