Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72B3D55C57D011EC98B242B75A40D577.roa
File: 72B3D55C57D011EC98B242B75A40D577.roa (raw, json)
Hash identifier: iQ0ZDMWAfBhnRnlaYZZw7DPsSiTgPw0AIoNp9SNT/sc=
Subject key identifier: 70:CC:70:44:DE:2A:F4:64:84:4A:0A:E7:2E:94:96:D5:98:57:5A:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 108C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72B3D55C57D011EC98B242B75A40D577.roa
Signing time: Wed 08 Dec 2021 02:42:13 +0000
ROA not before: Wed 08 Dec 2021 02:42:10 +0000
ROA not after: Fri 30 Dec 2022 02:42:10 +0000
asID: 9009
IP address blocks: 45.192.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4236 (0x108c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 8 02:42:10 2021 GMT
Not After : Dec 30 02:42:10 2022 GMT
Subject: CN=61b01b85-73db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:e8:82:92:1e:f0:d4:a7:a9:33:e6:d0:39:
57:90:24:c4:36:e0:e2:db:47:dd:7e:89:e5:22:79:
34:60:d3:7e:ba:e3:4d:ce:b8:b9:87:38:35:57:1e:
13:78:a0:08:b2:41:ba:79:21:49:40:c5:da:dd:75:
72:f9:a9:7c:cd:a2:f3:94:c9:2e:27:47:eb:ae:81:
b6:e9:cf:b3:f2:90:06:02:88:9b:dc:a3:15:c2:1c:
07:de:65:9c:23:a4:00:1d:82:c3:1e:68:b3:c4:3d:
18:82:5e:f4:a3:83:09:9b:80:67:de:b0:b6:44:28:
63:90:ed:03:40:1f:db:1a:34:33:d6:7a:f8:4f:2c:
d1:bd:1b:5d:c7:19:09:e6:33:09:0e:fe:28:93:fe:
bf:bd:6a:bb:d1:5d:9c:75:82:05:38:97:19:09:12:
ce:ea:d2:19:08:0c:df:6b:67:4b:12:32:d4:f3:35:
d4:e1:48:8c:9e:89:78:75:dd:7d:b1:35:9f:86:6f:
32:9b:e0:87:9f:c1:dc:cd:a8:60:06:23:b7:11:74:
e4:18:41:c7:d9:90:ab:60:50:76:7a:fb:0d:61:83:
2e:4c:13:ce:3e:cb:01:58:d6:6a:30:9f:4f:58:02:
d2:1f:54:38:b4:65:a8:26:14:27:7e:31:b6:e0:d9:
4f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CC:70:44:DE:2A:F4:64:84:4A:0A:E7:2E:94:96:D5:98:57:5A:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72B3D55C57D011EC98B242B75A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.131.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:61:2d:29:25:26:90:ba:fb:34:21:a2:3f:f9:b4:83:51:2a:
41:d3:0d:6b:6d:a4:a4:ca:72:ca:99:52:93:20:db:04:04:da:
37:e1:99:f3:16:a8:f1:dd:e1:bd:4f:49:4a:2f:f0:67:89:29:
42:ab:a4:e7:24:93:fd:ee:14:01:16:04:df:d4:bb:3c:fd:4d:
8b:96:a1:8a:c2:55:d0:82:66:f9:33:69:d5:d3:3a:a4:35:bc:
a0:61:1c:b6:8c:f7:b8:ea:c8:8e:36:6d:18:e1:ab:9f:d6:b8:
d4:93:26:98:1b:5b:7d:72:c7:17:0a:b0:f9:b7:d3:f1:5c:f0:
5b:6f:d0:da:c4:3c:8c:7a:56:7f:2f:ae:37:1b:e3:9f:d5:c8:
2e:fd:ee:16:e5:3b:9b:a4:32:79:3a:6e:f8:c7:fd:53:0f:0a:
75:c7:cd:b9:84:3d:0f:9b:0f:57:d3:a3:9f:07:07:0f:e3:c8:
3b:38:97:ef:d9:06:47:5a:04:34:08:f8:fd:f1:46:d7:5a:2d:
1f:ec:75:4c:14:b2:67:58:87:f1:fb:bd:ab:df:42:d2:1d:fe:
63:a4:41:6e:25:ea:ae:3d:96:52:7b:09:89:4a:e5:91:23:95:
19:a9:d4:a1:38:0b:db:5f:5e:10:29:66:14:fd:54:bb:35:8c:
7e:a3:26:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-ams.rpki-client.org