Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/633E3D9C57D011ECAC8708B75A40D577.roa
File: 633E3D9C57D011ECAC8708B75A40D577.roa (raw, json)
Hash identifier: pm0V88MrqGfrtDFOwjh49WMoMiq1hP+2Qyj9G5h2UgU=
Subject key identifier: 32:E6:EC:76:53:9E:E1:E5:9B:24:F2:0F:B3:74:0E:10:21:3E:AF:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 108A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/633E3D9C57D011ECAC8708B75A40D577.roa
Signing time: Wed 08 Dec 2021 02:41:47 +0000
ROA not before: Wed 08 Dec 2021 02:41:44 +0000
ROA not after: Fri 30 Dec 2022 02:41:44 +0000
asID: 9009
IP address blocks: 45.192.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4234 (0x108a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 8 02:41:44 2021 GMT
Not After : Dec 30 02:41:44 2022 GMT
Subject: CN=61b01b6b-850f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:26:aa:1f:1d:9e:b5:ff:58:06:e7:ba:33:
8e:1d:1a:de:4d:54:8a:01:b1:db:0d:2e:f2:4d:94:
2b:a4:54:e4:f4:92:3f:dc:31:be:24:b4:17:d7:c5:
76:c7:da:fe:e2:92:0f:0a:79:ae:55:74:c4:a0:b7:
2c:8e:d9:b6:0e:74:86:6c:6e:54:81:49:1a:09:5a:
1c:94:27:16:95:3b:aa:22:2e:8c:f5:04:71:9d:e3:
da:85:23:2d:27:8d:fe:d5:17:55:bc:d6:41:d4:3a:
70:a1:e3:aa:33:7e:56:6d:56:01:b8:9e:67:de:ba:
c6:71:19:36:95:86:70:85:c9:ab:31:3d:10:6f:90:
40:28:ed:9e:6f:68:05:cd:04:92:a0:16:df:21:da:
26:b3:cf:73:a5:4e:88:1f:75:06:f3:0b:bc:fa:25:
c7:54:4c:99:18:86:48:c6:6b:45:a1:97:ae:3a:c0:
71:d7:8a:ec:60:30:39:b7:31:aa:04:15:0c:2e:5d:
d3:4e:66:a1:af:5b:1b:da:4b:5a:4b:f9:c8:ae:13:
b7:02:19:3a:d5:55:97:12:9f:7c:e9:00:e2:a8:fb:
44:cf:34:14:ab:76:8a:9e:de:3e:13:20:ab:a1:bb:
14:9f:46:49:ce:7c:64:42:c5:08:8d:a7:51:37:f3:
44:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E6:EC:76:53:9E:E1:E5:9B:24:F2:0F:B3:74:0E:10:21:3E:AF:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/633E3D9C57D011ECAC8708B75A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.147.0/24
Signature Algorithm: sha256WithRSAEncryption
81:2a:b7:90:17:d0:47:03:f7:29:3f:b3:dc:ca:ec:55:1c:49:
89:29:5c:1b:c9:66:02:80:e8:3e:5a:aa:76:42:69:4c:ed:65:
cf:82:d3:b2:e6:37:2c:36:8e:9a:64:6b:c9:16:db:ba:db:8a:
09:9e:24:65:87:14:19:b7:fb:17:20:55:24:47:35:c2:84:15:
5b:d5:ed:02:39:f3:f8:90:01:c0:94:d3:08:d8:d4:c1:10:d6:
b0:0f:81:bd:89:df:61:be:7a:41:02:fb:76:9d:f7:66:b9:ec:
b2:13:17:e6:38:74:36:3f:d2:bb:51:aa:e2:01:8f:b0:be:80:
bd:58:68:0d:68:07:e7:ae:c8:06:cf:8e:15:79:ad:2e:1d:65:
4f:84:c5:24:db:02:df:d9:5b:38:4d:51:b7:4d:11:46:4b:59:
e2:c4:b4:fc:ec:d8:10:59:07:4a:3c:b2:7f:e6:0e:96:b2:db:
06:b6:5a:80:cc:c5:6a:54:82:b8:0e:4b:ac:0d:a6:d1:10:78:
e3:f2:2a:3e:db:ed:dd:6f:38:10:f1:74:db:5e:02:96:05:03:
e9:1a:a4:1f:9c:5a:24:df:4c:af:7f:9f:21:a5:9c:9e:bb:64:
1c:78:58:23:81:0b:d9:6e:b0:c0:63:37:f9:56:43:ec:6b:74:
39:a8:55:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-fra.rpki-client.org