Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB3F4E78F5C311ECAD979FA4F1222468.roa
File: BB3F4E78F5C311ECAD979FA4F1222468.roa (raw, json)
Hash identifier: bIiHPWjEOsZrqW/AlyNZSjRw+K+Nnb16/Zl/MLOT+NQ=
Subject key identifier: 2D:2F:2E:37:C7:32:8B:E5:74:BF:80:75:70:B6:4B:17:21:35:10:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 150D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB3F4E78F5C311ECAD979FA4F1222468.roa
Signing time: Mon 27 Jun 2022 02:49:15 +0000
ROA not before: Mon 27 Jun 2022 02:49:11 +0000
ROA not after: Wed 15 Mar 2023 02:49:11 +0000
asID: 60609
IP address blocks: 45.200.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5389 (0x150d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 02:49:11 2022 GMT
Not After : Mar 15 02:49:11 2023 GMT
Subject: CN=62b91aab-f9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:49:6b:22:66:65:62:e8:a6:d4:f7:f1:aa:ae:
b1:72:bf:97:48:4f:3f:cf:da:ab:e4:6c:a7:84:b5:
e4:00:d0:af:f1:d3:a5:f3:14:b0:37:a0:79:48:4f:
96:54:16:82:ea:48:f8:9a:bd:13:7b:95:0c:30:be:
99:99:0e:06:69:56:89:c8:28:51:da:f7:27:02:cf:
24:40:8b:44:8d:ed:19:f0:fe:bb:a3:01:e4:ea:01:
61:ea:0a:f0:0b:99:3c:24:e5:57:16:ae:cd:32:fa:
bc:61:b9:9b:ff:40:dd:76:62:bb:7c:c2:2b:54:c6:
a0:5a:5b:1f:27:d1:df:8a:a6:15:04:80:8e:ea:bc:
fb:3c:cd:a5:1e:f6:b7:8a:2e:1d:69:5d:b9:ea:2a:
57:05:0f:98:4c:ed:43:38:40:e3:fe:7d:53:c7:e0:
1b:68:bd:29:8a:70:e7:e5:4b:83:7e:46:d0:f6:15:
82:69:fb:d3:e2:ee:c6:fd:12:e9:15:7f:84:3d:ba:
be:43:9d:e5:c9:bd:76:8d:f1:8c:5a:da:f0:1d:91:
f4:30:70:b9:bb:e4:79:ba:d6:c0:b8:e7:2e:9c:61:
0d:da:b2:f1:dd:7d:17:5c:4f:92:18:ec:d4:25:3e:
9e:bd:29:aa:9a:1f:19:be:09:ce:bb:d6:d9:f0:5b:
f4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2F:2E:37:C7:32:8B:E5:74:BF:80:75:70:B6:4B:17:21:35:10:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB3F4E78F5C311ECAD979FA4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.136.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:c9:21:5f:33:f9:b7:5d:13:a4:55:a5:63:0f:2f:8f:84:f2:
8f:56:3c:15:1e:7d:e7:bd:dd:94:31:55:c9:86:13:07:84:91:
5c:1d:ac:fd:87:16:02:b3:8d:14:17:b0:cf:ed:c7:cd:85:f2:
a8:fa:49:e8:1a:ab:35:99:70:23:59:53:ad:87:e2:06:42:75:
85:e5:de:cb:fa:83:be:24:5f:ad:bd:e7:02:b9:ac:75:b8:12:
fa:17:11:2c:61:a1:e9:0a:ba:48:09:67:18:f2:02:04:56:b6:
f9:37:d9:5b:e3:95:a9:d7:a0:18:90:99:38:d7:a3:d2:1f:c5:
c5:7c:3e:2c:9e:c6:d7:b5:9c:d1:44:8e:78:3e:d8:26:2e:a5:
da:9a:47:fc:ed:1a:f7:ee:bd:df:ea:38:bd:82:4d:b4:57:9c:
68:7b:dd:70:22:e0:9d:49:b5:fc:fc:15:7d:b8:af:b4:63:84:
c2:d2:ad:f5:1b:db:13:80:84:7b:a3:c4:de:10:5a:a8:7e:96:
96:45:19:c5:7d:71:c4:f7:ec:b0:91:f7:ee:c7:71:44:66:ef:
ff:91:73:6c:bf:b0:3e:3d:0c:03:ef:e2:3e:0e:c7:f9:9c:a1:
e9:6d:a9:39:7b:aa:17:d2:45:23:17:0b:18:a7:a7:60:ec:bc:
f2:a5:a6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-ams.rpki-client.org