Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3D2ED84018B11EFA30A1EFB007001B1.roa
File: D3D2ED84018B11EFA30A1EFB007001B1.roa (raw, json)
Hash identifier: RYvMA+1zH10cOXvbjfYZwTsnnQDaAx7wIIjImlKlWtI=
Subject key identifier: 24:70:66:C6:5A:F9:2B:B7:21:BF:90:11:60:55:5E:09:6D:21:11:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 84B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3D2ED84018B11EFA30A1EFB007001B1.roa
Signing time: Tue 23 Apr 2024 16:09:14 +0000
ROA not before: Tue 23 Apr 2024 16:09:10 +0000
ROA not after: Thu 02 May 2024 16:09:10 +0000
asID: 142062
IP address blocks: 45.204.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33969 (0x84b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 16:09:10 2024 GMT
Not After : May 2 16:09:10 2024 GMT
Subject: CN=6627dd2a-a3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:c3:31:ed:76:8e:0c:ff:ce:98:7b:25:9c:
93:e9:7f:3c:ba:c1:62:21:15:51:9e:b4:d5:47:67:
72:46:38:05:26:78:63:92:69:44:73:b4:84:71:e3:
e1:dd:70:82:f5:d3:3d:75:8c:03:0e:7c:a5:2c:96:
52:93:55:d3:70:60:a4:f9:84:54:60:1f:17:98:14:
91:2f:45:6c:17:75:95:88:63:1d:da:3d:68:ad:1a:
e3:6e:d5:89:fe:2c:5b:c9:bb:b7:60:96:fc:f0:04:
43:63:cd:e6:59:76:95:39:d5:fd:8c:11:14:5e:1a:
a6:6a:59:be:bd:28:aa:05:cd:c3:6e:d4:d1:05:ce:
70:8c:e6:6c:5b:67:24:ee:90:3a:67:59:65:bc:fd:
fa:0b:38:82:3b:1f:29:88:f9:8a:fb:da:ef:bb:84:
4f:f7:89:70:ee:d3:17:4d:73:4a:da:1d:59:73:c8:
d2:bd:de:b1:13:8b:f7:9f:c5:99:ea:51:12:94:04:
75:03:93:16:d2:5e:28:17:fa:9a:09:a3:0f:b0:57:
75:0e:32:26:f3:c2:e1:b5:e4:00:d7:78:dd:c7:5e:
85:e0:9b:63:a4:fb:23:34:c1:42:5a:d1:02:5a:52:
d1:22:ee:57:f9:2b:58:8f:ec:eb:51:2a:80:df:43:
11:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:70:66:C6:5A:F9:2B:B7:21:BF:90:11:60:55:5E:09:6D:21:11:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3D2ED84018B11EFA30A1EFB007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.90.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:c8:e7:79:2c:fa:97:9a:99:75:7c:43:2f:21:d7:92:03:79:
01:92:12:0d:d6:eb:37:0f:13:4c:93:71:84:1e:d4:ec:90:bd:
ac:5d:a9:78:28:f8:a2:8d:dd:19:ec:7c:58:9a:ae:3e:ad:e9:
34:20:bf:53:c6:e5:4e:36:63:2c:05:b4:2b:b9:2d:f6:f4:30:
cf:67:2c:2c:8a:46:11:9e:5c:04:0d:58:e5:1c:0d:54:13:1a:
e9:99:77:7b:b7:64:91:6d:0c:5c:7a:fe:2f:4a:80:17:11:28:
6b:93:27:85:df:f5:ba:f7:d0:49:30:23:81:1e:66:ce:53:51:
2b:16:dc:4d:60:f0:af:b6:57:a4:4d:65:73:57:28:7f:97:fc:
0a:d2:3a:10:33:30:10:74:9a:0c:d0:7f:e7:06:68:b4:c8:25:
04:12:68:31:04:a7:d6:81:aa:32:dd:d2:20:fb:80:19:24:be:
ed:84:a9:d2:13:01:ba:eb:e0:c4:2d:d6:0d:04:fd:fe:38:26:
a3:80:49:88:c9:2b:c7:fd:11:af:10:ff:cb:7b:4e:c5:b8:5c:
f0:0d:ab:0e:6f:d1:25:0d:c5:e8:0c:fa:7f:67:69:df:5e:c0:
79:3a:c1:c1:50:73:36:4a:c5:3c:d4:f6:ec:82:50:31:df:b6:
f5:f3:45:9a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAISxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDIzMTYwOTEwWhcNMjQwNTAyMTYwOTEwWjAYMRYw
FAYDVQQDEw02NjI3ZGQyYS1hM2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsG3DMe12jgz/zph7JZyT6X88usFiIRVRnrTVR2dyRjgFJnhjkmlEc7SE
cePh3XCC9dM9dYwDDnylLJZSk1XTcGCk+YRUYB8XmBSRL0VsF3WViGMd2j1orRrj
btWJ/ixbybu3YJb88ARDY83mWXaVOdX9jBEUXhqmalm+vSiqBc3DbtTRBc5wjOZs
W2ck7pA6Z1llvP36CziCOx8piPmK+9rvu4RP94lw7tMXTXNK2h1Zc8jSvd6xE4v3
n8WZ6lESlAR1A5MW0l4oF/qaCaMPsFd1DjIm88LhteQA13jdx16F4JtjpPsjNMFC
WtECWlLRIu5X+StYj+zrUSqA30MRGQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCRw
ZsZa+Su3Ib+QEWBVXgltIRFLMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EM0QyRUQ4NDAxOEIxMUVGQTMwQTFFRkIwMDcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcxaMA0GCSqGSIb3DQEBCwUA
A4IBAQCjyOd5LPqXmpl1fEMvIdeSA3kBkhIN1us3DxNMk3GEHtTskL2sXal4KPii
jd0Z7HxYmq4+rek0IL9TxuVONmMsBbQruS329DDPZywsikYRnlwEDVjlHA1UExrp
mXd7t2SRbQxcev4vSoAXEShrkyeF3/W699BJMCOBHmbOU1ErFtxNYPCvtlekTWVz
Vyh/l/wK0joQMzAQdJoM0H/nBmi0yCUEEmgxBKfWgaoy3dIg+4AZJL7thKnSEwG6
6+DELdYNBP3+OCajgEmIySvH/RGvEP/Le07FuFzwDasOb9ElDcXoDPp/Z2nfXsB5
OsHBUHM2SsU81PbsglAx37b180Wa
-----END CERTIFICATE-----
Generated at Fri May 3 03:45:05 2024 by rpki-client on console-ams.rpki-client.org