Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8143F86E038A11EFAD5B1B42017001B1.roa
File: 8143F86E038A11EFAD5B1B42017001B1.roa (raw, json)
Hash identifier: rDY+Wn69xNdkxBuHeUf6dXiYuKpIVUZF2AZElnEHGmQ=
Subject key identifier: 31:EF:6F:E7:E5:10:70:31:8A:D0:FF:7E:0C:E1:BB:58:4A:D2:94:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 85C8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8143F86E038A11EFAD5B1B42017001B1.roa
Signing time: Fri 26 Apr 2024 05:04:49 +0000
ROA not before: Fri 26 Apr 2024 05:04:45 +0000
ROA not after: Sun 05 May 2024 05:04:45 +0000
asID: 141883
IP address blocks: 45.201.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34248 (0x85c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 05:04:45 2024 GMT
Not After : May 5 05:04:45 2024 GMT
Subject: CN=662b35f0-8b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2f:bc:43:78:f3:97:0e:8a:80:1a:6a:04:05:
cc:a4:56:eb:25:1c:65:97:88:84:94:48:8a:5a:06:
91:90:72:1f:82:73:01:65:22:d3:43:1a:bb:22:1d:
40:fe:ca:3f:bf:4d:15:5d:e5:4a:ac:eb:f7:21:d4:
bb:ae:c4:09:88:3a:ac:e2:77:f8:b7:7f:1c:aa:a4:
fc:cc:e4:21:b9:6f:01:8a:52:b9:f1:37:bd:31:20:
37:1d:73:c7:b3:e8:1a:6c:de:14:b6:79:95:25:5c:
1d:4f:c3:1b:dd:a7:f6:5f:60:86:49:48:48:cb:2a:
5a:f8:c0:21:d3:f1:16:54:f7:8d:b0:8e:1a:19:d4:
22:7a:1f:7f:40:3d:ed:84:0c:49:2d:37:1e:07:82:
e9:6e:43:b1:6e:39:03:ec:07:33:7d:7d:76:cc:97:
4b:d7:e6:78:2f:77:1d:5b:55:36:99:a0:45:ca:e7:
3e:45:f5:b6:d1:5d:d8:0a:b5:59:53:d5:b0:26:60:
1e:f2:47:d0:97:8f:da:ac:c6:42:df:48:4c:f4:01:
34:fa:2d:69:cb:a6:37:d6:73:ed:6e:5c:4e:4c:a8:
02:59:da:1e:58:f2:ab:fe:4d:49:28:c1:74:ba:81:
eb:5a:f3:ef:fa:62:af:f5:01:bb:61:10:38:e4:20:
a4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EF:6F:E7:E5:10:70:31:8A:D0:FF:7E:0C:E1:BB:58:4A:D2:94:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8143F86E038A11EFAD5B1B42017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.240.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:f4:c3:c0:25:9f:1d:ae:16:08:5c:0d:6d:41:5f:60:bb:df:
b8:5f:45:49:b2:9f:0d:ca:a2:3d:6f:8d:ef:4d:fc:6a:f9:93:
6a:6b:eb:01:f1:9c:a5:57:27:14:87:47:fb:86:e4:d9:cc:87:
41:69:1e:76:59:1b:2a:93:33:03:66:8c:52:6b:ad:e8:bf:89:
6c:f0:fc:1a:c2:ad:df:cc:f2:c0:25:2b:d2:65:66:82:b9:20:
55:98:af:94:03:14:47:fa:8f:fa:0f:d8:1f:f7:d8:9f:6c:60:
0b:63:f5:12:e3:4c:1b:36:8d:b2:70:39:51:00:33:ab:4f:26:
bb:23:19:28:d8:4d:09:ac:28:74:28:57:e0:a9:f5:c8:98:fb:
2f:3c:4d:86:49:db:e6:af:3a:a8:52:b9:15:a7:2a:3d:5f:7c:
89:07:43:eb:d2:8c:cf:1d:47:30:c2:b1:53:d2:74:52:90:b7:
00:5e:eb:08:85:81:a4:6f:5f:d3:1d:47:37:af:c0:48:11:90:
f2:c2:7d:cf:57:70:8b:8c:0e:6d:87:ba:47:1f:2c:db:f7:59:
47:dc:18:50:97:dd:fc:05:b7:e3:d8:0f:68:29:3f:c4:94:23:
f9:db:6c:9b:b1:d3:aa:1d:e0:5f:3e:f2:4e:be:c1:c5:77:24:
e6:b8:5d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:18:25 2024 by rpki-client on console-ams.rpki-client.org