Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3858EB4E89911EC9C4D69D0F1222468.roa
File: A3858EB4E89911EC9C4D69D0F1222468.roa (raw, json)
Hash identifier: QfmBjz0VBtsWDwqFBXTynnOg/3tm4xa/IzgXslP7VDw=
Subject key identifier: 9F:01:AB:B2:5A:00:F2:B0:2D:C2:0F:4E:F6:DB:6F:5D:76:6A:68:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 14BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3858EB4E89911EC9C4D69D0F1222468.roa
Signing time: Fri 10 Jun 2022 08:45:11 +0000
ROA not before: Fri 10 Jun 2022 08:45:08 +0000
ROA not after: Tue 28 Feb 2023 08:45:08 +0000
asID: 133199
IP address blocks: 45.207.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5311 (0x14bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 08:45:08 2022 GMT
Not After : Feb 28 08:45:08 2023 GMT
Subject: CN=62a30497-b83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:f9:36:0f:d1:47:c0:a7:9c:5c:db:84:83:
a8:df:b0:e1:98:da:43:7d:b9:41:c8:73:48:7e:b0:
b4:34:65:11:1e:57:ab:a5:e9:b7:aa:44:a9:e1:d8:
da:76:e7:5d:73:3a:7d:c7:56:f4:4c:66:b8:00:ea:
15:31:1a:c2:5f:ca:99:66:48:ed:38:ae:67:3b:a3:
76:c7:2e:5c:fe:82:cd:0b:5d:22:99:67:d9:78:1c:
7a:55:2a:ee:fa:5d:3b:c0:e7:77:4d:f0:37:a3:c2:
6c:b2:8e:5e:85:71:0f:ac:88:a8:c1:c2:44:f8:06:
41:32:1c:3e:0c:41:74:bc:5a:77:8a:58:30:51:e1:
fd:51:ef:91:9c:06:63:3e:5d:bc:fe:a2:f6:19:4d:
ab:e1:00:fb:1d:9a:29:de:97:e1:54:7c:0b:49:a3:
5a:44:8d:48:e3:e7:dc:ca:47:dc:99:52:85:55:82:
7d:bf:82:90:23:ba:8f:ce:7a:18:79:62:46:97:b4:
dc:fe:38:c6:79:e0:71:63:3a:24:36:3d:a7:1e:0f:
96:65:51:8f:06:1c:d4:a6:20:25:2b:6d:9f:1b:42:
06:e8:a9:dc:68:b6:6b:c2:bc:b4:ca:dd:d0:97:6d:
f4:af:7e:d8:fa:70:6b:84:23:aa:51:d6:41:74:5f:
19:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:01:AB:B2:5A:00:F2:B0:2D:C2:0F:4E:F6:DB:6F:5D:76:6A:68:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3858EB4E89911EC9C4D69D0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.55.0/24
Signature Algorithm: sha256WithRSAEncryption
20:86:c1:a3:02:df:d5:83:67:cd:da:08:be:a1:20:99:c1:13:
10:fa:ca:16:c4:18:6b:00:81:67:4a:4f:e9:82:a9:24:a5:69:
7a:6d:5e:4d:20:b2:6f:25:0f:33:63:04:43:09:a0:80:10:3d:
8b:b0:7b:92:55:8b:4a:1e:e3:28:f8:ea:25:be:37:b9:57:5d:
21:0e:9a:a1:0c:90:81:dc:3e:b3:85:23:93:37:cd:84:cc:7a:
3c:29:69:7e:72:78:26:05:b3:20:b8:12:ae:47:a5:4f:7f:ca:
06:61:d3:11:7a:8d:b3:59:97:9c:e8:5c:b9:ea:01:a4:07:c3:
9d:3f:19:4e:f1:7f:27:4d:33:da:87:c8:59:9d:09:87:b4:4f:
45:da:47:81:e3:e1:3c:21:6a:39:81:93:f2:71:f1:6a:d4:c8:
aa:33:62:9d:41:0c:6f:16:73:0b:50:3e:e1:d2:cd:7f:0e:81:
f5:15:89:93:3d:19:d1:40:70:c9:03:45:fb:25:e0:bd:a1:40:
46:29:bc:a4:11:ad:0b:05:77:ff:5b:80:a2:70:fa:64:24:ec:
fd:a8:a5:0e:73:ab:26:48:4c:e5:09:5e:01:bb:27:7b:2e:59:
14:9d:0b:95:2c:d4:09:7a:80:07:f6:66:77:98:a3:f9:ce:d4:
72:80:0d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-ams.rpki-client.org