Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92F6CDBE02F611EFB47C810C017001B1.roa
File: 92F6CDBE02F611EFB47C810C017001B1.roa (raw, json)
Hash identifier: gD6Kq+nbLBPXrWQtmhyLL7u1/48VlTOn+BINUiWpEtk=
Subject key identifier: 3C:99:27:E2:3C:53:79:89:9B:94:7E:35:9A:6F:5E:54:8E:39:90:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8507
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92F6CDBE02F611EFB47C810C017001B1.roa
Signing time: Thu 25 Apr 2024 11:25:52 +0000
ROA not before: Thu 25 Apr 2024 11:25:49 +0000
ROA not after: Sun 05 May 2024 11:25:49 +0000
asID: 21859
IP address blocks: 45.196.136.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34055 (0x8507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 11:25:49 2024 GMT
Not After : May 5 11:25:49 2024 GMT
Subject: CN=662a3dc0-f07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:9a:6f:c5:50:51:8d:2d:e2:e3:43:1a:5d:
96:7a:fb:99:41:66:bf:6e:50:6c:96:81:26:18:98:
83:08:09:ae:8b:ef:32:21:45:2d:b5:b3:b4:a3:c0:
c0:ea:f8:bc:8e:56:e3:43:49:c3:ff:d5:eb:f5:a5:
94:f0:f6:c0:d6:be:bd:8d:c9:c0:bb:68:20:de:9b:
98:49:5d:c6:7c:a5:30:f0:1e:5f:96:97:74:bd:8c:
ef:d3:91:41:96:63:e4:04:bd:52:70:ed:38:c2:1d:
cb:5d:06:b3:a7:e3:b2:71:41:7f:4f:9d:bc:72:ac:
4c:8c:a6:6b:45:f5:8f:d7:28:64:c1:5b:23:f1:13:
f4:2c:79:8e:09:76:77:2d:5e:30:76:e4:97:a8:4d:
cf:e7:37:e1:0a:3d:9d:34:0f:e3:fe:7a:aa:1a:6c:
4f:0e:55:c7:4f:96:c6:45:70:4b:66:78:fa:b0:df:
56:b8:1f:15:93:2d:e8:5e:e0:d1:4f:80:02:b5:8c:
62:d0:95:34:18:fb:24:8b:5b:cd:f5:52:19:9c:65:
bb:48:4b:a2:bc:31:a0:70:32:ce:c1:8f:30:02:9f:
14:eb:1c:77:6f:a2:52:4a:d4:9e:7d:d6:08:db:01:
6e:2b:18:04:93:eb:06:96:dd:bd:d5:d7:f6:d4:53:
88:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:99:27:E2:3C:53:79:89:9B:94:7E:35:9A:6F:5E:54:8E:39:90:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92F6CDBE02F611EFB47C810C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.136.0/23
Signature Algorithm: sha256WithRSAEncryption
03:35:3e:a6:be:8a:fa:4a:9f:f3:24:f2:3a:0b:eb:82:d4:ee:
96:b4:c8:25:da:13:41:a2:e0:8b:31:16:8e:42:73:4c:89:cc:
80:62:66:2b:08:71:f9:d6:8f:8e:b4:3f:64:76:e2:73:2c:ea:
67:2d:32:af:0f:d6:5f:32:78:8a:eb:72:85:14:8b:98:6d:05:
e1:44:bb:32:c6:96:ec:6e:b9:cd:4c:3b:c4:86:29:c0:f1:94:
41:66:2f:b6:1a:0b:a7:1a:6d:87:06:8d:0a:06:0d:23:3d:7e:
67:53:55:19:32:18:47:bc:c5:a3:59:94:b4:8e:df:f5:9e:e7:
de:66:89:dc:12:07:4f:a0:a7:8d:e2:7f:53:75:81:8b:7e:e3:
eb:46:28:b1:a5:a5:ec:7b:ff:dd:be:8c:d8:b6:04:ef:d1:cf:
31:65:82:94:b8:54:1c:e2:7e:45:f2:25:e8:8f:09:9e:dc:4e:
92:28:82:09:61:f4:59:10:97:e5:4d:c5:1e:3f:24:5c:17:e7:
75:d1:61:34:13:a6:c2:4b:25:e1:58:7f:98:7e:5a:16:93:d4:
5e:ad:3a:75:68:e7:87:39:f4:86:5b:00:b9:2c:28:54:aa:8c:
ee:07:f7:7b:8f:55:17:67:77:30:a6:72:8e:c0:d4:27:52:57:
93:be:9f:f3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIUHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDI1MTEyNTQ5WhcNMjQwNTA1MTEyNTQ5WjAYMRYw
FAYDVQQDEw02NjJhM2RjMC1mMDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtuCab8VQUY0t4uNDGl2WevuZQWa/blBsloEmGJiDCAmui+8yIUUttbO0
o8DA6vi8jlbjQ0nD/9Xr9aWU8PbA1r69jcnAu2gg3puYSV3GfKUw8B5flpd0vYzv
05FBlmPkBL1ScO04wh3LXQazp+OycUF/T528cqxMjKZrRfWP1yhkwVsj8RP0LHmO
CXZ3LV4wduSXqE3P5zfhCj2dNA/j/nqqGmxPDlXHT5bGRXBLZnj6sN9WuB8Vky3o
XuDRT4ACtYxi0JU0GPski1vN9VIZnGW7SEuivDGgcDLOwY8wAp8U6xx3b6JSStSe
fdYI2wFuKxgEk+sGlt291df21FOIPQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDyZ
J+I8U3mJm5R+NZpvXlSOOZDYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MkY2Q0RCRTAyRjYxMUVGQjQ3QzgxMEMwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcSIMA0GCSqGSIb3DQEBCwUA
A4IBAQADNT6mvor6Sp/zJPI6C+uC1O6WtMgl2hNBouCLMRaOQnNMicyAYmYrCHH5
1o+OtD9kduJzLOpnLTKvD9ZfMniK63KFFIuYbQXhRLsyxpbsbrnNTDvEhinA8ZRB
Zi+2GgunGm2HBo0KBg0jPX5nU1UZMhhHvMWjWZS0jt/1nufeZoncEgdPoKeN4n9T
dYGLfuPrRiixpaXse//dvozYtgTv0c8xZYKUuFQc4n5F8iXojwme3E6SKIIJYfRZ
EJflTcUePyRcF+d10WE0E6bCSyXhWH+YfloWk9RerTp1aOeHOfSGWwC5LChUqozu
B/d7j1UXZ3cwpnKOwNQnUleTvp/z
-----END CERTIFICATE-----
Generated at Mon May 6 02:29:26 2024 by rpki-client on console-fra.rpki-client.org