Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86B4BBBE0CC711ED924CBDC3F1222468.roa
File: 86B4BBBE0CC711ED924CBDC3F1222468.roa (raw, json)
Hash identifier: K2kGZk1XZJRoYdsTVluuAQbVb9lolrtO30qQNc6SuRk=
Subject key identifier: FB:A8:D8:F2:22:16:ED:D0:D0:A0:76:ED:5F:D5:86:15:B5:C8:8F:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 15CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86B4BBBE0CC711ED924CBDC3F1222468.roa
Signing time: Tue 26 Jul 2022 09:44:22 +0000
ROA not before: Tue 26 Jul 2022 09:44:18 +0000
ROA not after: Fri 12 May 2023 09:44:18 +0000
asID: 984
IP address blocks: 45.195.242.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5580 (0x15cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 09:44:18 2022 GMT
Not After : May 12 09:44:18 2023 GMT
Subject: CN=62dfb776-1a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7c:c6:c4:1c:6b:15:98:7e:0f:e5:cb:64:94:
09:64:70:e0:7f:9f:1a:a6:41:ac:29:39:b4:5b:b3:
6f:06:36:fa:e1:5a:70:05:5a:79:39:4e:a4:07:3b:
48:4f:12:55:50:75:1a:93:04:6d:01:97:d9:11:9b:
07:bc:79:a1:16:ee:0f:b8:c3:73:e9:7e:8b:6c:73:
96:d3:87:38:2c:02:c9:25:f1:8c:b7:ec:9a:8b:dd:
66:2e:1b:b0:4c:2a:14:82:8b:1f:4c:57:b9:32:1e:
38:3f:90:cf:0c:db:80:13:f2:62:89:b6:24:bb:3f:
9f:f3:77:a8:93:5a:16:28:b9:49:73:32:2c:e3:d9:
31:10:9e:67:2d:1a:a2:67:a2:c7:4e:27:3a:50:3f:
90:7d:2f:dd:a3:fc:d7:05:63:7c:66:eb:31:35:bd:
ae:61:80:2c:05:45:f3:ea:16:b1:83:48:3d:44:af:
df:ff:d5:33:79:c2:99:ca:0b:5c:0c:9d:8c:66:a4:
7e:bd:26:c3:d5:d5:37:46:71:72:68:b5:34:3f:c8:
a2:76:83:f3:36:33:e5:57:10:34:26:92:7e:cd:12:
8e:1e:24:56:d4:99:d6:23:81:e9:6c:75:d3:ca:2d:
0d:6b:93:5d:a9:8e:a4:62:b4:4a:42:04:41:1a:a6:
90:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A8:D8:F2:22:16:ED:D0:D0:A0:76:ED:5F:D5:86:15:B5:C8:8F:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86B4BBBE0CC711ED924CBDC3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.242.0/23
Signature Algorithm: sha256WithRSAEncryption
10:52:b5:8b:60:7f:a2:c9:dd:ca:af:3d:49:09:0f:9e:c3:6d:
3e:99:f0:73:cf:27:ad:77:b6:b0:22:5d:ca:7c:c8:af:f6:41:
d1:1b:57:fb:eb:c8:b6:c3:2a:70:37:d6:4c:fe:40:41:2e:34:
dc:b9:e6:ee:fa:7b:07:2e:80:6d:94:99:f3:f9:85:7c:6f:32:
c5:fb:8d:c0:8e:6e:d6:d1:ed:7a:7a:d5:33:93:4f:06:4a:c2:
03:bd:80:44:a1:85:29:ce:7e:57:2c:d1:7a:b1:ca:61:5f:b5:
e7:90:12:ba:9d:c4:b1:3e:b6:71:62:d5:7c:44:3f:9c:a4:b4:
a4:e3:6e:ee:24:54:e2:4d:e4:03:af:63:e5:af:a6:de:c9:7b:
5c:a1:f7:cc:ff:e4:19:95:c2:7c:2a:e6:58:cb:c0:dc:d9:9e:
e3:43:3d:af:79:7c:b6:ff:e3:5c:40:41:39:d4:bc:f8:d3:78:
5e:6e:cf:7b:a4:6a:b1:e2:a2:4d:aa:54:fc:b4:57:95:7a:e9:
db:43:ab:e8:ca:d7:78:d0:81:02:1c:71:b2:e3:2c:5b:0a:8d:
e3:4d:27:25:2c:a9:c5:3d:d8:bf:ae:f0:1d:20:4c:30:a4:2f:
3c:65:93:13:75:4f:33:29:db:fa:56:ea:f5:94:67:37:22:c8:
12:01:c1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org