Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5B0303047DC11EF914A137A762E951A.roa
File: C5B0303047DC11EF914A137A762E951A.roa (raw, json)
Hash identifier: plL+EPHIUmF/8F01R1NSHXZ1FFvrGOwyDPPUYuUGS+A=
Subject key identifier: 6F:4A:81:B3:70:94:FC:82:0D:5F:4E:4C:B7:97:D8:6E:F2:AC:1D:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E05
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5B0303047DC11EF914A137A762E951A.roa
Signing time: Mon 22 Jul 2024 03:45:01 +0000
ROA not before: Mon 22 Jul 2024 03:44:58 +0000
ROA not after: Fri 23 Aug 2024 03:44:58 +0000
asID: 48031
IP address blocks: 45.200.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40453 (0x9e05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 03:44:58 2024 GMT
Not After : Aug 23 03:44:58 2024 GMT
Subject: CN=669dd5bd-aa89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:be:f0:3b:54:cb:7e:77:ea:1c:2d:76:b6:70:
0b:47:b3:69:c0:6a:bc:ee:d8:80:97:a1:7c:96:63:
ce:00:d3:0f:a1:47:a9:39:dc:a7:8b:e3:3a:de:dd:
cd:d9:8d:e6:08:e5:99:ff:34:8e:11:f9:a3:e1:eb:
8e:df:0c:68:de:43:94:c4:b9:ff:51:11:67:07:9a:
99:cc:bd:6a:72:9b:23:91:5d:d8:e6:3d:e9:75:37:
dc:36:47:80:5d:94:5e:7d:e1:f8:4d:2b:b3:d4:45:
3e:77:02:6c:53:a0:51:2f:96:6a:c3:69:89:79:dc:
bd:f6:99:85:da:6b:b5:51:19:a1:db:f7:f9:86:45:
ad:63:06:f2:1e:70:de:08:49:84:0d:e7:1d:33:62:
6e:f3:43:64:5c:13:dd:21:bd:1f:c0:ab:cb:90:0c:
74:2b:7a:97:65:d2:01:1d:d8:3d:20:be:47:5d:90:
a9:4c:f5:4b:48:91:06:a0:c4:38:89:6f:ea:d5:52:
2e:b6:ec:a6:b5:27:17:64:91:74:6f:76:5b:91:e6:
bf:0f:22:a0:28:72:b6:43:9c:3d:22:83:92:20:01:
35:26:b8:0e:62:78:09:df:17:d0:a9:46:06:d0:d1:
ed:20:b9:f5:21:ef:d6:40:d5:06:71:c1:72:39:7a:
ec:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4A:81:B3:70:94:FC:82:0D:5F:4E:4C:B7:97:D8:6E:F2:AC:1D:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5B0303047DC11EF914A137A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.181.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:5e:fa:10:66:d8:d0:1d:d4:df:85:27:28:9d:2f:54:28:97:
6f:e0:6c:7d:b3:82:52:06:bd:10:da:67:14:b0:5e:6d:f8:0f:
e5:01:6d:55:01:36:68:bb:86:0e:47:4c:d7:0a:27:a2:7d:29:
41:13:e8:a7:31:92:b1:29:72:3e:8c:be:b8:38:47:33:8b:39:
ce:3a:53:70:0c:58:f2:3c:ec:99:17:c7:57:13:89:90:56:cd:
6a:41:14:25:e4:5a:c9:7e:6b:ed:26:6e:47:40:5b:c2:a0:31:
df:e8:47:25:1e:2e:e9:c5:b4:9d:58:cc:9c:7d:8f:f9:09:12:
38:91:2d:b9:3d:5a:47:9d:77:82:51:b8:d9:32:9b:98:57:43:
93:c8:db:06:da:2d:12:26:72:99:5b:fa:67:c4:77:03:2c:2a:
4c:1e:d5:3f:29:47:7e:8d:d9:9f:b6:34:18:b4:7e:ea:a1:ca:
5f:ca:c8:08:5e:1a:c7:76:5e:8b:a2:a8:b4:a5:f7:aa:16:4e:
26:a7:3a:9d:d0:47:cd:df:7f:39:21:c3:5d:67:97:53:86:45:
e6:b0:ea:06:c0:20:a5:f9:a9:4e:da:c1:f6:17:ea:8d:4b:51:
86:78:7c:b6:02:d4:2a:64:e6:b6:04:b2:11:91:39:8d:25:cc:
d1:7f:77:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:03 2024 by rpki-client on console-ams.rpki-client.org