Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A125B20C13D211EDA18267A9F1222468.roa
File: A125B20C13D211EDA18267A9F1222468.roa (raw, json)
Hash identifier: RyxxPMn8v4dCoKQt/W36JsxYs37fAK1mwH/NVNiS9Ik=
Subject key identifier: 34:0C:AD:EE:A5:09:61:5E:C6:AD:69:EE:6A:1E:C6:90:76:5E:B0:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 163C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A125B20C13D211EDA18267A9F1222468.roa
Signing time: Thu 04 Aug 2022 08:51:29 +0000
ROA not before: Thu 04 Aug 2022 08:51:25 +0000
ROA not after: Fri 10 Feb 2023 08:51:25 +0000
asID: 133861
IP address blocks: 45.207.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5692 (0x163c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 4 08:51:25 2022 GMT
Not After : Feb 10 08:51:25 2023 GMT
Subject: CN=62eb8891-df74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:22:77:f2:db:b8:c1:af:04:05:f7:60:80:53:
78:ec:95:d1:32:07:1b:1b:f5:50:be:5d:1c:30:98:
ae:45:0a:ca:20:b4:ff:ef:9d:a0:7a:99:43:11:a4:
f6:73:e0:eb:b5:64:c2:bf:0a:8f:c8:67:66:1f:b6:
32:b9:99:12:b0:66:fd:a5:57:a6:22:6e:23:34:c3:
2e:1b:34:fe:d9:4d:96:b5:44:bb:0d:33:89:77:b6:
3d:d2:f6:87:69:43:e5:3a:79:af:a6:bc:27:a3:0f:
1c:4e:50:62:64:1a:85:c7:5f:bd:98:a0:70:3c:7b:
ff:ca:bd:79:e1:95:20:f8:0f:4d:2c:7d:84:cb:69:
f0:e5:6b:08:ce:d5:83:39:f8:1e:73:00:d5:cf:83:
a1:ad:51:98:4d:6f:16:5b:2b:be:42:c1:2c:4e:db:
db:c6:99:82:4a:9c:57:47:02:7e:d3:86:ee:a4:02:
17:5d:10:6d:78:a4:84:6a:e8:d0:41:fc:f2:df:29:
93:8f:22:7e:00:3d:61:42:ff:c8:e7:4c:3c:5b:1d:
b7:5f:f7:f6:a4:61:3a:c7:e9:cb:36:4f:5c:54:6e:
39:27:5b:5e:c6:da:01:45:39:a9:65:a1:82:39:4f:
fb:c7:9f:d1:55:e9:42:36:b8:2b:6d:48:26:4b:48:
57:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0C:AD:EE:A5:09:61:5E:C6:AD:69:EE:6A:1E:C6:90:76:5E:B0:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A125B20C13D211EDA18267A9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.34.0/24
Signature Algorithm: sha256WithRSAEncryption
47:9d:0c:1d:84:d6:6c:e1:2e:75:55:f5:1c:59:15:a8:ec:8b:
5c:8b:91:e7:d6:af:39:0c:1f:65:e1:16:a4:3f:00:89:0d:f3:
f0:df:3c:c7:73:79:e1:42:3a:bd:ad:49:38:f3:10:9c:b0:d2:
50:aa:65:0c:fd:a0:13:fc:69:f9:1c:9e:95:bf:87:0e:27:9b:
15:9e:ee:f5:1f:75:80:61:d8:10:b5:39:cf:d5:1a:50:ca:a5:
be:6d:1f:26:bc:72:72:ac:3a:64:ff:72:4a:27:22:c7:7e:e2:
e2:46:42:43:55:3b:7f:83:7a:42:d8:26:93:03:77:2b:80:29:
80:18:8c:05:d3:ea:e3:79:6e:5f:7c:c1:a9:46:72:2d:f4:f2:
8e:c4:8b:f1:ab:cd:4a:81:a7:18:a8:5b:52:75:74:42:c8:4d:
ce:53:d3:f3:a9:cd:95:47:36:b3:89:9a:6d:01:7a:21:90:89:
42:18:5e:a4:59:c6:fc:2c:07:cb:9d:6e:8f:d4:62:95:04:8e:
70:0c:26:6c:7c:c3:d6:e3:47:5f:ed:20:cd:50:6c:9d:db:2e:
52:20:04:05:f6:5b:15:51:8e:7d:3a:3a:94:f1:49:d7:d9:ed:
62:07:e6:aa:71:46:39:9b:94:b1:4c:5d:6f:c2:18:bd:78:ab:
c1:17:8a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org