Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/792778EE128611EF8E229766017001B1.roa
File: 792778EE128611EF8E229766017001B1.roa (raw, json)
Hash identifier: QCN4EKdx3KFQna7NSYjZn6HjuN+vn2v1kneuf42vMxk=
Subject key identifier: 04:C4:6C:54:7C:22:8A:E4:A3:32:C8:AE:04:7A:58:75:EE:10:B7:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8A5B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/792778EE128611EF8E229766017001B1.roa
Signing time: Wed 15 May 2024 06:43:44 +0000
ROA not before: Wed 15 May 2024 06:43:41 +0000
ROA not after: Sun 26 May 2024 06:43:41 +0000
asID: 142062
IP address blocks: 45.204.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35419 (0x8a5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 06:43:41 2024 GMT
Not After : May 26 06:43:41 2024 GMT
Subject: CN=664459a0-f7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:6d:b4:1c:90:85:09:ad:a6:10:c1:fa:22:
ad:e1:ba:9a:54:60:e6:55:9e:05:ce:78:57:df:d7:
49:f0:80:32:e0:56:c3:ef:3f:c4:01:8e:af:ac:f5:
78:5c:f0:28:00:32:c7:f2:a5:20:8b:6f:74:8d:4a:
01:16:86:83:6e:f8:bc:c5:2c:25:aa:a8:f8:e2:e7:
2c:12:45:24:d7:0d:34:f4:55:fa:43:04:b3:56:44:
7c:4c:ac:b4:93:0f:24:58:8f:c1:76:8c:e0:70:bf:
de:39:f6:bc:f4:cd:b9:2d:46:0e:bf:8c:e1:a0:ab:
4c:80:fa:48:fe:b7:8b:99:62:2a:4b:8f:76:86:18:
e5:ec:d6:b4:8a:52:fa:25:60:9d:63:35:21:ee:71:
d2:3f:35:95:4f:cc:0a:bf:5e:23:46:77:ee:8b:92:
8f:95:65:a7:a7:20:8d:d6:08:7d:b5:6e:81:fd:81:
d5:cc:97:1b:5a:f1:e6:87:bd:4b:5d:89:13:a8:39:
15:10:82:95:9b:ac:cc:9a:4f:11:81:ee:5f:a1:16:
74:8d:41:b7:23:46:75:97:a2:ff:e6:28:50:4d:fd:
81:aa:47:07:30:cc:2b:c8:06:3d:0d:5c:62:45:ab:
0e:78:14:b8:e4:10:fa:6c:e6:c9:5f:58:f8:2b:52:
fd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C4:6C:54:7C:22:8A:E4:A3:32:C8:AE:04:7A:58:75:EE:10:B7:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/792778EE128611EF8E229766017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.90.0/24
Signature Algorithm: sha256WithRSAEncryption
30:98:1b:36:9c:f4:64:66:be:83:fd:f7:5c:0d:d6:6b:f3:f3:
90:f3:0b:ba:f6:cc:06:c9:1b:9e:b4:f1:70:a4:ce:de:99:ca:
2b:d0:98:c2:db:fe:e4:7a:3a:07:71:99:08:d1:07:b2:32:ae:
0e:8a:27:23:d4:42:ef:52:bd:ca:51:76:73:2f:60:70:c0:8b:
84:93:9b:79:27:21:05:e0:f0:04:cd:f0:50:65:3e:c9:de:c2:
f2:ca:4c:28:0d:cf:aa:36:67:fc:da:c5:d6:f2:b7:bb:73:53:
cd:13:77:bd:b0:24:ca:df:d4:1e:61:71:94:9b:2f:84:ae:2f:
a5:c7:df:c0:79:e2:d0:25:38:ac:54:37:1a:47:97:80:17:de:
16:7a:a6:63:4b:ac:fb:d7:e2:9a:34:0a:17:36:79:57:70:44:
a6:6e:6a:03:db:a9:b2:b4:5d:33:dd:c5:19:ff:5b:de:d2:77:
f9:eb:32:6c:83:80:6e:66:0b:75:e0:3b:54:6e:82:38:77:63:
aa:86:95:5c:f0:7a:97:fa:0e:29:81:66:0a:70:c7:54:18:30:
2d:f4:80:fd:56:70:33:93:1a:d0:21:6b:f4:a9:83:0b:98:e6:
49:0b:c5:1d:fa:e9:67:ce:be:48:04:2b:70:86:29:f6:dc:86:
7a:c2:12:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 02:19:01 2024 by rpki-client on console-fra.rpki-client.org