Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C9B504E987111ECA90B15965A40D577.roa
File: 8C9B504E987111ECA90B15965A40D577.roa (raw, json)
Hash identifier: C1C6pRFy+Q+LUvnX6QocJvv5IrFPeaAJdFNjCARPlsQ=
Subject key identifier: A4:54:C8:B3:34:AB:22:71:CE:5F:92:F3:D2:28:3A:10:E8:0F:04:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1218
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C9B504E987111ECA90B15965A40D577.roa
Signing time: Mon 28 Feb 2022 08:36:40 +0000
ROA not before: Mon 28 Feb 2022 08:36:36 +0000
ROA not after: Fri 30 Dec 2022 08:36:36 +0000
asID: 328608
IP address blocks: 45.196.152.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4632 (0x1218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 28 08:36:36 2022 GMT
Not After : Dec 30 08:36:36 2022 GMT
Subject: CN=621c8998-9d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:a6:9e:01:87:71:71:84:69:94:d0:a2:f5:
82:5f:89:c2:d0:fe:f1:5d:a0:da:18:e2:1a:34:12:
80:aa:57:4b:c3:23:ea:b6:86:85:9f:b2:d3:6b:9d:
fb:f2:13:58:e4:67:68:24:e7:1b:f6:59:30:2d:17:
f2:1d:08:63:43:da:b4:86:bd:f5:8d:40:38:f2:90:
29:57:0c:e3:6d:42:56:65:0d:23:92:f0:09:33:60:
22:28:43:3b:1c:68:63:90:74:31:4f:00:5b:2c:dc:
fd:18:bd:5b:47:7f:cc:ea:f7:52:42:27:e1:34:f8:
50:44:95:8e:2e:ab:8f:d3:85:76:75:e0:a2:b6:4f:
48:09:74:4f:9c:94:6e:48:5a:02:63:d3:0f:80:30:
9d:50:73:15:f1:64:5d:17:27:a4:c2:e2:b5:ed:c0:
ec:a3:7e:05:56:a2:7f:ef:a3:e2:73:e5:48:71:b2:
42:60:69:03:37:69:48:96:27:4a:d0:88:ee:5f:df:
e2:69:4b:ef:7f:fc:46:89:b5:60:67:b7:e7:d5:48:
7f:1f:6e:38:6d:cc:87:77:16:79:24:5b:a5:9c:10:
fe:76:c8:8c:17:71:78:43:bc:f0:3e:1e:02:12:0d:
88:4f:0b:d0:ee:72:9d:c2:fb:81:a1:e2:f5:a5:ba:
0f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:54:C8:B3:34:AB:22:71:CE:5F:92:F3:D2:28:3A:10:E8:0F:04:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C9B504E987111ECA90B15965A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.152.0/21
Signature Algorithm: sha256WithRSAEncryption
01:45:38:ec:ca:73:21:19:73:97:e0:be:b5:bc:4f:c0:48:c4:
a6:2a:dc:ba:26:23:97:be:d7:f3:22:5a:67:43:ba:fe:c8:e2:
72:5e:86:02:89:c2:0b:47:d4:68:04:ba:73:48:b5:be:2e:27:
e1:35:95:e8:39:bf:b5:7f:c4:36:38:56:74:8d:87:ac:02:d4:
3b:94:69:92:7f:53:46:4b:95:55:5a:bb:cf:a3:98:14:f6:9d:
29:a1:23:5d:6a:a1:f6:65:c5:82:3f:ac:1d:a8:6d:e3:22:51:
90:ce:da:6a:52:5b:fc:f9:b2:fd:49:b3:79:81:70:44:48:06:
dd:26:52:f4:7a:67:a0:4a:d2:46:41:af:13:d4:e7:21:07:af:
e7:9c:73:47:3d:2d:2f:4a:63:29:f0:28:73:42:13:3a:f8:28:
bc:df:8c:92:c8:6a:00:39:b8:04:a9:a1:71:01:a3:1e:85:41:
18:3b:02:86:e7:7c:dc:51:c2:61:e0:fc:86:70:9d:27:3d:5d:
03:9f:73:6b:7d:62:d4:5b:5f:e9:1f:50:17:d7:85:7a:ec:3c:
57:49:42:cf:da:e6:65:15:c2:37:ec:e2:32:d0:9d:97:ce:ba:
66:29:dd:e9:f5:a6:b4:69:fc:87:34:4d:f0:bd:35:24:37:41:
73:4f:a9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:21 2023 by rpki-client on console-ams.rpki-client.org