Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3261F68018A11EFAC38886E017001B1.roa
File: A3261F68018A11EFAC38886E017001B1.roa (raw, json)
Hash identifier: MEB9p8m48k6kGVhI72dpVg2SG1cpgbISEnyTry636KA=
Subject key identifier: 86:ED:F3:D7:BE:B6:DD:09:8A:A9:D6:2B:B3:81:41:7F:21:A1:F3:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 84A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3261F68018A11EFAC38886E017001B1.roa
Signing time: Tue 23 Apr 2024 16:00:43 +0000
ROA not before: Tue 23 Apr 2024 16:00:39 +0000
ROA not after: Wed 01 May 2024 16:00:39 +0000
asID: 136970
IP address blocks: 45.195.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33959 (0x84a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 16:00:39 2024 GMT
Not After : May 1 16:00:39 2024 GMT
Subject: CN=6627db2b-43c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:70:64:d9:fb:5d:e3:41:46:b9:57:92:f2:7c:
84:f9:66:4f:ff:27:6e:64:f3:f1:60:51:70:44:f0:
51:6e:9f:03:9f:a9:f9:a0:e8:a8:fc:03:45:c9:06:
5a:3e:ec:92:ea:ed:73:d1:9a:a5:62:8c:27:fa:f4:
02:a6:41:2e:ad:17:b0:a6:2f:fc:38:8e:73:66:2e:
0d:5d:07:ed:67:9f:45:63:d5:8c:35:e7:a8:2a:4e:
d3:93:56:db:e0:57:0e:fa:2c:f0:65:32:e8:6a:58:
06:a0:4a:6a:2c:eb:a3:3f:cb:f4:ce:b5:da:9d:f9:
52:9e:d2:d2:24:b6:e3:56:00:c0:4d:2a:cf:e1:fb:
e6:f0:ab:15:7b:63:9f:de:85:03:c4:89:7b:87:e3:
67:1a:51:04:f5:11:df:72:49:df:44:5f:db:af:ea:
bc:2d:b8:8c:c8:62:3a:46:a1:fd:4f:8f:50:39:60:
0f:45:e1:66:96:c6:ed:07:2e:2a:14:ac:66:f0:b5:
60:c7:67:42:63:68:c2:c7:02:aa:4b:21:9e:ec:75:
e7:32:70:f6:fc:9f:17:8c:b5:b5:4e:d9:e9:e9:56:
f1:65:c9:a9:73:c4:63:e3:0a:21:48:62:3c:59:bd:
9b:83:d9:65:8a:6b:34:65:58:40:33:56:ac:52:a7:
f7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:ED:F3:D7:BE:B6:DD:09:8A:A9:D6:2B:B3:81:41:7F:21:A1:F3:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3261F68018A11EFAC38886E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.201.0/24
Signature Algorithm: sha256WithRSAEncryption
05:de:ea:0b:3b:53:48:77:a9:ba:d9:28:3f:54:7a:ac:e2:99:
3f:25:78:4a:55:71:34:27:60:bf:2d:4d:ce:ef:1b:c3:aa:3d:
58:7e:a3:ec:36:ff:63:04:01:94:41:8d:df:80:6a:f5:7e:55:
48:34:58:38:e8:ec:a0:5c:f2:c2:ca:08:75:cd:56:c8:85:f2:
13:ab:42:26:b2:ec:e0:e1:a3:d1:5f:51:86:64:ef:3b:e5:65:
fc:91:b1:36:e5:12:6d:af:e7:74:00:e2:db:67:51:38:cf:82:
a3:17:08:3f:63:00:fa:92:68:05:10:a6:cb:df:16:6d:e6:34:
d7:81:0a:6a:7d:6c:22:2c:1a:1d:5c:ff:c6:60:ec:29:21:84:
f3:2b:91:b6:94:07:33:1d:3b:68:c6:5f:7b:02:45:5b:70:6d:
f2:8a:77:e1:61:88:4c:9e:9b:ca:9d:ac:f9:80:1a:d5:e7:70:
d7:7f:86:37:0a:af:58:41:69:c6:1d:d2:07:2d:27:6b:c1:1c:
ca:d4:1a:5a:d7:09:cf:89:d2:b9:41:33:03:98:15:6a:57:ab:
bc:3e:82:1f:f5:c1:96:3e:be:46:17:fb:3e:fd:15:ac:45:5f:
7f:12:f8:09:35:cf:4a:8c:d5:01:ee:40:35:27:2d:ac:72:bb:
b2:da:27:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:38:49 2024 by rpki-client on console-ams.rpki-client.org