Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9612B3F8039311EFA621C70D017001B1.roa
File: 9612B3F8039311EFA621C70D017001B1.roa (raw, json)
Hash identifier: 2/TGux/T24sPreTxim/vPtvY8XZMlOAdFg9J/HGWD0Q=
Subject key identifier: 96:76:A7:6A:B4:24:8D:69:97:3F:3E:6C:3F:F6:B7:EE:B0:97:D2:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8640
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9612B3F8039311EFA621C70D017001B1.roa
Signing time: Fri 26 Apr 2024 06:09:49 +0000
ROA not before: Fri 26 Apr 2024 06:09:45 +0000
ROA not after: Sun 05 May 2024 06:09:45 +0000
asID: 139646
IP address blocks: 45.201.230.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34368 (0x8640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 06:09:45 2024 GMT
Not After : May 5 06:09:45 2024 GMT
Subject: CN=662b452d-bc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d7:0c:3c:54:dd:0a:a6:2b:3a:36:2f:94:0f:
39:e7:f2:cf:c8:39:62:ce:cb:7c:16:33:b4:04:b6:
9e:1e:e1:f6:be:57:d9:89:27:7f:07:5f:98:d6:90:
5c:80:84:d0:9c:4a:f3:5e:08:65:84:90:98:fe:d0:
d2:6d:a2:3a:f6:ec:fe:99:6c:5d:af:c8:d3:e6:f0:
ac:eb:41:73:68:2d:75:ee:d4:c5:04:84:b1:8e:b4:
f6:dd:06:83:6e:43:1d:ba:ff:95:66:40:55:3b:18:
0f:da:fe:9a:16:48:c0:63:d7:15:e8:10:70:cb:83:
84:04:93:e7:e5:1f:b7:e0:b0:bf:29:fc:ea:38:0a:
86:a9:a3:2f:c2:a0:2c:69:b5:f1:d2:ec:4b:cc:b1:
f5:8f:b3:48:c9:76:66:3b:2a:75:36:20:cb:70:ed:
90:9e:fb:8c:6f:2b:bd:fd:a0:ec:ad:bc:21:25:86:
76:b1:fb:fc:55:a9:0d:6d:b3:fb:3d:75:3d:fb:7b:
4b:fe:ce:84:17:76:a8:32:97:25:15:dc:cd:33:f0:
7b:1d:0d:85:05:83:a5:6d:27:49:65:e9:cf:c4:3b:
b7:7c:f7:d9:d5:f9:18:78:2a:96:5a:94:50:36:a5:
e7:d5:bd:3c:a1:61:35:26:71:4a:15:76:25:7a:5a:
d5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:76:A7:6A:B4:24:8D:69:97:3F:3E:6C:3F:F6:B7:EE:B0:97:D2:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9612B3F8039311EFA621C70D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.230.0/23
Signature Algorithm: sha256WithRSAEncryption
85:8c:8f:1a:84:6c:6d:d2:57:5f:0d:49:c5:43:4c:14:ce:75:
f2:9a:04:82:b0:2a:bc:de:76:02:60:6a:dc:37:c8:b3:47:7a:
ce:94:1a:27:50:78:93:51:92:1c:90:d4:de:53:5b:72:7c:80:
f6:71:f6:7b:c5:25:f9:70:78:3c:13:04:10:4d:74:36:a6:67:
cb:a8:96:b3:99:39:6b:d6:00:ee:95:ff:40:eb:47:f5:f4:7a:
0c:0c:02:b1:98:37:48:14:11:7a:16:68:0e:77:c1:4a:2b:4f:
d7:9a:3d:04:c0:57:03:b0:e6:8d:5c:16:f7:5d:88:fa:29:1f:
62:c9:fc:30:97:fc:71:45:40:9e:28:5b:85:0f:4e:c3:04:be:
11:3b:5f:f2:3e:78:25:a1:90:fa:4d:63:d0:8a:a4:32:69:e4:
18:9d:0c:a1:d2:5d:2b:af:29:de:d4:31:41:85:ac:37:13:63:
bf:56:43:6e:bb:ab:29:da:d7:82:33:e1:41:b1:d1:39:a3:c4:
ab:bb:68:da:2d:61:18:13:64:60:39:a7:57:f7:2f:6f:e1:8c:
a6:b6:f3:ef:b1:5d:c1:96:20:e6:69:0a:a1:3e:29:50:03:40:
fe:0d:42:4b:83:29:13:c4:4a:00:d4:8e:13:6e:25:3d:77:4b:
d7:e7:98:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:29:26 2024 by rpki-client on console-fra.rpki-client.org