Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAE4E344EDE411EC93AF25A1F1222468.roa
File: AAE4E344EDE411EC93AF25A1F1222468.roa (raw, json)
Hash identifier: iODZvSE4zoo6aecyDzvvSut3LYtyCtDatAb9LVKqRDw=
Subject key identifier: 04:81:A2:7B:2A:AA:CA:87:31:46:9B:72:71:84:00:7B:77:D6:4A:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 14F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAE4E344EDE411EC93AF25A1F1222468.roa
Signing time: Fri 17 Jun 2022 02:24:52 +0000
ROA not before: Fri 17 Jun 2022 02:24:46 +0000
ROA not after: Fri 30 Dec 2022 02:24:46 +0000
asID: 328608
IP address blocks: 45.194.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5360 (0x14f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 02:24:46 2022 GMT
Not After : Dec 30 02:24:46 2022 GMT
Subject: CN=62abe5f4-7da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:85:37:64:bb:31:1d:cf:cd:24:c7:68:e0:33:
58:a8:78:74:65:94:a2:91:ca:18:fd:ab:ba:59:af:
4f:a4:43:f8:aa:3d:5b:5b:71:eb:77:c6:cf:73:2a:
3f:60:94:b9:07:49:a5:7c:58:3f:fe:dc:bc:ff:33:
2a:b6:2b:97:4e:eb:d8:11:29:91:8b:72:42:cf:63:
e6:75:1a:8d:e6:8c:54:c8:b3:c3:e9:cb:fb:82:1c:
95:e3:0f:ea:41:72:ce:6c:0f:df:82:7b:94:54:14:
b2:3b:c2:37:7c:df:80:73:6a:5a:e7:f2:a8:84:a0:
35:2f:ab:a8:17:40:6f:e6:fd:fe:86:ef:12:cb:57:
77:c9:a1:e8:90:f0:be:56:ed:23:7a:a1:13:d9:87:
59:2f:c8:95:5a:fc:9d:ba:63:40:08:c4:f1:ea:55:
36:97:f5:0d:3d:3c:2e:38:e5:89:b7:3f:41:98:7d:
0c:bd:e7:ca:9f:cb:5b:d1:b0:f8:16:33:e8:b5:25:
f9:56:06:6c:40:31:36:3b:05:96:4d:37:37:a0:06:
81:b7:9b:1c:df:cc:be:29:fe:61:76:84:ba:64:88:
c6:d5:d9:20:09:3c:2d:42:d8:46:2e:1d:85:75:d1:
ef:d5:10:9f:49:be:1a:ad:a9:e4:40:ad:c1:e0:66:
9b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:81:A2:7B:2A:AA:CA:87:31:46:9B:72:71:84:00:7B:77:D6:4A:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAE4E344EDE411EC93AF25A1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.192.0/19
Signature Algorithm: sha256WithRSAEncryption
25:82:4a:32:23:9c:46:8e:bd:c8:dc:f8:49:56:63:1c:01:5e:
14:9f:7a:50:30:59:da:3c:ff:90:a5:9b:89:0c:30:bf:42:6a:
65:a4:06:00:ed:bc:cc:2a:e6:7e:7b:b1:99:aa:a6:df:cb:77:
22:82:54:8d:69:16:e8:7b:e5:2e:6a:0d:df:a6:e6:be:93:ab:
9b:49:b6:84:69:54:cb:45:c9:bf:a0:4f:3e:79:b8:85:92:b9:
82:d5:d2:b8:b3:42:32:af:88:e5:18:5c:c7:40:f4:ab:25:f6:
3e:d7:d1:b2:8a:d9:4d:7e:31:80:89:0d:47:c9:a3:e7:53:65:
80:48:13:14:4c:36:45:5e:82:a6:fa:ba:66:99:53:c8:dc:45:
17:8a:03:2a:19:d0:fb:a5:ac:d7:e8:c6:25:a1:fc:6a:f2:27:
28:ed:fd:be:f1:e9:4d:04:3b:8d:c1:a8:67:9e:b1:54:ed:24:
9a:c6:ce:15:51:d3:df:84:c4:27:80:29:9b:a5:ad:5c:89:4e:
88:1b:6b:f9:83:c8:4e:2c:ec:48:4d:96:6d:4d:ca:ef:67:2f:
96:c5:52:d3:fb:50:c2:47:64:8e:75:61:ec:af:42:6e:59:55:
e2:96:0e:05:ce:af:01:9d:c5:b3:d7:5f:3e:5b:36:6e:89:7a:
e4:93:bb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org