Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BBD40FC435D11EFA858695F762E951A.roa
File: 4BBD40FC435D11EFA858695F762E951A.roa (raw, json)
Hash identifier: ZCeX/V4Vy8HBarpMcBAaaRWuPaPWKqT2Hxv4LZ9Ampo=
Subject key identifier: 7E:EE:DB:5D:95:09:25:2D:41:5A:CE:2E:99:8F:E8:DA:15:A3:A1:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9CC3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BBD40FC435D11EFA858695F762E951A.roa
Signing time: Tue 16 Jul 2024 10:22:25 +0000
ROA not before: Tue 16 Jul 2024 10:22:22 +0000
ROA not after: Mon 12 Aug 2024 10:22:22 +0000
asID: 398823
IP address blocks: 45.202.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40131 (0x9cc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 10:22:22 2024 GMT
Not After : Aug 12 10:22:22 2024 GMT
Subject: CN=669649e1-5f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:14:a4:f9:a0:29:64:d6:73:bb:b4:42:73:1d:
43:35:f3:d0:1a:8a:8a:86:47:30:d9:0f:34:0d:75:
59:b7:85:b1:c9:96:68:2e:b1:c9:fe:54:99:f0:34:
a7:e2:9a:20:fa:e3:a7:bd:0a:07:5a:03:31:81:3e:
7d:a9:3d:f9:4f:ea:24:c7:ad:31:f1:b1:0e:32:d4:
de:f1:22:04:2e:f2:78:e5:b9:8d:6e:d7:3a:21:57:
e8:07:19:b8:ba:54:be:45:81:af:cf:a1:b1:a6:41:
3f:5b:76:1e:d8:d0:8d:eb:98:43:52:38:14:5b:02:
21:9d:e8:d5:4c:6a:b5:cf:32:b5:73:70:d0:b0:be:
f4:6a:e4:9e:b4:a0:e0:70:43:e4:ae:8f:bd:be:55:
11:2d:a2:6b:17:30:78:6c:72:0e:d0:9d:58:6d:48:
43:2c:06:9e:aa:db:ac:d5:1d:13:0b:08:c7:68:a1:
dc:ae:ae:a7:38:34:19:cc:6e:52:c5:d2:1a:00:ea:
62:3b:e3:09:7c:e2:e5:c3:b3:3c:a4:48:c7:09:b1:
4c:ef:0f:e4:fa:9c:d7:79:3c:1e:a6:bc:d2:ef:12:
29:85:33:0b:0d:86:87:50:d2:2c:53:b1:e0:32:cb:
58:7f:09:c2:b5:5b:46:09:48:6b:3b:d6:e8:9a:ac:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EE:DB:5D:95:09:25:2D:41:5A:CE:2E:99:8F:E8:DA:15:A3:A1:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BBD40FC435D11EFA858695F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.224.0/19
Signature Algorithm: sha256WithRSAEncryption
42:d3:0a:d9:00:96:dd:9b:5c:8c:53:b5:2e:1d:4d:2f:d2:11:
1f:e1:82:c1:bd:67:cb:6b:5d:cb:50:36:7d:37:ff:01:ec:8f:
d8:4d:26:25:8b:8e:43:47:cf:e8:07:71:dc:b7:90:d4:a3:e6:
af:1d:54:33:27:ad:99:cd:eb:2c:54:9e:e2:41:6b:23:4f:f4:
07:cc:0d:25:e1:e2:2e:1e:35:70:f6:de:2a:de:b4:b6:fc:4a:
f2:bc:3f:78:4b:b0:54:c7:dc:27:b9:2f:fb:4d:4d:fe:20:c3:
8e:ba:d7:a4:95:8b:65:52:de:5b:30:ea:0d:40:d8:77:b3:c1:
6d:b9:4b:fa:15:92:fd:b0:77:f0:88:b6:5a:86:81:ea:69:f9:
46:05:ad:f6:1c:f8:c7:71:e5:f6:14:79:37:43:3b:c2:53:27:
84:ab:a0:46:97:e1:bc:69:0c:c9:ff:42:ce:f6:fb:87:e8:87:
95:e9:64:de:3d:ba:da:28:3f:e4:85:cc:b3:ed:f7:69:30:90:
6d:d9:a2:41:07:f1:bc:27:68:c4:af:02:27:01:ef:b1:88:02:
26:ef:6c:2e:4f:5f:05:9c:ff:d3:a3:34:6c:aa:ce:03:6e:c2:
24:58:b6:2a:a0:00:9a:da:74:1b:d0:56:f2:e7:71:00:8e:42:
fd:8c:1b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 03:10:46 2024 by rpki-client on console-fra.rpki-client.org