Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68DC0AC8B92411EF82673575762E951A.roa
File: 68DC0AC8B92411EF82673575762E951A.roa (raw, json)
Hash identifier: 5q4Uo7gxCNN7zZucsTJjtP+pq7cFEPQLthjkhZVdxyg=
Subject key identifier: 87:21:40:2B:23:54:5A:12:39:EB:AF:35:19:1B:DD:C7:FA:D5:30:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E2F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68DC0AC8B92411EF82673575762E951A.roa
Signing time: Fri 13 Dec 2024 07:32:30 +0000
ROA not before: Fri 13 Dec 2024 07:32:26 +0000
ROA not after: Sat 25 Jan 2025 07:32:26 +0000
asID: 44559
IP address blocks: 45.200.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58099 (0xe2f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 13 07:32:26 2024 GMT
Not After : Jan 25 07:32:26 2025 GMT
Subject: CN=675be30e-c885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:4c:69:ad:2c:58:26:80:c6:71:a4:52:1d:
46:cf:b3:62:02:bf:fe:1f:a2:65:02:21:c4:b3:5e:
9a:c9:3d:a6:a4:ed:96:85:30:33:24:b5:6b:51:e4:
d6:af:6b:4f:96:8c:27:cc:d0:37:d2:27:39:71:a8:
3b:36:db:ec:5c:40:60:48:dc:3d:c3:5f:dc:a4:5e:
2e:14:99:47:78:c2:a4:96:2f:f5:2b:a5:a6:5b:76:
11:90:c2:b8:7a:1d:47:6b:61:8d:09:7d:d3:e8:7a:
47:94:10:63:2c:fc:96:69:ac:69:f5:eb:33:ac:65:
70:67:aa:27:ee:21:b0:87:ee:e0:e3:f4:ac:de:10:
c4:26:14:1f:13:70:ea:0e:6b:46:aa:d4:c4:1b:3d:
9b:a1:b7:a8:fb:9b:76:a3:d4:62:f5:db:64:4b:31:
ea:2e:4a:e9:53:95:8a:c4:ae:bf:2e:ba:b8:19:9a:
c3:d8:c5:89:2c:98:f7:bc:71:1c:da:99:39:9d:b1:
1b:a9:5c:c9:d1:ee:2d:67:c7:30:64:e2:1b:f7:24:
a7:04:cc:71:65:85:6e:e1:53:70:d9:ea:23:28:a5:
c4:45:e2:b0:42:00:a1:1c:70:46:9c:46:cf:64:73:
09:52:2e:f5:6a:e7:99:86:16:db:81:61:27:d2:15:
d6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:21:40:2B:23:54:5A:12:39:EB:AF:35:19:1B:DD:C7:FA:D5:30:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68DC0AC8B92411EF82673575762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.179.0/24
Signature Algorithm: sha256WithRSAEncryption
21:1f:a7:1b:0c:f1:29:62:4d:46:0d:05:03:f8:54:7e:65:89:
7d:b9:cd:40:8c:04:76:8f:16:47:a7:4b:dc:24:5c:06:81:65:
8f:1a:2e:9b:f0:d7:a4:fa:57:e2:bd:8b:b8:60:72:72:de:c1:
6e:3f:78:a7:1f:fb:13:91:1b:0f:89:25:ac:ce:15:6e:dd:6d:
65:41:c3:b1:19:a5:4a:71:e2:ea:4e:08:8b:31:36:88:ef:6e:
ec:a0:3b:c5:fe:92:31:95:16:84:ee:ee:28:ae:a6:0a:f6:d2:
df:73:1b:8a:60:48:68:30:b3:52:de:0e:c7:bf:e5:65:6f:2a:
d9:44:d5:f4:23:86:8b:01:cc:85:2b:43:80:31:04:6b:6e:65:
59:aa:ab:0a:f7:71:0d:be:69:b2:e4:2a:6e:6b:37:43:83:0e:
f3:f2:4f:f0:a3:db:9b:f4:e4:a1:8e:68:00:bc:70:df:17:a8:
59:88:ac:f0:7e:f3:78:2b:0b:67:69:7f:8f:ee:2a:3f:e1:c3:
50:84:b0:3a:ff:4a:1c:18:62:59:97:ed:a9:5d:46:87:ef:24:
d0:6d:bf:17:ca:2a:9c:3f:ac:88:d3:5d:f0:7e:5f:9d:72:54:
30:5d:77:fb:04:79:2e:63:96:d2:4d:c9:b0:24:e1:a6:3c:c4:
d9:07:5c:c2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOLzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjEzMDczMjI2WhcNMjUwMTI1MDczMjI2WjAYMRYw
FAYDVQQDEw02NzViZTMwZS1jODg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwLxMaa0sWCaAxnGkUh1Gz7NiAr/+H6JlAiHEs16ayT2mpO2WhTAzJLVr
UeTWr2tPlownzNA30ic5cag7NtvsXEBgSNw9w1/cpF4uFJlHeMKkli/1K6WmW3YR
kMK4eh1Ha2GNCX3T6HpHlBBjLPyWaaxp9eszrGVwZ6on7iGwh+7g4/Ss3hDEJhQf
E3DqDmtGqtTEGz2bobeo+5t2o9Ri9dtkSzHqLkrpU5WKxK6/Lrq4GZrD2MWJLJj3
vHEc2pk5nbEbqVzJ0e4tZ8cwZOIb9ySnBMxxZYVu4VNw2eojKKXEReKwQgChHHBG
nEbPZHMJUi71aueZhhbbgWEn0hXW2wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIch
QCsjVFoSOeuvNRkb3cf61TCIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82OERDMEFDOEI5MjQxMUVGODI2NzM1NzU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcizMA0GCSqGSIb3DQEBCwUA
A4IBAQAhH6cbDPEpYk1GDQUD+FR+ZYl9uc1AjAR2jxZHp0vcJFwGgWWPGi6b8Nek
+lfivYu4YHJy3sFuP3inH/sTkRsPiSWszhVu3W1lQcOxGaVKceLqTgiLMTaI727s
oDvF/pIxlRaE7u4orqYK9tLfcxuKYEhoMLNS3g7Hv+VlbyrZRNX0I4aLAcyFK0OA
MQRrbmVZqqsK93ENvmmy5CpuazdDgw7z8k/wo9ub9OShjmgAvHDfF6hZiKzwfvN4
KwtnaX+P7io/4cNQhLA6/0ocGGJZl+2pXUaH7yTQbb8XyiqcP6yI013wfl+dclQw
XXf7BHkuY5bSTcmwJOGmPMTZB1zC
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:47 2025 by rpki-client