Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A86E7796FDB711EC9A9B76EDF1222468.roa
File: A86E7796FDB711EC9A9B76EDF1222468.roa (raw, json)
Hash identifier: mSptgbczFfaPhabtTPVNaPK6eGvSxqKHci9nTbNxHb0=
Subject key identifier: 1D:23:39:A6:2C:AE:68:E8:98:41:9D:F2:68:64:50:06:4F:C3:56:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1540
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A86E7796FDB711EC9A9B76EDF1222468.roa
Signing time: Thu 07 Jul 2022 05:42:59 +0000
ROA not before: Thu 07 Jul 2022 05:42:55 +0000
ROA not after: Fri 30 Dec 2022 05:42:55 +0000
asID: 328608
IP address blocks: 45.194.52.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5440 (0x1540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 05:42:55 2022 GMT
Not After : Dec 30 05:42:55 2022 GMT
Subject: CN=62c67263-2527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:44:b6:d3:47:46:b4:4d:b3:02:4c:71:e0:35:
5f:65:0d:c7:75:bc:9b:78:47:b7:00:a9:36:6a:2f:
e5:1e:78:b3:c0:92:56:72:a8:3e:46:19:45:df:b1:
88:28:3e:02:98:db:2e:8c:c4:25:12:e7:d2:6f:eb:
0d:b9:0e:ac:d0:6b:a0:d0:d5:9b:d7:f3:cd:12:cc:
8b:0c:94:dd:07:98:99:aa:33:31:84:57:d4:18:9d:
e1:4f:3b:ec:82:d2:fd:49:87:fa:eb:08:26:07:1e:
b9:c2:cb:a8:99:7f:4d:d2:13:01:58:c3:27:4c:74:
70:11:8b:05:22:f1:c5:7f:5f:4e:d4:fe:73:67:f9:
54:ba:86:ad:16:5a:ed:14:1f:18:7b:2f:b3:f1:83:
af:28:38:85:1b:95:6e:95:2f:3f:3b:e7:13:c0:a1:
80:2c:94:84:f5:40:aa:49:88:11:f1:4d:1a:02:79:
6b:f4:a2:92:62:84:a7:ab:b2:e8:fa:aa:b0:78:7f:
10:f9:46:0f:36:c5:fa:a8:0b:ef:cd:2d:d4:0e:5c:
4e:de:b7:73:36:92:e7:ea:56:b6:73:24:32:a3:8d:
e7:42:55:ed:42:bc:87:a0:19:b4:b7:58:de:93:f8:
4d:d0:86:6e:f3:d5:25:68:7a:6f:a2:e8:6b:b5:e7:
1d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:23:39:A6:2C:AE:68:E8:98:41:9D:F2:68:64:50:06:4F:C3:56:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A86E7796FDB711EC9A9B76EDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.52.0/23
Signature Algorithm: sha256WithRSAEncryption
77:88:92:b2:92:c7:96:cf:2b:b8:97:07:b0:10:06:65:30:07:
de:b4:85:dc:9a:ca:9e:0a:80:cf:ee:b6:be:de:d6:35:a3:e5:
33:85:61:9b:d5:1e:78:9d:49:91:ab:d7:5e:1a:5f:d0:fe:e3:
20:7d:e6:71:09:0f:d6:ff:99:02:b5:8c:c2:bd:13:9c:09:63:
96:03:fa:07:c3:80:e3:ed:7f:46:d7:41:6f:30:1f:5c:71:65:
f6:17:97:b5:59:93:67:45:55:1f:4d:a8:3e:0c:63:84:63:9d:
3f:72:4a:c7:c8:ee:65:6d:2d:ed:3f:ef:32:5b:06:65:c8:3b:
54:5a:af:83:cf:0a:fc:2a:fb:1e:d5:75:78:82:72:f2:8f:54:
44:a0:13:35:64:54:b2:0b:24:f0:57:1f:92:b6:91:ee:fd:20:
38:34:26:01:e4:c1:2c:18:87:a6:9d:07:be:ad:bc:00:7a:1b:
92:11:f5:9e:90:a7:f0:4e:6b:ac:98:0a:a5:2f:dc:4e:ea:8d:
a7:14:aa:ab:7f:96:0e:a3:c1:0f:27:ff:c5:0b:ef:a0:61:4d:
e3:35:b0:93:9f:b0:50:78:65:ff:72:4b:5e:17:7c:e0:02:d1:
8a:74:d5:68:e3:25:47:b2:30:4a:89:95:f8:a3:cf:12:16:4c:
54:84:b5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:23 2023 by rpki-client on console-ams.rpki-client.org