Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/892AAD0C47DC11EF9398EE77762E951A.roa
File: 892AAD0C47DC11EF9398EE77762E951A.roa (raw, json)
Hash identifier: wFsvxc+b+S1XJcdIT4ODPxSOzN9nsvp8lgD9W6fie4Q=
Subject key identifier: B8:3F:9F:58:DB:F9:43:4F:1C:D1:B1:B1:76:2F:3D:E6:C0:D0:42:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E01
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/892AAD0C47DC11EF9398EE77762E951A.roa
Signing time: Mon 22 Jul 2024 03:43:19 +0000
ROA not before: Mon 22 Jul 2024 03:43:16 +0000
ROA not after: Fri 23 Aug 2024 03:43:16 +0000
asID: 48031
IP address blocks: 45.200.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40449 (0x9e01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 03:43:16 2024 GMT
Not After : Aug 23 03:43:16 2024 GMT
Subject: CN=669dd557-405a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:15:0e:e6:53:c1:19:ee:b5:8b:a3:85:f6:df:
bd:b5:a8:4a:33:94:b8:36:80:89:dc:07:af:24:dc:
47:a3:24:ab:3f:0a:80:00:c4:07:47:c6:e8:69:99:
7b:af:9d:7b:5b:7f:f7:ea:35:4e:25:29:8c:18:dc:
15:eb:a7:6d:30:b1:1b:b5:3c:a6:a3:bd:21:98:c3:
29:39:42:0e:51:b7:45:fd:b6:88:d1:07:00:f8:ce:
fe:ad:3a:2f:5f:07:ea:60:65:5a:04:ba:37:fb:f2:
c7:a1:49:bb:20:d4:fe:a8:30:a7:45:59:d1:7f:e4:
25:f1:a3:46:90:71:74:c6:f0:41:bc:c2:a1:50:00:
ee:05:ba:49:60:0e:5c:47:60:b4:3c:c9:53:bc:eb:
c3:f3:2d:a6:c4:e7:a6:4b:a6:51:8d:63:1d:4c:f3:
30:71:e0:e2:e7:a3:f0:d0:9c:ef:a0:3b:b6:b1:fd:
c4:7b:67:1b:87:72:ec:80:85:be:f2:dd:3a:a2:26:
7d:3d:ac:37:5c:f8:e6:5d:f0:38:8f:21:9f:74:62:
55:90:c1:b9:f3:3a:f6:e6:0e:a3:de:4a:b4:bc:32:
b7:56:df:9f:d9:f6:d6:df:94:18:60:e5:b4:89:2c:
89:2a:3e:6a:2b:b8:82:01:3d:2e:93:65:f9:35:30:
2f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3F:9F:58:DB:F9:43:4F:1C:D1:B1:B1:76:2F:3D:E6:C0:D0:42:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/892AAD0C47DC11EF9398EE77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.183.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:3b:3d:97:ce:ef:59:f8:83:17:9d:c0:b6:33:e0:cd:af:38:
31:50:c3:ad:e0:a6:b3:5c:df:1a:bd:bf:a8:ff:cc:aa:e8:79:
35:0f:80:81:4e:de:37:d8:fc:40:e7:4b:5e:18:00:96:6f:87:
68:2c:d7:3a:39:6a:4f:63:28:7f:bb:59:0c:54:cb:56:20:ff:
16:2d:1f:cf:fc:65:ae:fd:0b:a6:2b:f1:1b:08:53:a4:61:ab:
a4:af:2c:16:8b:03:c6:e3:06:63:91:3c:df:6d:4a:66:55:d6:
96:75:e7:13:7b:91:69:0d:db:15:a4:c7:11:30:3d:b0:28:02:
75:dd:e8:12:f3:b0:1a:dc:f4:0c:34:a7:0f:10:a4:c5:01:32:
50:0d:96:d9:47:93:a9:88:39:e7:d9:c7:41:3c:b5:0f:6f:6d:
bd:24:66:28:bf:85:74:1b:10:f0:49:81:18:fc:17:39:f8:7c:
8a:42:d9:4e:c6:58:b7:67:1c:5c:d0:b0:bc:de:26:c7:6b:96:
40:8a:06:a0:34:d1:ce:d5:18:83:46:2d:ff:69:14:fa:bd:26:
a6:5d:32:0d:17:d6:f3:d3:a2:f2:c7:36:08:c2:16:84:4e:d3:
9d:b0:02:15:cc:32:4c:b0:06:3a:28:1b:45:9e:1d:05:b9:fc:
74:7e:65:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:48 2024 by rpki-client on console-fra.rpki-client.org