Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B2F6EBEE89911EC8D1B71CFF1222468.roa
File: 5B2F6EBEE89911EC8D1B71CFF1222468.roa (raw, json)
Hash identifier: B9Ff8cqtMZoIuGfbRNPAHsjpYpwiMq4C/of684BPMRg=
Subject key identifier: 2C:27:E2:52:23:78:34:6F:93:04:D6:1C:E3:E3:18:DC:D5:4A:9F:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 14B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B2F6EBEE89911EC8D1B71CFF1222468.roa
Signing time: Fri 10 Jun 2022 08:43:10 +0000
ROA not before: Fri 10 Jun 2022 08:43:07 +0000
ROA not after: Tue 28 Feb 2023 08:43:07 +0000
asID: 133199
IP address blocks: 45.207.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5301 (0x14b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 08:43:07 2022 GMT
Not After : Feb 28 08:43:07 2023 GMT
Subject: CN=62a3041e-ca6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:7e:e9:29:b2:12:1b:46:91:5e:64:e9:a1:
0c:16:64:68:08:14:2e:06:48:a2:d7:7f:77:e0:4c:
5b:f6:05:71:d9:f4:16:b4:7e:64:c4:9d:1d:71:65:
7a:77:2f:55:7f:de:62:45:14:ef:33:e0:2a:0d:aa:
32:29:87:df:6c:64:d9:eb:de:00:92:01:5c:f6:84:
47:2a:b5:b3:01:c1:ad:c9:b2:ec:e1:a8:db:be:fb:
a3:1e:6f:04:ee:25:34:5a:a5:99:54:f1:e7:46:09:
bf:7f:be:0d:da:72:2a:7d:c3:d2:6f:56:01:da:b7:
59:15:21:5a:14:b6:28:10:7d:8b:7d:43:ed:27:ee:
c2:07:35:9e:4c:e0:fd:73:63:6f:c7:c7:d7:87:ad:
aa:50:0a:47:c4:13:37:68:31:6e:60:72:37:b9:0e:
e0:d6:26:f5:60:83:bd:27:0a:14:af:52:0b:d6:b6:
b5:3c:68:35:83:b0:58:73:f7:a7:cb:d6:83:d2:2c:
ea:0e:79:f9:f0:44:48:d3:c5:f7:10:8d:fd:05:ec:
42:47:14:46:b3:fa:c1:17:d3:eb:75:df:b3:bd:26:
36:ef:18:c9:2d:ec:dd:7b:80:a5:12:e2:82:57:8d:
70:0b:95:37:be:7a:52:d5:2f:78:82:9b:8f:a0:96:
ee:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:27:E2:52:23:78:34:6F:93:04:D6:1C:E3:E3:18:DC:D5:4A:9F:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B2F6EBEE89911EC8D1B71CFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.50.0/24
Signature Algorithm: sha256WithRSAEncryption
58:95:e6:6b:03:82:a8:3a:50:09:5c:81:a6:81:25:20:cb:56:
08:77:5e:d1:50:4d:70:d1:78:e6:d1:83:5d:06:65:d7:cc:ee:
09:4a:18:fa:66:69:3d:4f:b1:ea:31:59:b9:cb:54:2e:97:3f:
bc:1e:e8:52:77:ab:b2:83:c1:09:21:ae:6b:8f:42:91:f5:10:
61:33:26:c8:48:1c:12:63:2d:ab:e5:5f:ca:e1:91:59:52:98:
a4:31:c2:24:e5:0d:65:06:75:63:4c:78:33:b1:c8:57:e9:99:
94:cc:d0:84:d4:c3:66:41:50:3b:ed:2b:62:36:68:95:0f:aa:
de:75:07:1a:19:16:ac:08:14:e8:63:18:c4:d9:aa:88:47:d3:
f2:96:7b:d8:c8:34:63:17:76:72:1f:8d:8d:92:8e:8d:4f:67:
8b:d7:57:2c:3c:e9:bc:5b:2a:a2:bd:fc:3d:db:58:31:f0:6e:
f3:a2:22:a4:f2:8e:24:7c:cb:76:89:69:56:9d:77:3b:56:fe:
70:c4:d5:eb:1e:5b:e4:52:f7:59:27:c2:4f:60:63:3a:ad:da:
b9:3d:bc:be:8f:4c:31:e0:0b:d2:2b:cb:79:be:97:b8:0f:88:
10:69:86:0c:a8:ff:ba:1a:de:a2:b5:f4:9f:99:2c:f6:7d:71:
94:0d:83:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-fra.rpki-client.org