Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B68636D848E311EFB7C2FA70762E951A.roa
File: B68636D848E311EFB7C2FA70762E951A.roa (raw, json)
Hash identifier: bJ64D4haLj8PyqGEj2xI+pXpptvEUzxKeBluSJqLm+c=
Subject key identifier: 2F:EE:3C:90:97:47:B9:CB:69:D3:B6:F5:BB:10:1A:D0:EF:68:39:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9EC4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B68636D848E311EFB7C2FA70762E951A.roa
Signing time: Tue 23 Jul 2024 11:07:13 +0000
ROA not before: Fri 26 Jul 2024 11:07:09 +0000
ROA not after: Thu 01 Aug 2024 11:07:09 +0000
asID: 39159
IP address blocks: 45.194.120.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40644 (0x9ec4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 11:07:09 2024 GMT
Not After : Aug 1 11:07:09 2024 GMT
Subject: CN=669f8ee1-46da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:56:ea:24:b1:19:e6:26:6f:4d:98:cc:22:60:
55:73:25:bb:6f:80:c8:af:af:58:8a:fa:bf:1b:44:
1d:f7:42:16:b4:46:84:16:94:18:b7:0c:a4:f2:8b:
2b:9f:91:ea:2a:25:5a:e1:08:13:a3:ef:f0:70:2f:
15:e7:96:38:3b:74:5a:65:61:dd:79:f5:71:59:13:
86:ef:32:ce:26:07:18:b0:2c:af:23:6d:e9:50:df:
6a:88:38:e5:de:07:3a:44:9f:04:d5:35:fb:a7:31:
f8:53:35:31:00:e5:a2:cd:0b:2c:d4:e8:f4:ec:8e:
2b:eb:e5:61:46:75:d7:d7:c0:4f:fd:a3:24:3e:cd:
fc:b0:c9:17:20:35:84:c6:c9:4b:b5:15:33:d6:f7:
91:98:09:38:d7:5a:d0:20:6e:e1:1f:87:da:19:e1:
a1:27:4e:f2:04:4a:f4:7a:dc:ca:33:ab:fb:31:df:
d5:3f:19:01:88:88:71:23:a6:14:b1:1b:31:b9:03:
c2:85:e8:d2:4b:42:cf:5f:c4:9a:b3:6b:81:db:87:
4a:89:c0:a8:37:c9:f8:71:8b:c2:b0:25:ca:9a:13:
05:89:72:e4:97:91:e0:6d:bd:e1:e0:6e:67:33:c9:
88:82:ce:20:61:c4:c3:0a:22:6e:d8:9f:24:bd:4b:
f9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EE:3C:90:97:47:B9:CB:69:D3:B6:F5:BB:10:1A:D0:EF:68:39:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B68636D848E311EFB7C2FA70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.120.0/23
Signature Algorithm: sha256WithRSAEncryption
05:1f:d6:00:ae:15:c9:64:73:48:c0:17:33:70:d6:9a:10:56:
a6:cb:97:1d:4a:58:9c:9d:1c:99:cb:3c:51:5b:da:78:9c:03:
48:3e:12:24:5c:83:08:03:3c:65:e0:b4:8d:ad:07:d9:7d:d6:
9c:1b:42:95:af:5b:44:be:fc:8a:1b:9c:95:49:1f:52:06:57:
59:83:4d:9f:ca:b3:17:b8:d4:a5:7b:4b:89:a6:db:41:7e:68:
22:8b:65:ff:6b:fe:01:46:21:ec:56:9d:40:40:cc:cc:e1:71:
59:31:0a:01:1f:4a:59:f9:51:b1:1a:c2:bb:e6:0f:ca:a9:f5:
df:fb:d6:39:41:7f:f9:8a:1e:58:6e:ee:4e:1d:d6:4c:75:97:
9e:88:4d:40:d9:90:b9:3c:39:19:78:7a:99:b8:70:f1:d1:c9:
93:35:00:89:cf:91:ee:26:32:cd:59:0e:f1:7e:a0:46:03:33:
d9:bf:f9:a8:39:c9:e5:bd:79:2e:74:51:6d:58:33:0d:f0:03:
50:f8:a5:1c:8f:76:34:59:56:11:3c:21:fa:20:7f:59:da:83:
56:9a:0c:72:62:23:ef:1a:62:55:c2:c4:04:69:0e:58:d8:d0:
a5:2a:1b:82:6a:a3:3a:aa:fa:a3:ac:71:58:b2:8b:9f:2b:23:
43:da:1b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 04:03:11 2024 by rpki-client on console-ams.rpki-client.org