Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8D041CC3E9211EFA3FF669E762E951A.roa
File: C8D041CC3E9211EFA3FF669E762E951A.roa (raw, json)
Hash identifier: QU6oJcUBj5JJ3ArOmkrJ/508r5xX7qy58Oo935YpJZs=
Subject key identifier: 36:3A:E8:CE:E9:6B:85:49:E6:35:AB:26:96:5C:7D:3E:6B:BD:4F:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9A26
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8D041CC3E9211EFA3FF669E762E951A.roa
Signing time: Wed 10 Jul 2024 08:02:43 +0000
ROA not before: Wed 10 Jul 2024 08:02:39 +0000
ROA not after: Thu 08 Aug 2024 08:02:39 +0000
asID: 51847
IP address blocks: 45.207.216.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39462 (0x9a26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 08:02:39 2024 GMT
Not After : Aug 8 08:02:39 2024 GMT
Subject: CN=668e4023-e1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:81:78:b5:3b:15:3f:97:4f:8d:9b:a9:dc:
e1:71:a5:c3:e2:98:b5:98:68:cd:67:7f:da:66:0d:
a2:f5:05:42:ac:83:4e:36:5f:49:f9:8c:96:01:ca:
08:52:f1:aa:f1:1c:73:dc:4e:bc:db:0e:43:e7:3c:
f0:47:0a:c3:99:0d:5b:7b:30:f2:71:29:ef:5b:fd:
f3:54:70:6a:fd:cc:f7:51:71:da:42:d1:3d:9a:89:
b6:17:e9:0e:4d:8a:45:aa:ec:93:9c:cc:87:f4:43:
5f:7b:c1:13:5b:19:f1:fc:fc:2b:57:8c:8f:8e:57:
bf:25:bc:36:0a:bf:4c:b6:10:81:7b:c6:84:c8:6b:
21:80:57:15:ff:69:91:60:56:66:cd:6f:74:01:cf:
e4:21:65:58:91:10:6c:70:19:c5:04:a1:d2:a6:ff:
f1:6f:d5:86:15:4f:dd:82:1b:cb:57:94:8a:d5:b4:
0c:e7:04:4e:a9:75:7a:35:6a:64:8b:48:27:6d:8e:
fe:38:68:85:69:7d:79:0c:3a:15:d9:e7:73:7a:1c:
06:09:f3:1b:af:47:e8:68:73:0b:6d:f1:2b:42:9b:
7b:d0:04:12:2b:24:3c:80:e9:06:cf:3e:e7:d1:bb:
96:93:69:f5:23:9d:8f:6e:e2:ca:bb:6f:39:88:f1:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3A:E8:CE:E9:6B:85:49:E6:35:AB:26:96:5C:7D:3E:6B:BD:4F:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8D041CC3E9211EFA3FF669E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.216.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:3d:cf:92:9c:91:07:4e:73:3f:f7:98:2e:fc:05:ea:8b:e6:
9a:d7:e9:88:2f:93:1b:fb:18:60:0e:51:25:2e:ae:37:d2:62:
6d:94:ff:9a:dc:29:ed:1c:3f:68:4a:7b:c1:6b:19:d3:ba:1a:
7b:ea:1d:7e:f0:72:b5:a9:e2:a7:5a:52:b8:eb:c2:5b:65:17:
fd:fd:73:d9:2e:f2:6f:0d:24:b5:b4:fe:72:7a:dc:9a:ae:d8:
53:b8:77:95:3e:b9:04:6e:f8:68:7a:79:23:19:b6:bb:09:ea:
fe:6e:6c:fb:bf:9d:d4:ab:6d:c0:d9:17:d5:b8:93:23:83:14:
44:3c:ed:f2:42:8e:49:12:6d:ce:cb:79:8c:23:19:ca:fb:36:
47:6e:63:62:e3:ce:3c:02:58:25:af:61:f2:7b:47:64:5b:e6:
8d:14:11:a5:89:9b:6b:00:6c:e2:e6:f1:7e:1d:e9:67:21:1b:
72:dd:e7:c8:33:74:57:4e:dc:24:dd:79:fa:41:b6:1c:5c:b1:
20:cb:d7:a1:83:23:00:1c:77:3f:fb:93:20:87:25:66:f6:5c:
a5:3e:0f:7f:b6:c7:6e:b8:4e:49:5a:16:4e:4d:11:e8:64:30:
91:16:ff:3b:1f:5a:60:eb:5d:49:bf:95:1d:29:bc:15:b6:7a:
ac:2a:14:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 02:55:28 2024 by rpki-client on console-ams.rpki-client.org