Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55F631EA435E11EF87DE3368762E951A.roa
File: 55F631EA435E11EF87DE3368762E951A.roa (raw, json)
Hash identifier: mA6UCxbrwQlPUXEmEOHyZUkipVjGU7gVX4hFG5o7KmE=
Subject key identifier: 9D:3B:53:84:53:53:93:F5:91:3F:9A:53:26:B0:59:C6:69:00:0A:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9CCF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55F631EA435E11EF87DE3368762E951A.roa
Signing time: Tue 16 Jul 2024 10:29:52 +0000
ROA not before: Tue 16 Jul 2024 10:29:49 +0000
ROA not after: Mon 12 Aug 2024 10:29:49 +0000
asID: 54600
IP address blocks: 45.205.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40143 (0x9ccf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 10:29:49 2024 GMT
Not After : Aug 12 10:29:49 2024 GMT
Subject: CN=66964ba0-2ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a9:7e:33:72:20:aa:68:fd:a5:b1:f6:3d:cc:
a2:41:27:b3:b3:75:5e:9c:aa:02:48:64:c1:9a:5e:
1d:3f:41:bb:af:b9:46:ef:7f:72:2a:a1:1a:a6:a9:
66:ac:e1:99:82:05:b9:87:8b:47:c7:cd:80:c8:cf:
48:dd:35:04:93:9d:2a:21:16:f2:9d:3c:23:e1:11:
ab:62:f3:2d:d0:06:de:e7:52:b5:5e:7e:d4:b3:34:
39:77:1d:64:10:4a:bb:19:11:ff:57:b9:e4:51:42:
e6:1c:8d:a1:fe:c2:dc:88:d8:30:5e:bf:39:32:76:
cd:3e:75:f9:98:bc:68:fb:a8:42:a7:e8:93:b8:f6:
d8:e1:44:3a:02:76:83:a0:a7:59:44:17:b8:48:3b:
3e:1e:d3:42:d4:71:a4:74:3b:86:5d:77:f0:26:64:
a6:f2:51:29:1c:09:3f:e0:8a:df:69:f2:6a:db:65:
c7:dd:72:32:a6:76:24:6e:d7:3f:39:76:ed:1b:85:
96:83:4f:60:6e:75:bb:bb:b3:35:ce:d1:3a:47:53:
be:ee:bb:c7:8d:6a:1a:30:bb:e5:29:79:f8:6a:61:
d6:60:89:3e:7f:90:55:15:50:1e:27:5f:7d:82:d4:
ab:bb:ea:43:60:46:0a:f5:ba:61:8a:1c:d7:d8:41:
2c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3B:53:84:53:53:93:F5:91:3F:9A:53:26:B0:59:C6:69:00:0A:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55F631EA435E11EF87DE3368762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.192.0/19
Signature Algorithm: sha256WithRSAEncryption
29:18:4e:d0:d1:ef:77:4b:35:8a:ab:e5:ed:ec:51:b7:43:a0:
58:f4:ef:9f:95:e3:00:66:d1:b6:c3:29:7a:54:2e:9e:8d:f4:
a0:8c:b3:c2:67:81:0f:ab:f4:9e:83:8b:fe:ad:63:4e:2e:45:
a0:98:78:db:2c:69:78:8b:23:a1:50:4f:23:80:40:8a:db:4d:
2b:69:5a:0d:15:bd:fa:c6:3c:43:2c:34:e7:1f:10:d3:e7:23:
0a:7b:f6:0d:d0:f3:d4:9d:3a:05:57:66:92:a6:96:36:d7:25:
7d:ff:95:32:26:83:59:1d:4c:26:91:c4:84:b2:8d:d1:f7:8b:
90:4d:bb:4f:3f:a2:f8:f4:a9:b4:15:d6:d8:24:91:75:97:a2:
4c:f2:74:bc:cf:5d:1d:2b:0b:c6:ad:3d:bb:8d:0d:18:c1:78:
04:13:fb:02:b7:84:73:dc:b1:fb:dd:65:79:6a:28:62:ce:18:
1f:11:51:de:c2:cb:f7:e4:fb:b3:fe:74:23:50:a3:9f:c9:c4:
92:70:26:7f:f2:ff:55:dd:25:3d:15:83:d5:19:d9:c2:3c:85:
7e:11:6f:b4:51:29:af:90:d2:64:63:1b:3c:4c:6d:02:38:26:
db:c1:ea:0c:a2:a0:05:7b:a0:24:fc:f5:79:b3:47:0f:70:8e:
09:5c:ce:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 03:10:46 2024 by rpki-client on console-fra.rpki-client.org