Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65077770B61B11ECA7F93EB25A40D577.roa
File: 65077770B61B11ECA7F93EB25A40D577.roa (raw, json)
Hash identifier: q2rXrQpmGjAAjxQ0pcVAnIH6LVQHU9irfvP7TH0GZXs=
Subject key identifier: 88:9A:BC:D8:5B:29:0F:05:02:5C:87:CC:A6:B4:25:46:03:DC:2D:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 12EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65077770B61B11ECA7F93EB25A40D577.roa
Signing time: Thu 07 Apr 2022 02:35:32 +0000
ROA not before: Thu 07 Apr 2022 02:35:28 +0000
ROA not after: Wed 30 Nov 2022 02:35:28 +0000
asID: 131471
IP address blocks: 45.206.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4843 (0x12eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 02:35:28 2022 GMT
Not After : Nov 30 02:35:28 2022 GMT
Subject: CN=624e4df4-38ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:82:ee:67:16:bd:4c:72:69:23:8b:e8:12:70:
0c:45:ba:a1:cd:8a:86:aa:eb:8f:b8:0e:85:44:a2:
41:76:b4:34:ea:8b:55:8c:c6:ce:19:ad:b7:ad:69:
e4:ce:3b:f3:83:20:e4:2a:e9:5e:70:ce:13:79:2a:
ff:98:c2:84:f1:6f:55:d4:43:63:f9:d1:b4:b6:16:
a3:e2:d1:9b:b4:2b:8c:a0:65:15:4e:f9:19:ee:3d:
c1:0a:a1:7c:30:f6:f7:1e:e8:cc:46:13:65:82:82:
ec:da:ef:af:83:ec:27:07:97:ab:2a:87:68:8c:ae:
7d:84:53:14:0a:69:16:a8:57:48:68:41:b9:ee:2d:
ea:71:48:d8:4a:30:61:f7:c1:e4:11:f8:dd:9a:5b:
de:64:39:5a:d4:77:22:2b:27:84:96:de:4f:97:5b:
bf:cf:71:3a:24:d3:75:fc:f6:bc:12:32:b8:6b:2b:
c0:df:0a:58:76:b0:95:ab:b5:8b:c3:c5:db:5a:8a:
4a:94:6c:d3:71:df:12:ad:a7:2b:46:7a:9a:56:f0:
d9:24:d0:14:3c:4f:6b:6c:ce:a8:04:5c:fa:5a:e6:
e8:ee:5f:a6:30:cc:dd:91:aa:54:ec:d0:dd:53:c3:
ec:55:5f:30:51:69:da:0b:54:bc:88:3b:e2:ab:fc:
29:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9A:BC:D8:5B:29:0F:05:02:5C:87:CC:A6:B4:25:46:03:DC:2D:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65077770B61B11ECA7F93EB25A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.35.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ab:ed:bf:76:3a:4c:de:5d:97:39:c2:69:49:f4:15:3d:53:
f7:64:2a:e2:f8:08:a4:21:9a:dc:fa:d0:8e:d8:ba:f1:49:08:
81:73:91:a9:b2:04:0a:15:a7:08:f9:25:06:42:c4:92:c8:dd:
5c:e2:41:8e:e5:af:9b:80:b8:f0:59:d0:24:ee:c6:fc:f5:47:
ca:92:f3:ff:cc:39:2a:30:51:9c:b4:2b:35:38:63:e8:95:ae:
36:6c:d0:05:ef:a7:ed:29:be:14:14:6c:11:8c:6d:23:db:69:
1d:fe:4a:e3:e3:51:20:bf:ce:fd:61:b6:94:c7:05:a8:84:93:
1c:a5:3b:f3:ca:88:23:26:0b:22:25:23:97:b9:aa:36:10:32:
2e:61:9e:91:84:30:38:83:d6:3e:a1:88:de:ba:4f:19:6a:60:
1e:4c:35:05:85:82:f7:56:25:36:7f:06:3e:e4:99:63:88:cf:
19:f7:97:cd:30:f8:4c:f3:4a:49:4a:aa:4d:e7:20:20:4a:34:
db:04:43:3b:a6:0b:0d:24:1d:33:31:39:55:0d:22:ba:6f:c6:
a5:b3:7c:9d:d2:47:cb:c9:f3:1c:9d:6d:ba:8a:83:02:79:48:
c3:c4:14:e7:04:da:44:45:3d:eb:9d:57:4b:c3:fa:44:ff:a6:
3b:cb:2d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:19 2023 by rpki-client on console-ams.rpki-client.org