Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5789A368018A11EF8A839F6D017001B1.roa
File: 5789A368018A11EF8A839F6D017001B1.roa (raw, json)
Hash identifier: iGv743msGh4UZ0uHxP2bM0o41jx4/adghJI6OB78Hjs=
Subject key identifier: B1:31:F7:6B:99:B7:5A:EC:11:92:1B:19:C8:B9:74:45:00:B1:98:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 84A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5789A368018A11EF8A839F6D017001B1.roa
Signing time: Tue 23 Apr 2024 15:58:36 +0000
ROA not before: Tue 23 Apr 2024 15:58:32 +0000
ROA not after: Wed 01 May 2024 15:58:32 +0000
asID: 136950
IP address blocks: 45.195.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33955 (0x84a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 15:58:32 2024 GMT
Not After : May 1 15:58:32 2024 GMT
Subject: CN=6627daac-f20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:0a:9d:0d:6c:ef:9c:72:7b:02:11:a5:3e:
24:39:f6:a7:45:89:44:a1:e1:4c:90:9c:46:cf:f5:
8b:0f:10:29:b5:36:e7:eb:7d:f7:fb:ce:96:72:15:
47:1e:a8:d2:72:60:30:b3:e3:b8:90:53:1d:95:51:
13:a7:9c:3e:2d:96:5f:99:3f:64:06:3e:40:9e:11:
44:51:ce:b4:1e:98:a6:58:0e:b6:e0:d3:1b:6d:67:
ed:b5:bb:3f:b6:cf:e7:ed:f3:b5:98:c1:64:6a:59:
2a:10:ee:0c:7e:9b:e5:8f:b7:c0:76:2d:4b:11:fe:
10:4d:c3:c2:6f:3c:32:c2:22:89:3a:7f:1a:65:29:
aa:cc:75:f5:85:75:e1:e6:c6:40:e9:45:10:e8:1e:
58:47:d2:ba:2d:4b:37:0c:30:8e:17:de:62:f7:9f:
dd:46:e9:ff:6c:28:5a:a4:91:9e:69:77:32:a0:2b:
28:cb:f1:b3:94:57:0f:64:cc:7c:ec:03:e6:2e:5f:
04:c0:70:8a:71:ad:a2:2c:9d:15:01:96:ca:16:a6:
49:59:10:42:78:fb:39:46:92:ee:f9:94:a7:8c:cb:
e3:4f:7a:48:b7:3d:2f:49:71:10:d0:d2:31:6a:35:
69:04:fe:ca:71:5b:d4:fc:05:59:0d:e4:25:01:f4:
e9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:31:F7:6B:99:B7:5A:EC:11:92:1B:19:C8:B9:74:45:00:B1:98:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5789A368018A11EF8A839F6D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.204.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ad:97:e3:bf:c7:11:d3:f0:92:a5:39:ac:b8:2f:80:82:43:
08:86:82:5b:f4:a1:03:ea:ae:f9:0d:6b:7d:a4:65:4f:12:a3:
1e:21:53:ac:d5:21:62:34:a4:e4:a7:b0:1a:80:a6:34:8f:38:
bb:2e:62:04:07:37:fa:b9:77:95:19:e7:c5:3a:b4:c1:10:bb:
60:00:46:f4:de:7f:ad:2f:dd:23:91:c5:fb:36:99:aa:03:81:
e0:4b:3b:3a:a1:1f:f2:96:b1:28:47:d0:e3:59:b7:cb:71:02:
b4:ec:73:8f:f8:36:f2:61:66:e5:cd:ef:ee:78:2b:51:63:96:
2e:d5:b9:8d:41:dd:81:08:00:1b:5b:30:be:95:5b:43:02:b9:
ed:16:28:8c:e5:86:5f:57:8e:6c:68:19:0a:6b:c5:6f:a3:36:
8a:19:d0:08:37:c2:80:87:ec:a6:0b:62:34:96:5e:7c:31:f3:
e2:0d:a5:31:26:f4:27:f0:06:76:09:92:ba:de:db:fc:59:f2:
ac:37:80:31:b5:02:b4:9e:4b:fc:8d:aa:3f:f5:22:e8:ef:c4:
4a:50:96:a9:32:65:81:d0:ba:53:95:d4:98:44:c1:d4:07:86:
49:42:d3:1a:72:e6:8e:7e:f9:3d:66:3a:1f:7c:3d:a4:86:b2:
e3:89:64:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:38:49 2024 by rpki-client on console-ams.rpki-client.org