Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBA5770C47F011EFB2672681762E951A.roa
File: CBA5770C47F011EFB2672681762E951A.roa (raw, json)
Hash identifier: YtYiEF5z1zwJIkGz6CsbihrDQP0BxZYBrFegoA15Iq4=
Subject key identifier: D6:F1:A2:BC:E3:39:6A:B2:BB:46:56:1F:E8:F6:44:90:8F:8E:91:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E5B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBA5770C47F011EFB2672681762E951A.roa
Signing time: Mon 22 Jul 2024 06:08:21 +0000
ROA not before: Mon 22 Jul 2024 06:08:17 +0000
ROA not after: Sun 04 Aug 2024 06:08:17 +0000
asID: 139805
IP address blocks: 45.195.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40539 (0x9e5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 06:08:17 2024 GMT
Not After : Aug 4 06:08:17 2024 GMT
Subject: CN=669df754-327e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:22:9b:17:5b:eb:da:37:f0:ee:4d:15:10:
c8:7f:16:23:d8:4b:8f:b9:f7:ee:e5:b9:41:59:ba:
95:b3:0d:f2:46:aa:c6:18:e9:df:ef:57:d8:a2:f7:
e3:db:1e:66:af:76:bd:e6:07:c8:3f:15:8d:1f:cc:
d2:c7:51:11:0c:c3:bb:0c:4e:2f:65:86:01:3e:46:
09:b8:74:35:1f:60:50:dd:e2:ea:f0:c5:b2:7d:5e:
31:d5:e8:ea:e5:0f:9d:7b:e6:b1:7a:03:5a:13:b8:
f2:82:2f:ca:1f:16:2b:7d:3c:e7:01:a4:e3:90:ec:
97:30:ee:3b:22:51:a2:5d:1f:c7:f0:26:bb:11:c8:
45:06:11:d6:8c:97:61:16:c9:6b:a2:b6:9b:7a:7c:
d5:b4:51:de:bd:87:a0:b2:a6:0a:38:4f:1f:c4:d6:
38:c0:d5:16:0c:26:4b:9c:fd:30:5d:0e:84:6e:78:
06:e1:78:c2:f5:0f:16:89:1b:20:44:9e:ee:8d:1a:
75:2c:27:51:46:9f:99:ec:af:3b:96:6c:02:e8:eb:
53:33:c4:21:6d:af:f2:61:92:7c:73:1e:16:17:76:
9e:30:bc:b7:75:02:88:2d:6e:fa:19:a6:e9:aa:05:
c9:4c:4f:d5:ab:d0:fc:fd:69:20:b9:1b:fa:05:18:
ff:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F1:A2:BC:E3:39:6A:B2:BB:46:56:1F:E8:F6:44:90:8F:8E:91:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBA5770C47F011EFB2672681762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.139.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:8e:93:df:1b:1b:5f:ad:a9:9c:14:b8:b1:8c:89:61:df:92:
84:98:4c:61:80:37:b8:ba:3c:5d:95:08:5a:53:0d:9b:67:a1:
91:18:cf:30:91:37:af:78:0e:62:0e:83:31:37:e7:2e:27:32:
98:b9:5b:83:b0:53:cd:59:94:bd:ef:14:68:ff:8d:7c:03:5b:
28:c4:f6:28:2f:38:83:74:f7:c0:52:34:fb:98:e5:cd:97:5b:
bf:9f:b4:22:47:7d:4f:f6:17:76:f2:1e:76:62:ea:75:f4:60:
7a:2e:8c:af:7f:da:a3:e5:74:2f:67:38:75:0a:8f:18:aa:8a:
19:c6:6e:86:6e:55:34:42:d7:4a:ec:e6:4f:3e:11:96:0f:3b:
22:13:63:e6:99:98:40:ee:92:31:d5:00:09:77:44:84:94:bc:
17:f3:b0:c3:8f:e9:53:54:8e:52:c7:76:e7:13:55:59:7a:26:
56:21:03:ea:01:50:2e:e3:bf:e9:27:9a:31:95:5e:d9:47:73:
24:5e:91:c0:3c:b6:63:d9:72:c3:84:40:c0:5b:56:7f:26:cd:
0a:ce:d3:62:bd:25:b4:60:ec:80:9b:08:db:8b:01:ae:b0:e5:
c8:3f:ed:1d:84:22:06:fb:a0:39:da:37:d9:d9:0a:c1:03:8c:
66:d8:1b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 03:05:36 2024 by rpki-client on console-ams.rpki-client.org