Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74560F02B61B11EC93DE68B25A40D577.roa
File: 74560F02B61B11EC93DE68B25A40D577.roa (raw, json)
Hash identifier: 5rNhj6Cn23XEnjb8x26YIbkUzsrliVpBnzE+kT4LWkM=
Subject key identifier: 35:DC:55:01:41:EA:60:70:17:D0:A7:14:E8:6D:A6:E4:E9:F1:60:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 12ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74560F02B61B11EC93DE68B25A40D577.roa
Signing time: Thu 07 Apr 2022 02:35:58 +0000
ROA not before: Thu 07 Apr 2022 02:35:54 +0000
ROA not after: Wed 30 Nov 2022 02:35:54 +0000
asID: 131471
IP address blocks: 45.206.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4845 (0x12ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 02:35:54 2022 GMT
Not After : Nov 30 02:35:54 2022 GMT
Subject: CN=624e4e0d-5acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5f:03:99:28:ea:e8:b7:a5:4d:e2:4a:c3:e2:
d8:b5:7c:bd:da:78:64:9e:68:b1:dc:92:09:92:dc:
8b:1d:39:de:22:c7:50:d2:9e:09:64:9f:f7:df:43:
31:24:0d:16:70:43:4b:8e:16:8d:81:33:14:ce:5c:
f8:87:b0:a4:67:36:de:51:e9:05:7d:25:f8:08:8b:
81:28:83:a0:d2:7f:65:f3:ff:cf:62:4f:1a:ab:15:
80:a3:0d:02:82:98:45:e9:07:d0:73:b5:b0:86:c6:
85:4b:ba:8b:dc:06:f2:b5:ad:43:01:70:e1:c6:a2:
0f:57:ec:fd:fd:7b:6e:5c:fb:21:da:03:c3:2d:8d:
6c:e9:68:93:b0:06:71:c8:c1:6b:c8:1b:dd:48:d1:
01:26:39:a9:10:79:10:60:72:0e:c1:16:07:c6:7b:
af:3c:d9:f7:5b:49:07:c9:b1:ea:62:24:9e:6a:cf:
d7:0d:5d:d7:1d:86:02:0d:86:a6:d6:28:fa:e0:95:
e4:d8:20:8d:e7:5d:75:97:bd:ef:44:5c:65:91:e1:
f7:5c:dd:5a:47:75:f4:57:dc:69:a2:3f:b8:9f:c2:
60:92:9a:d1:03:35:ce:d3:7e:f8:40:f1:31:d8:15:
04:7f:49:8e:72:79:07:97:ac:2b:fc:d8:57:2a:18:
c9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DC:55:01:41:EA:60:70:17:D0:A7:14:E8:6D:A6:E4:E9:F1:60:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74560F02B61B11EC93DE68B25A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.36.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ce:ac:8f:fb:12:df:29:44:de:67:ae:bb:8f:05:a8:98:4d:
93:ed:fa:23:8b:4b:65:f3:59:21:63:11:18:fe:d3:81:43:85:
44:40:79:4c:4d:15:58:7c:60:57:4f:8f:91:2e:15:ac:b7:e7:
79:a6:ed:87:42:b0:60:2f:a6:e3:35:f8:81:4c:66:64:b6:81:
c7:88:6b:86:ef:fb:a5:45:8e:46:fe:1d:36:51:95:eb:33:f7:
83:8f:16:cb:ed:ff:0f:ef:b5:4d:da:de:6f:5e:51:4d:2f:fd:
c6:0c:8b:ae:76:62:02:a7:a3:7a:cb:9c:3f:2c:8e:fe:d4:ab:
eb:57:4d:03:6d:d9:08:cf:32:9a:4c:47:c6:3a:cd:38:5c:c6:
0b:1a:25:ae:79:e6:6b:19:b8:99:d9:7f:04:2d:51:8a:54:29:
81:3f:9c:e2:8d:55:84:45:78:b2:f9:bf:60:39:bd:f3:f8:df:
b7:c8:3e:3d:a4:d5:aa:9f:28:85:24:4f:89:db:65:9e:31:52:
3b:21:4c:70:27:48:33:ab:1d:ba:e2:26:35:52:0c:52:b3:2e:
d8:7e:22:25:84:9b:23:51:cd:e0:26:c1:c8:8e:77:a4:89:91:
fe:1a:0f:d2:e0:fa:bc:ab:8b:8c:b3:94:3b:93:12:14:83:80:
80:1e:8f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:20 2023 by rpki-client on console-ams.rpki-client.org