Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8256EF4F0C811EE8B72E4B0775412E6.roa
File: C8256EF4F0C811EE8B72E4B0775412E6.roa (raw, json)
Hash identifier: 3WPV4UfEsPW/7xvZQ2o/K4luoRC/32BMMbs9hT9QHgg=
Subject key identifier: B5:85:88:4D:8D:40:8D:3F:C5:20:B1:81:77:D6:B8:56:F9:C0:02:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8176
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8256EF4F0C811EE8B72E4B0775412E6.roa
Signing time: Tue 02 Apr 2024 08:12:44 +0000
ROA not before: Tue 02 Apr 2024 08:12:40 +0000
ROA not after: Mon 29 Apr 2024 08:12:40 +0000
asID: 139646
IP address blocks: 45.201.242.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33142 (0x8176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 08:12:40 2024 GMT
Not After : Apr 29 08:12:40 2024 GMT
Subject: CN=660bbdfc-58b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:71:41:6f:66:87:55:ea:69:f5:bc:20:bb:5d:
26:06:bc:84:f9:75:4c:7c:ec:e1:3b:d9:18:32:4c:
ae:e3:28:d4:cb:6e:50:61:9a:6d:25:b9:9f:e0:75:
09:29:0f:9e:60:d0:24:0d:55:cf:3a:54:1f:4a:39:
28:69:96:ff:29:b3:81:9c:73:2c:83:4c:0f:13:bd:
43:c6:8c:14:c8:a0:cd:e6:db:fb:c8:87:ea:fa:5f:
f6:8e:f9:8e:cf:90:cc:19:4e:d4:59:3e:32:a0:5f:
5a:84:56:a5:c2:57:c5:f6:17:97:18:73:91:94:43:
af:5d:1d:bd:b2:38:99:e2:4b:38:42:8a:c2:44:74:
4d:39:6d:9a:be:10:1b:22:92:fa:f3:14:68:99:26:
ae:04:fd:2e:a6:7b:55:db:87:36:e3:98:0e:a9:f4:
31:50:d3:88:e5:93:89:99:08:8b:28:f1:f3:1d:22:
ac:1b:f9:4c:63:9f:14:a7:92:ae:a6:eb:90:65:5c:
f8:42:66:b9:4b:18:40:55:b7:a1:fa:46:dd:0b:44:
b8:6c:80:05:d9:89:a4:1f:69:da:32:a5:91:4d:79:
43:ae:6c:32:89:be:14:fd:88:f5:28:4b:68:a8:94:
e2:5b:8d:cf:2c:5c:c1:f9:cb:03:a8:dc:49:1f:6a:
e5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:85:88:4D:8D:40:8D:3F:C5:20:B1:81:77:D6:B8:56:F9:C0:02:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8256EF4F0C811EE8B72E4B0775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.242.0/23
Signature Algorithm: sha256WithRSAEncryption
36:4e:2a:94:61:2d:f3:d2:bb:07:d2:ff:9e:13:6c:f8:df:db:
1a:49:b7:d1:e1:f4:ee:56:b6:19:6f:a9:9c:c7:63:dc:f1:7e:
0f:07:32:3c:21:a9:87:93:11:6e:12:40:39:45:b5:bc:4d:0d:
9f:a6:2d:28:06:90:44:b8:84:d9:2c:8c:42:2a:8d:d3:cd:6d:
ac:b0:ef:51:2b:47:d3:eb:e9:d4:e0:0a:88:ee:5c:2d:98:ea:
97:bd:c0:e2:d8:38:b6:97:8a:0d:fe:57:84:4a:22:f0:d1:1e:
64:cd:fa:7e:6b:cb:24:62:b4:f3:23:7e:40:00:af:67:2b:4d:
51:42:ab:ec:92:dd:2f:ad:15:6a:53:d4:77:86:49:6b:8b:52:
48:bf:38:a3:00:33:3c:0d:ff:74:af:e4:bf:0d:00:ac:fc:cc:
23:6c:ab:75:ea:df:5d:9b:6f:b7:38:a5:1b:03:f5:04:06:fc:
30:3b:16:e9:25:72:69:9a:0f:d7:e8:53:81:c6:a4:8f:c8:b4:
55:48:dd:b6:c3:b7:dc:c9:ca:8d:84:2e:be:f5:ee:cc:2b:3e:
20:97:68:cd:ea:b9:21:22:4a:3e:4e:ef:3a:ed:5e:64:6d:5c:
8f:97:6b:80:08:73:be:f3:3e:fd:c5:59:5b:db:c7:42:f2:6c:
d8:a1:4d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 14:03:25 2024 by rpki-client on console-fra.rpki-client.org