Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EB5BCCE018A11EF87ED136E017001B1.roa
File: 7EB5BCCE018A11EF87ED136E017001B1.roa (raw, json)
Hash identifier: K4Lt8SHnVy+EYpXinNGltpjh1Uwg8pqN8bsCHUHbO50=
Subject key identifier: D2:45:04:4B:C5:3C:1F:CA:3F:E8:C1:6A:18:4D:C0:74:D4:9C:F8:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 84A5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EB5BCCE018A11EF87ED136E017001B1.roa
Signing time: Tue 23 Apr 2024 15:59:41 +0000
ROA not before: Tue 23 Apr 2024 15:59:38 +0000
ROA not after: Wed 01 May 2024 15:59:38 +0000
asID: 136950
IP address blocks: 45.195.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33957 (0x84a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 15:59:38 2024 GMT
Not After : May 1 15:59:38 2024 GMT
Subject: CN=6627daed-7ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:03:c8:7d:0a:45:6f:2c:e3:db:cc:38:a4:
cf:18:47:ec:e7:76:43:5e:c9:bb:b0:7f:46:63:f0:
10:89:d7:29:a1:26:7b:2e:f4:48:d4:9b:87:20:29:
fa:0b:f4:f8:a9:71:68:65:9b:6f:91:35:ad:65:c4:
1f:3e:c6:77:a0:d5:24:cb:f9:8c:ca:d9:8d:07:2e:
92:ce:e3:4b:47:06:f5:de:a2:2b:07:86:cb:43:cb:
17:9d:8f:35:72:d2:f5:8d:39:0d:8a:8d:52:9d:ce:
35:10:b3:62:24:27:8f:4a:67:6e:f2:bd:ee:73:69:
55:57:42:50:45:31:dc:73:6f:81:43:90:c5:50:6c:
fa:e3:03:70:e1:8e:3b:18:92:01:a6:12:9c:55:59:
69:58:1b:11:17:22:a4:af:bb:b5:e0:a3:be:c9:f1:
77:d5:b2:ea:1a:14:90:03:3e:31:63:b7:cd:3a:84:
43:52:84:5e:ec:e3:58:90:ee:1a:d9:af:e6:5d:9a:
e2:ae:95:fa:cf:13:03:df:52:2e:e3:e7:0d:43:d5:
38:30:a0:6c:5a:95:70:c5:a2:88:37:03:05:e8:fe:
77:19:d4:37:9c:36:82:51:65:9f:82:5d:27:a6:d0:
e0:39:3d:9b:86:37:b1:ed:73:d2:be:e8:53:36:a6:
2e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:45:04:4B:C5:3C:1F:CA:3F:E8:C1:6A:18:4D:C0:74:D4:9C:F8:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EB5BCCE018A11EF87ED136E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.205.0/24
Signature Algorithm: sha256WithRSAEncryption
46:fd:96:01:cf:60:59:9c:10:86:a7:f3:3e:9b:1f:18:03:ca:
47:06:a3:34:c9:72:9c:30:36:23:d8:5f:4e:1e:83:c5:a1:68:
7e:40:9a:c4:3e:6f:ad:da:2c:46:9e:d4:59:23:29:58:0c:c3:
4d:1f:d0:a8:f5:a0:a0:66:20:a1:08:a0:a2:b0:46:8d:d3:37:
ba:fb:05:1d:6a:77:46:b7:14:14:ef:b0:cc:47:6f:ad:47:6a:
8e:bc:e1:25:09:39:3f:bc:ee:30:33:21:83:6c:4f:10:d7:ca:
f8:8c:72:ff:b3:ad:38:85:e6:3d:86:c5:25:87:8d:a5:79:af:
aa:c9:9b:1a:bd:f1:3d:07:c5:e9:75:52:66:07:fd:11:07:3b:
a9:03:cd:c6:85:30:d0:6c:1d:06:54:ed:8f:1e:b4:20:e2:e1:
e4:17:da:0e:cd:ca:f7:05:ab:52:a1:28:9e:10:c5:67:ec:13:
e4:20:b0:11:19:d0:24:fc:2a:47:7e:9c:a9:a2:7d:31:aa:8c:
33:a7:31:5c:ab:e2:e6:f0:31:3b:b0:07:8a:b1:61:d7:f3:e1:
90:ed:6d:65:c8:32:9c:e6:7d:82:a2:7f:1f:be:54:31:f8:7d:
47:c4:fa:5e:80:2c:1b:72:2f:0a:6f:ba:81:57:6a:af:93:a3:
18:62:21:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:47:49 2024 by rpki-client on console-fra.rpki-client.org