Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/536C72CCB61B11EC9D8101B25A40D577.roa
File: 536C72CCB61B11EC9D8101B25A40D577.roa (raw, json)
Hash identifier: RkeNGZtwMYP+oFnt0sX7NYJL8GoQLrqdMR7t+t2XqV4=
Subject key identifier: 11:13:A4:6C:B7:FC:40:65:3E:FF:2F:52:BB:A7:CE:14:D4:7A:96:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 12E9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/536C72CCB61B11EC9D8101B25A40D577.roa
Signing time: Thu 07 Apr 2022 02:35:02 +0000
ROA not before: Thu 07 Apr 2022 02:34:58 +0000
ROA not after: Wed 30 Nov 2022 02:34:58 +0000
asID: 131471
IP address blocks: 45.206.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4841 (0x12e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 02:34:58 2022 GMT
Not After : Nov 30 02:34:58 2022 GMT
Subject: CN=624e4dd6-4ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2f:b6:62:b0:56:ca:92:03:ea:2a:9d:74:4e:
61:17:b6:d7:07:c7:35:1e:0b:b5:87:28:ad:bb:10:
f3:d7:19:c0:55:dc:c9:f7:ad:44:72:67:7c:0e:5e:
ec:c1:6e:9d:4e:ad:8c:d7:f9:90:f9:bf:e9:f8:e7:
f1:81:5d:ef:3f:4f:76:ba:62:a8:53:a7:83:1c:8d:
f4:28:8d:ca:77:25:f4:95:79:1a:6a:36:47:f7:73:
65:cd:e2:b4:8c:a1:b1:1f:60:98:56:c5:75:a2:22:
94:89:61:ab:8c:a1:9f:83:8b:59:b7:39:bc:d6:5a:
36:46:a7:b8:b2:87:5b:81:bc:ba:88:1e:ed:3e:06:
e3:d2:15:0b:3f:30:d5:6c:e7:33:3d:8d:2c:7b:7a:
ce:7f:0a:c0:79:d3:ba:05:a4:f0:49:fc:a4:61:00:
67:ad:78:d8:8b:bc:7a:c2:08:bd:68:fb:8b:7f:99:
da:ea:c7:15:e6:d6:6b:d9:39:e2:ed:3f:ad:42:92:
71:4d:55:8c:3b:ca:ba:b8:47:43:b2:b8:4d:fb:45:
df:0d:39:83:75:33:3f:8d:fd:95:61:18:55:eb:79:
d4:4e:64:ce:ef:83:2f:ff:80:c7:12:2e:e1:64:af:
38:21:95:21:d4:7c:54:f5:48:18:89:2a:8e:1b:d9:
50:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:13:A4:6C:B7:FC:40:65:3E:FF:2F:52:BB:A7:CE:14:D4:7A:96:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/536C72CCB61B11EC9D8101B25A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.34.0/24
Signature Algorithm: sha256WithRSAEncryption
31:36:b4:46:64:6b:5c:95:b6:c6:06:32:69:d6:be:f3:36:7c:
97:94:8d:e0:be:d4:60:a8:96:5a:93:9a:5d:72:59:05:26:97:
a8:48:f2:29:8a:c6:35:d7:48:51:77:1e:77:be:37:c3:33:35:
8f:68:71:db:71:51:48:c1:56:eb:2a:50:29:a3:69:cd:af:ab:
40:5e:9e:ef:48:74:b8:34:b3:f9:e6:15:ef:d4:5e:71:ae:57:
c4:40:08:13:3f:e1:d2:f4:da:c4:c1:ce:8d:af:ac:75:05:68:
2b:02:c6:59:2c:fa:31:11:8e:31:a2:44:33:fe:2f:35:96:36:
93:b8:b3:14:83:8d:08:1b:5f:6f:d5:f8:33:cb:96:92:91:06:
ea:0c:a4:ac:5e:ad:43:16:9d:69:74:45:ec:38:51:7e:a4:30:
8d:c7:28:40:da:66:19:cb:3a:5d:e7:bb:74:55:e3:10:0a:40:
78:63:db:30:d9:10:ef:7e:f5:60:c1:4d:9d:ed:40:35:0c:5b:
53:d7:75:73:51:fb:6a:ac:1b:94:07:6c:f1:7a:1c:72:35:2f:
4d:3f:eb:35:b8:79:e2:91:79:23:d9:a4:e5:89:3d:6d:36:a8:
e1:d8:d3:2f:31:3e:c5:29:e8:ae:64:13:cb:f6:0e:dd:0b:c1:
ab:74:98:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-fra.rpki-client.org