Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55307C98499911EF9403C943762E951A.roa
File: 55307C98499911EF9403C943762E951A.roa (raw, json)
Hash identifier: DU8BPbIPFf0pJ0456lkjDYJiB0vc51g7zbJ0yLRpAAw=
Subject key identifier: 79:E1:E4:5C:AC:C4:43:B4:EC:3C:1C:D0:85:20:39:A7:F0:78:E7:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F2B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55307C98499911EF9403C943762E951A.roa
Signing time: Wed 24 Jul 2024 08:47:18 +0000
ROA not before: Wed 24 Jul 2024 08:47:15 +0000
ROA not after: Sun 18 Aug 2024 08:47:15 +0000
asID: 138456
IP address blocks: 45.194.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40747 (0x9f2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:47:15 2024 GMT
Not After : Aug 18 08:47:15 2024 GMT
Subject: CN=66a0bf96-6238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a4:8d:49:26:a8:d7:90:4a:c6:96:75:fb:7c:
4a:79:66:46:3b:4e:92:0c:48:df:01:12:76:a0:7b:
f9:d3:e4:83:92:42:ea:01:dd:fc:cb:fe:fe:66:e5:
7f:99:e3:fa:9f:23:3d:20:14:7a:0f:13:6d:10:02:
d9:10:cb:a3:8a:56:8a:1b:be:cb:e4:24:23:f7:2f:
a3:b6:e4:e0:b8:06:da:9c:51:e5:3a:ba:96:c8:02:
fa:d8:2a:e9:a1:24:ee:38:e6:00:1d:59:33:e6:ae:
ef:00:de:b3:8b:64:11:bd:0d:fd:8f:f3:be:58:9e:
42:8a:f2:6d:a6:f5:00:c1:5f:f3:86:65:3d:88:25:
d1:5a:0a:a0:db:ba:4c:91:39:bb:8e:19:52:71:d4:
f7:62:42:11:85:25:77:f4:72:b6:85:a5:08:7f:3f:
6c:02:ee:76:e0:05:f0:02:87:83:a3:9f:76:c0:65:
b7:49:a5:2a:d7:35:a2:c7:52:0d:10:29:36:c2:a4:
7b:6a:4a:97:b0:06:05:71:41:6d:40:52:bf:38:9f:
05:a7:f7:0e:b7:f6:87:77:b9:0b:6a:86:d3:15:27:
de:a4:a9:52:65:9d:04:cb:5f:af:08:6e:af:52:dd:
97:fa:8f:27:59:db:0c:aa:79:8d:4c:aa:c1:62:c2:
fa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E1:E4:5C:AC:C4:43:B4:EC:3C:1C:D0:85:20:39:A7:F0:78:E7:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55307C98499911EF9403C943762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.96.0/24
Signature Algorithm: sha256WithRSAEncryption
69:75:ba:09:c6:d1:d5:5b:0c:e5:e9:49:bf:b6:bc:b6:a5:26:
27:b0:b8:25:c4:03:0d:97:9f:d5:c3:26:5f:49:28:1a:df:12:
4f:f1:ce:99:00:fb:74:49:92:7c:b1:b9:3e:26:4f:d8:78:2b:
cc:70:53:18:29:cd:4c:d0:02:2d:c4:df:53:89:f1:5d:53:9f:
bc:60:8f:29:8a:93:b9:e7:a2:ec:1f:b7:ba:37:24:90:6c:0e:
82:b5:6c:ab:e3:26:c1:66:2b:f6:b4:8b:85:2c:5d:b4:18:48:
36:1d:cf:e5:9d:fb:e6:c9:4d:d5:7c:40:f5:9a:9a:28:90:32:
b5:bd:3d:1a:1f:e2:66:fd:96:b0:a1:25:55:41:19:d5:4b:05:
87:a3:91:d9:0c:fe:f8:a9:4a:2d:5d:be:ea:3c:0f:97:bb:3f:
56:29:dc:d0:1a:6e:ac:a8:e8:38:3b:64:37:38:b3:dd:ef:d9:
af:e2:56:ae:41:73:25:c5:b9:11:37:0e:c4:a2:c6:be:f1:5d:
1f:bd:f1:0e:06:f2:35:21:a9:54:f7:61:9a:af:38:65:6f:42:
e7:82:a9:6b:d7:57:3c:72:4d:18:26:b1:18:1b:c9:d2:e9:90:
3e:38:d3:29:b0:39:b0:42:6f:77:c2:92:70:85:6b:c7:95:b3:
13:74:70:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 05:23:05 2024 by rpki-client on console-ams.rpki-client.org