Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1D3DA9EBEBA11EB8ADC611AF8AEA228.roa
File: A1D3DA9EBEBA11EB8ADC611AF8AEA228.roa (raw, json)
Hash identifier: C+GPEpx2aM/WNJbx63SzwMlL+vyxV+nmvLPgeIv3aXI=
Subject key identifier: C2:4C:E0:8B:9C:65:0D:EB:9D:C6:E5:1F:99:8F:43:EA:81:9A:BC:EF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0613
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1D3DA9EBEBA11EB8ADC611AF8AEA228.roa
Signing time: Thu 27 May 2021 07:10:35 +0000
ROA not before: Thu 27 May 2021 07:10:32 +0000
ROA not after: Sun 24 Jul 2022 07:10:32 +0000
asID: 212552
IP address blocks: 45.195.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1555 (0x613)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 27 07:10:32 2021 GMT
Not After : Jul 24 07:10:32 2022 GMT
Subject: CN=60af45eb-71ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:b2:92:1f:b0:a7:84:a2:10:00:92:29:bf:
5a:42:31:21:42:73:5c:01:fc:c1:9d:fe:68:9d:e0:
3a:6f:a5:65:ef:d3:b3:10:3d:b8:7b:6b:73:81:c0:
24:f3:ee:7c:da:d6:84:88:c2:b7:2e:ce:b5:5e:e2:
fc:40:ac:1d:e4:7a:46:9b:18:86:7e:3e:e8:ca:75:
9b:4c:f9:a2:a0:2c:a3:9f:b3:05:a3:7f:c9:47:05:
f5:08:6f:59:62:8f:9b:ef:3f:dc:54:40:9a:1e:b2:
58:ca:8c:25:38:d8:2b:69:ed:45:e1:cc:4f:32:90:
a3:b3:2a:22:69:96:c8:06:bc:1a:92:95:12:2f:43:
0d:ff:e9:24:7f:0e:b7:8c:a6:8f:3e:ff:31:19:a7:
83:51:9b:f9:0a:da:93:70:b7:f7:f7:98:08:a8:6f:
97:b1:23:dc:ca:ef:1f:39:dd:41:62:cf:1c:4c:e7:
f5:04:9d:db:09:8a:74:82:d1:88:ac:e4:35:90:0a:
14:6b:a2:8a:3a:bf:bf:f2:d6:99:67:5b:66:3b:8d:
b1:5b:0b:4d:33:7c:ec:26:11:da:d6:1f:6b:f9:0e:
ca:01:2f:6b:98:f6:0e:55:12:a4:18:47:f7:f8:7e:
3c:9f:9d:4c:f4:9c:13:04:13:b7:4a:2e:06:9d:7c:
34:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4C:E0:8B:9C:65:0D:EB:9D:C6:E5:1F:99:8F:43:EA:81:9A:BC:EF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1D3DA9EBEBA11EB8ADC611AF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.200.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:d5:35:87:9f:7d:4c:24:91:fa:c1:c4:6a:62:c8:88:2d:98:
12:fd:1a:48:e2:93:d0:a3:82:50:c4:11:31:fe:a0:3a:73:e7:
78:ed:26:d8:d0:82:50:8a:46:26:a0:63:40:c8:a2:71:6f:a7:
24:7e:8c:d0:03:cb:a3:f4:8e:a8:c7:61:24:db:e9:71:c9:e1:
4e:1d:27:3a:3b:c9:61:1b:94:d1:2b:c5:dc:c8:64:d6:a1:85:
eb:af:07:b2:eb:a7:34:ac:6d:66:b0:e9:9a:ba:6a:df:ea:0f:
ea:8c:4d:ab:89:ef:e3:0e:ed:87:ee:74:a8:38:bf:75:fa:6d:
81:d8:32:f8:47:05:21:68:19:77:f5:d1:dd:f7:a9:22:2a:44:
3a:91:2c:f2:62:60:0e:62:0f:f3:45:28:df:10:bb:f3:21:d3:
18:12:4d:ce:b2:34:ff:4a:f5:f8:dc:d3:91:e2:fa:4d:70:1d:
04:f7:d8:c4:82:2a:b0:d4:96:73:92:77:32:df:ec:a3:06:0a:
b5:3c:91:3a:36:e1:69:b6:fe:e9:95:e1:05:15:6f:22:d9:33:
17:57:7f:74:c9:6c:ad:16:c8:5a:4a:72:b0:fe:1d:d6:70:89:
aa:61:99:7c:6e:fb:21:24:4e:43:4f:7c:d0:7d:35:55:79:7f:
c0:17:3f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org