Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/867658A6088311EF880B7945017001B1.roa
File: 867658A6088311EF880B7945017001B1.roa (raw, json)
Hash identifier: gdxy3IGHO42UUmJ9y07aIeV4vNnAMxsULEtPIs5/p3I=
Subject key identifier: E0:16:57:6D:0C:04:39:9E:E3:62:D3:1B:33:E3:AB:8C:1D:E2:E8:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 874E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/867658A6088311EF880B7945017001B1.roa
Signing time: Thu 02 May 2024 12:57:26 +0000
ROA not before: Thu 02 May 2024 12:57:23 +0000
ROA not after: Thu 23 May 2024 12:57:23 +0000
asID: 142062
IP address blocks: 45.196.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34638 (0x874e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 12:57:23 2024 GMT
Not After : May 23 12:57:23 2024 GMT
Subject: CN=66338db6-781c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b1:9d:6e:60:71:cc:75:65:d6:17:c4:d9:fd:
5b:cb:fa:8f:a9:09:ae:ca:f8:bf:51:69:3c:3b:1f:
49:6d:44:00:19:02:bd:ad:c4:b1:90:ed:6e:9e:f8:
a6:75:d7:e5:fd:52:f6:31:33:56:7f:12:55:6c:7c:
50:10:9b:85:58:67:df:01:a9:96:6b:ee:a8:66:52:
09:e4:2d:0b:aa:4f:ae:6e:7a:88:98:05:be:ff:c8:
13:24:b6:87:06:20:38:1a:d4:07:0b:3e:6d:a6:b2:
f1:29:13:76:58:10:cb:de:f9:76:46:3b:c2:83:4d:
a0:87:b1:28:db:cb:77:4b:38:b6:98:d6:1c:fe:3e:
1f:9b:30:9d:87:b2:e7:b2:08:2c:4f:e5:2f:b0:5a:
2a:4b:cd:37:a1:5a:af:57:7e:f8:cc:2c:76:ef:a1:
8b:31:8b:d9:32:8a:2f:94:e5:85:b7:d3:0f:92:9e:
e4:b2:a1:8d:c1:e5:d1:59:ad:a6:20:48:a1:1e:89:
6c:71:44:b1:d1:82:18:d6:30:14:64:b3:07:f3:85:
1f:e0:5c:a7:d1:98:1b:9d:fd:4d:2a:4f:8b:3b:ec:
74:f1:cb:e5:ab:73:15:08:82:c9:e8:f1:a3:3c:af:
5a:42:e7:ff:41:74:45:a6:6a:7a:27:34:7c:ad:08:
77:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:16:57:6D:0C:04:39:9E:E3:62:D3:1B:33:E3:AB:8C:1D:E2:E8:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/867658A6088311EF880B7945017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.0.0/20
Signature Algorithm: sha256WithRSAEncryption
b3:98:f9:47:53:88:2e:7a:d3:8f:b1:71:2e:47:b5:fb:fd:e5:
5f:aa:30:01:4d:62:7b:ff:b2:23:82:ac:01:5d:3e:cf:e2:66:
71:17:50:ed:c9:0f:a8:9c:e1:8c:14:90:a3:f7:04:a9:25:8e:
d8:b5:7e:8b:67:ad:09:29:d6:f5:1c:59:c1:b8:8a:9d:48:d9:
64:10:dd:1d:5a:0d:c5:11:dc:32:7f:2f:67:01:52:20:dd:ad:
5f:22:d6:33:53:66:e3:c6:8c:5e:b9:b9:dd:ed:f6:31:16:ac:
b5:f1:3f:23:35:15:fb:0a:3b:1b:ea:b7:b4:4e:77:a1:68:16:
80:4d:a4:74:46:89:81:61:32:82:cd:9c:66:ec:9d:5e:16:39:
fb:1c:d0:e3:23:be:63:99:68:c3:ea:0c:f3:e8:b5:bf:20:2a:
a5:af:fd:97:d9:6c:6c:3f:8c:56:ff:72:a4:d8:c9:af:55:06:
f1:b7:05:bc:05:47:56:8c:99:7b:a3:9a:8e:84:03:13:55:10:
64:8a:b7:37:a8:06:5f:a5:c7:b0:f4:15:cc:dd:9d:66:4f:92:
4b:e3:76:09:45:6d:31:3f:38:0e:14:90:d9:c9:7d:d8:b8:7f:
fa:60:27:4c:0e:fa:2b:03:a4:97:89:e7:78:02:82:04:ac:84:
81:46:b1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:15 2024 by rpki-client on console-fra.rpki-client.org