Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D33067CA36E111EC83946A6FD8A014CE.roa
File: D33067CA36E111EC83946A6FD8A014CE.roa (raw, json)
Hash identifier: tJGTj8cDg3xLVoqF/FAqpKDbpnzpKHjb4H8Bo0b0cIc=
Subject key identifier: 1E:02:2B:EF:ED:CF:2C:63:4E:C4:0E:D5:FB:E6:A5:6F:C9:C2:D5:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0BB5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D33067CA36E111EC83946A6FD8A014CE.roa
Signing time: Wed 27 Oct 2021 04:53:28 +0000
ROA not before: Wed 27 Oct 2021 04:53:24 +0000
ROA not after: Thu 27 Oct 2022 04:53:24 +0000
asID: 58895
IP address blocks: 45.206.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2997 (0xbb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 04:53:24 2021 GMT
Not After : Oct 27 04:53:24 2022 GMT
Subject: CN=6178db48-af56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:66:d5:9d:26:61:84:b0:d1:42:25:28:01:ce:
27:de:d3:10:19:1d:7e:53:e6:85:30:18:83:c6:ac:
28:1a:27:01:4c:08:4a:75:bf:f1:03:89:fd:e7:9b:
21:ab:e7:2f:1b:d3:bc:25:0d:42:4d:4e:22:ee:2a:
9e:d2:06:d7:0e:54:07:7c:0a:7a:81:67:4e:51:43:
30:a4:d4:d4:c0:55:b2:55:5d:d6:ea:33:d8:70:0e:
b5:bb:81:25:06:5b:70:16:de:24:0d:40:2e:4e:d8:
45:15:dc:d2:17:66:5c:0d:aa:d2:10:94:2c:e2:3d:
4a:55:f5:d9:4d:0a:7d:05:a9:45:95:56:4c:12:07:
d4:69:db:6f:2f:03:be:2b:62:4a:85:8d:8e:54:55:
4d:d7:dc:3d:94:05:a1:4b:44:80:01:2a:4b:68:98:
a4:b4:26:0f:5a:ec:da:b1:4c:99:f4:65:37:76:a7:
2b:52:3c:06:d0:a2:d8:d5:a2:1e:62:1c:33:ff:c1:
2a:79:cb:81:3f:0d:35:74:e9:00:5d:8e:b5:36:32:
13:a7:26:9a:c1:39:13:f3:03:e5:18:3b:6b:64:5c:
af:b0:e7:a9:4b:d4:36:ee:bc:01:9f:16:7d:fe:6c:
d1:e6:fa:25:b9:c1:ee:65:48:07:9f:d9:fd:76:4d:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:02:2B:EF:ED:CF:2C:63:4E:C4:0E:D5:FB:E6:A5:6F:C9:C2:D5:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D33067CA36E111EC83946A6FD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.135.0/24
Signature Algorithm: sha256WithRSAEncryption
96:bb:3a:c7:3e:d7:1a:a5:25:6d:f4:1e:50:6a:3c:62:e8:96:
47:99:9c:2a:a9:f4:c8:13:cd:08:f4:8d:53:ab:29:4d:d1:df:
55:ea:79:f2:62:d6:27:c0:1d:83:c6:34:74:3e:a9:1a:5f:3e:
30:37:b9:b0:b0:21:e3:c1:f9:7b:bf:22:cd:7b:57:37:27:95:
6b:7f:e0:9f:89:c9:cc:e4:cb:6a:33:4c:40:11:02:af:86:6b:
c4:35:da:a8:f1:8e:14:37:2a:d3:15:f3:20:98:f7:bb:a7:56:
75:5d:e0:66:4d:ba:55:9d:b1:41:de:a0:1d:3c:77:b9:8e:2e:
f2:fe:8a:24:40:49:96:1a:45:71:c6:5b:84:52:cf:85:3e:23:
6e:d1:0c:69:b3:5d:67:d1:5d:36:10:b2:ed:0a:07:83:6b:d6:
ba:81:4a:d5:48:19:64:9e:b0:1a:e5:d5:3b:aa:6d:36:12:f7:
fc:27:c5:f2:b4:86:a5:59:55:85:2c:17:51:dd:a8:66:09:4b:
6d:98:24:9b:64:54:54:58:5f:00:30:b9:e1:13:ea:c8:9d:de:
45:66:a7:2a:a8:91:62:1a:5d:50:29:aa:f2:c7:f3:88:02:78:
9e:29:f7:bb:72:42:d9:4c:41:6f:6d:f4:e4:0a:ba:c1:5b:ff:
2b:4f:91:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:27 2023 by rpki-client on console-ams.rpki-client.org