Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/801E9572DAB611EEB866B18C775412E6.roa
File: 801E9572DAB611EEB866B18C775412E6.roa (raw, json)
Hash identifier: ADPRNyRVmy2aPXAKXoIEJNMBNmAvJx8UurbfhChXhNg=
Subject key identifier: 80:64:BD:87:B4:40:7F:C8:97:D3:F7:C9:8F:7B:D6:76:D7:A7:3E:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7B58
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/801E9572DAB611EEB866B18C775412E6.roa
Signing time: Tue 05 Mar 2024 06:06:26 +0000
ROA not before: Tue 05 Mar 2024 06:06:23 +0000
ROA not after: Thu 21 Mar 2024 06:06:23 +0000
asID: 142286
IP address blocks: 45.207.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31576 (0x7b58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 5 06:06:23 2024 GMT
Not After : Mar 21 06:06:23 2024 GMT
Subject: CN=65e6b662-bc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:de:28:d3:d8:68:1c:3b:f4:29:f4:23:7d:4c:
27:d9:db:38:8c:6e:8f:26:90:d2:f4:9e:6d:1a:1e:
17:9b:56:45:9d:3a:11:ad:c2:cb:76:38:85:fd:df:
b7:f6:7f:dd:ac:cd:dc:64:47:54:67:f6:06:c9:b0:
bf:26:33:9c:ce:e4:05:f1:5e:b6:0f:8b:25:6c:60:
5d:bf:39:ab:a3:ec:28:c0:c4:e5:7a:36:e2:e7:83:
92:cf:33:57:68:23:57:b9:d9:38:4d:a8:7f:01:45:
0e:1c:00:4d:45:8c:c0:0f:ab:7e:c8:9a:c5:1a:43:
a7:b4:c6:87:04:c4:b5:df:a2:7d:95:00:95:3c:d6:
ca:b1:1d:07:68:3d:27:d0:9b:be:a7:9f:92:72:f8:
bc:b4:93:9a:1d:15:c2:8c:5d:95:d7:13:6c:28:59:
aa:09:f1:1a:10:66:79:ba:d4:9b:4a:f9:27:99:97:
34:57:b3:7e:9a:42:1b:13:57:be:57:58:b8:f5:60:
e5:19:76:12:a4:ce:2a:63:09:51:70:c9:6b:87:d9:
c6:12:0f:a4:ee:71:50:8b:26:f8:dd:c6:ca:77:49:
85:59:ba:d3:85:9f:6b:e8:2c:63:51:d1:42:ef:37:
90:e1:4b:0d:d9:41:ad:5f:dc:82:84:2b:54:43:5c:
61:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:64:BD:87:B4:40:7F:C8:97:D3:F7:C9:8F:7B:D6:76:D7:A7:3E:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/801E9572DAB611EEB866B18C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4c:a2:42:10:a4:29:a2:44:a3:a2:11:93:92:c4:87:97:bf:de:
a2:d3:df:05:43:74:3a:6d:89:1c:48:9a:b7:da:3d:7f:c9:66:
4c:9c:05:19:1a:5f:25:2e:ba:59:a5:3d:ca:f2:47:9e:a4:6f:
c7:69:55:b4:8b:8d:e8:b2:7c:34:24:b3:28:ca:c3:e5:20:eb:
c5:52:39:0d:1d:ad:d1:f7:9f:05:f2:15:d4:a2:2c:55:1f:f2:
46:e2:01:f3:ba:96:94:37:72:ca:47:ba:86:43:f9:ed:05:2c:
6a:7e:07:cf:80:8c:26:dd:d8:74:4e:00:25:2e:60:b3:1b:d1:
12:fd:85:7b:c4:b0:36:0e:97:32:a4:35:29:af:6f:2a:84:95:
79:06:c6:08:e6:b1:a3:8c:f9:16:7b:56:1e:79:c6:a0:25:75:
6c:b2:ae:39:98:d9:ff:ae:3d:4a:18:24:73:bf:57:01:1a:d1:
f7:3b:14:cd:88:86:50:c3:67:9e:ad:9c:30:34:3c:56:32:72:
0c:98:a5:7b:71:87:cb:5f:75:84:5e:bc:e9:03:69:29:a8:fe:
bc:7f:34:3e:01:72:51:7d:76:9a:1f:84:eb:80:0e:98:83:f3:
2d:03:fc:97:77:fe:cc:c4:26:54:0b:4a:aa:f1:2b:0e:3b:8d:
55:88:d3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 21 18:22:40 2024 by rpki-client on console-ams.rpki-client.org