Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBDD103649AD11EFA039C451762E951A.roa
File: CBDD103649AD11EFA039C451762E951A.roa (raw, json)
Hash identifier: MCYPH65GU7khCl/JFB81vFxogRhRmlZnbJ52T8PMgxM=
Subject key identifier: 40:42:F6:A6:C5:0F:39:7F:AA:F9:92:28:9B:92:32:0F:AF:48:0C:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F65
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBDD103649AD11EFA039C451762E951A.roa
Signing time: Wed 24 Jul 2024 11:13:47 +0000
ROA not before: Wed 24 Jul 2024 11:13:44 +0000
ROA not after: Fri 02 Aug 2024 11:13:44 +0000
asID: 20473
IP address blocks: 45.200.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40805 (0x9f65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 11:13:44 2024 GMT
Not After : Aug 2 11:13:44 2024 GMT
Subject: CN=66a0e1eb-a7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8d:f5:6a:aa:77:89:af:6e:ed:ba:95:19:82:
ba:11:2a:12:c7:be:11:65:7e:ef:ab:27:30:77:75:
1f:17:f9:92:a7:a1:f5:0f:83:0b:e5:88:79:8f:74:
08:62:26:4c:a8:c2:a4:f3:d1:cb:79:13:c4:9d:d7:
5d:93:33:8a:76:d8:ef:2a:5e:a7:c0:9f:da:77:43:
93:a2:a1:c2:84:96:ba:0a:a6:04:79:b2:d1:23:6c:
b9:1f:e2:bd:06:74:cc:b7:8e:20:10:d1:bb:bf:c6:
9c:62:e3:e3:4e:77:2b:27:33:56:68:69:a9:e0:39:
6d:0c:33:9b:ea:7b:9d:3c:26:a0:62:03:5e:db:7f:
47:4f:cd:b7:51:4a:9a:8f:15:aa:46:1b:16:ed:97:
86:80:24:16:b3:f9:12:e1:71:93:d4:25:79:b4:19:
d9:04:f3:9a:d3:72:44:92:c1:75:59:1a:ce:82:aa:
b1:99:fa:b4:f4:f3:ce:e0:f8:79:bb:f6:10:d3:23:
60:e8:1e:21:63:93:62:2f:d5:28:a6:2f:41:4d:56:
9a:04:a1:70:62:c3:1b:e1:4b:91:47:37:f7:1b:33:
9b:6f:2c:d9:c6:f6:57:e6:36:38:5f:bc:a9:e0:b4:
8d:38:90:cc:10:db:90:75:ec:b2:69:bb:61:72:a6:
5d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:42:F6:A6:C5:0F:39:7F:AA:F9:92:28:9B:92:32:0F:AF:48:0C:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBDD103649AD11EFA039C451762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.121.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:9d:d3:26:8f:7d:1b:0b:47:db:6e:04:2c:40:62:11:a7:7f:
29:3b:33:8c:a5:ef:a6:83:38:5a:b5:55:52:44:51:8d:61:c3:
2c:ae:38:95:d9:9c:c4:13:f5:cd:cb:d6:f6:76:36:8d:cf:10:
80:2b:32:99:95:f1:77:56:85:76:8d:6d:36:0e:c0:77:ba:7b:
94:87:68:5d:ff:89:85:17:e1:e6:31:36:f6:be:bb:09:b1:7a:
a9:42:d2:06:dc:56:61:45:35:1d:01:90:87:8a:b4:d9:2b:bb:
47:db:62:fc:db:c8:b3:34:14:b2:25:54:da:f8:8b:af:6a:91:
21:ed:2b:37:93:5a:06:d1:2a:a6:e0:2f:86:6b:b6:1d:f6:7c:
9f:cd:76:7b:24:34:c7:2f:f0:98:f5:90:bb:14:a1:b3:d1:91:
a9:05:4c:b5:fc:13:f9:cd:0e:30:70:40:79:f0:eb:b7:90:29:
72:cb:5b:27:3b:71:35:51:7e:8c:db:f9:5e:20:81:87:dc:58:
30:28:a5:0b:ef:63:52:cf:f1:40:7c:19:32:00:47:b0:21:ba:
dc:cd:3e:ba:0c:26:ba:54:e7:8d:62:b4:15:ca:77:ac:51:da:
0f:3e:67:ea:a4:bc:30:d8:23:2c:a5:8b:77:a7:59:85:f2:10:
6d:42:5f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 14:56:25 2024 by rpki-client on console-ams.rpki-client.org