Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFEBBA08741611EC854A4EE65A40D577.roa
File: BFEBBA08741611EC854A4EE65A40D577.roa (raw, json)
Hash identifier: +q3+MEr+B2ApUkNaCLHw15rGCm8RHuwgXcg5oI/TITA=
Subject key identifier: 85:2D:2B:15:7D:11:DF:1D:54:2C:06:A3:11:3A:05:3F:74:D2:99:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1168
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFEBBA08741611EC854A4EE65A40D577.roa
Signing time: Thu 13 Jan 2022 02:16:00 +0000
ROA not before: Thu 13 Jan 2022 02:15:56 +0000
ROA not after: Sun 31 Jul 2022 02:15:56 +0000
asID: 328608
IP address blocks: 45.194.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4456 (0x1168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 13 02:15:56 2022 GMT
Not After : Jul 31 02:15:56 2022 GMT
Subject: CN=61df8b60-128b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:f5:01:f0:ab:7a:02:17:8e:3d:c1:46:fb:
08:f6:e6:f7:03:2a:0f:0f:3a:a9:18:99:24:94:b8:
66:72:7d:bd:1a:e0:a9:3c:d3:a0:89:a0:f5:d4:2e:
0e:85:7b:11:17:ea:a3:de:98:50:dd:e1:a9:35:59:
0a:61:fc:a0:0e:9b:f4:fd:40:b2:c6:3d:88:8a:38:
24:ea:7b:98:40:ad:9d:aa:96:0e:25:3a:89:ef:15:
84:d7:38:88:a6:31:f5:03:db:bb:0a:60:c5:11:03:
33:71:ec:89:6b:d2:a5:80:13:e2:7e:20:e1:0f:5f:
11:1e:c4:49:2b:8c:29:ad:41:dc:26:b3:19:66:2a:
a6:25:a5:d4:e2:00:c6:86:36:ee:32:01:64:35:93:
71:55:a4:23:9d:4a:46:dd:2a:b1:d1:38:c7:33:cf:
67:7e:29:88:4a:b0:a7:b0:54:1a:87:b3:4d:05:55:
5a:b7:49:97:3b:bd:91:ad:89:43:c6:10:eb:a0:20:
f5:68:b2:37:87:7e:46:fb:0a:34:98:37:38:a3:29:
fa:15:7b:46:05:ba:cd:b8:28:f2:ae:2e:47:63:6b:
cd:29:9b:3f:f5:ef:d0:6d:30:66:13:7c:d7:26:9d:
12:27:5d:d5:ff:cd:23:a7:fd:95:3f:e6:ed:e1:4c:
9f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2D:2B:15:7D:11:DF:1D:54:2C:06:A3:11:3A:05:3F:74:D2:99:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFEBBA08741611EC854A4EE65A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.54.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:3e:c2:a7:70:57:bd:51:a9:8a:57:8c:8f:d1:c3:9f:af:b0:
8b:59:ab:85:1b:fc:40:2b:23:e6:82:13:b1:5d:55:0b:6c:da:
b6:a0:c8:d1:e0:07:ed:7a:f6:23:2a:a9:7f:30:44:62:a0:a6:
55:9d:c2:1c:b4:d7:63:9b:da:03:f1:03:52:e2:d2:2a:b5:3f:
bd:a0:c3:68:50:cd:de:47:0d:70:3a:7c:b8:16:cd:7f:f6:f2:
ee:e0:fb:f3:ce:93:5e:d5:28:90:3a:f3:4e:38:0f:4a:c8:19:
36:08:1f:52:34:2f:3b:9e:39:f5:35:99:df:d2:7e:00:d0:be:
ab:be:70:9d:b6:27:30:9d:94:7e:4d:df:03:4f:c6:a8:5a:2e:
2d:2e:34:62:e7:b9:2a:6a:08:65:af:5e:93:34:60:12:4c:b3:
1d:f5:91:d8:e8:c1:c8:df:bb:a2:3c:23:9a:f6:cf:cb:22:ea:
a7:1f:fb:7d:a5:0d:7d:08:06:93:4f:bf:19:a3:b9:56:e5:7b:
9d:2f:ad:75:0d:99:f7:ac:89:6c:d9:a1:df:72:e3:2d:e3:eb:
fe:02:36:45:9c:d3:e1:c9:84:c0:b0:7e:72:26:1c:b9:87:6b:
fd:b4:03:62:2a:b5:59:eb:1b:5c:1d:a9:a0:4e:60:ba:f0:e7:
9f:89:c7:81
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEWgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjAxMTMwMjE1NTZaFw0yMjA3MzEwMjE1NTZaMBgxFjAU
BgNVBAMMDTYxZGY4YjYwLTEyOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDC3PUB8Kt6AheOPcFG+wj25vcDKg8POqkYmSSUuGZyfb0a4Kk806CJoPXU
Lg6FexEX6qPemFDd4ak1WQph/KAOm/T9QLLGPYiKOCTqe5hArZ2qlg4lOonvFYTX
OIimMfUD27sKYMURAzNx7Ilr0qWAE+J+IOEPXxEexEkrjCmtQdwmsxlmKqYlpdTi
AMaGNu4yAWQ1k3FVpCOdSkbdKrHROMczz2d+KYhKsKewVBqHs00FVVq3SZc7vZGt
iUPGEOugIPVosjeHfkb7CjSYNzijKfoVe0YFus24KPKuLkdja80pmz/179BtMGYT
fNcmnRInXdX/zSOn/ZU/5u3hTJ9jAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUhS0r
FX0R3x1ULAajEToFP3TSmU8wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0JGRUJCQTA4NzQxNjExRUM4NTRBNEVFNjVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtwjYwDQYJKoZIhvcNAQELBQAD
ggEBAF4+wqdwV71RqYpXjI/Rw5+vsItZq4Ub/EArI+aCE7FdVQts2ragyNHgB+16
9iMqqX8wRGKgplWdwhy012Ob2gPxA1Li0iq1P72gw2hQzd5HDXA6fLgWzX/28u7g
+/POk17VKJA68044D0rIGTYIH1I0LzueOfU1md/SfgDQvqu+cJ22JzCdlH5N3wNP
xqhaLi0uNGLnuSpqCGWvXpM0YBJMsx31kdjowcjfu6I8I5r2z8si6qcf+32lDX0I
BpNPvxmjuVble50vrXUNmfesiWzZod9y4y3j6/4CNkWc0+HJhMCwfnImHLmHa/20
A2IqtVnrG1wdqaBOYLrw55+Jx4E=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-fra.rpki-client.org