Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D888B702A81811EB8245950EF8AEA228.roa
File: D888B702A81811EB8245950EF8AEA228.roa (raw, json)
Hash identifier: uQ/M8AnBkEbdFTf+UNh/xsNw/iqyCMT78DpAh/zE4gU=
Subject key identifier: 33:D9:A7:79:88:AE:19:16:8F:17:83:78:14:44:79:BA:2E:DB:17:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 058B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D888B702A81811EB8245950EF8AEA228.roa
Signing time: Wed 28 Apr 2021 11:57:03 +0000
ROA not before: Wed 28 Apr 2021 11:56:59 +0000
ROA not after: Tue 28 Jun 2022 11:56:59 +0000
asID: 136744
IP address blocks: 45.200.134.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1419 (0x58b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 11:56:59 2021 GMT
Not After : Jun 28 11:56:59 2022 GMT
Subject: CN=60894d8f-c9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:29:0f:31:6b:79:a8:7f:3b:7c:6d:51:28:0c:
cb:29:8e:0e:b5:4f:65:f9:44:ae:71:37:7c:63:62:
3e:ed:ed:4f:d2:a3:89:ae:a1:9c:14:f3:8d:50:c9:
b6:d5:ea:90:47:2c:cd:85:16:1d:a7:f4:51:04:8f:
ad:c6:4c:f3:55:dc:88:09:85:e6:7e:27:a2:49:12:
e9:7a:1a:2b:bc:e2:a9:6f:a6:9d:53:8e:9f:e9:d2:
65:47:a3:be:27:a6:db:2f:37:fb:8d:c0:9f:f2:cc:
85:ce:bf:d0:b6:fb:f9:e9:1a:93:6d:5c:2b:2f:96:
2f:1b:ff:76:c7:98:11:8f:4d:ac:e5:00:f6:2f:e9:
3b:06:47:06:11:d8:5b:f2:0c:46:a1:e1:4f:b1:7a:
c5:e5:0c:cc:e4:3b:11:0d:7b:6b:55:6e:69:03:31:
55:bc:4f:1e:89:eb:a5:a6:de:98:bc:1d:93:84:86:
b9:28:30:0d:ce:61:72:a8:ef:b3:74:d0:1d:42:d8:
47:3c:77:53:43:53:e8:cd:71:70:54:ab:53:5d:26:
ba:0e:d6:47:5f:91:70:b9:0f:69:f4:cf:dc:49:c3:
52:09:8a:96:d6:50:8b:0c:f5:b9:95:34:8d:89:37:
24:15:85:36:c2:98:fb:76:5e:a0:9c:c0:a0:9e:f9:
1b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D9:A7:79:88:AE:19:16:8F:17:83:78:14:44:79:BA:2E:DB:17:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D888B702A81811EB8245950EF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.134.0/23
Signature Algorithm: sha256WithRSAEncryption
30:3f:6e:70:99:ad:a9:a4:de:91:35:80:bc:9e:fd:33:f6:74:
9c:bd:fc:35:2a:fb:b3:44:44:74:6e:56:27:11:0b:0f:69:d4:
f3:90:4d:d8:b1:bd:b2:93:91:64:9e:8d:40:d4:eb:f9:8f:6a:
30:45:03:d6:cd:c2:99:3e:11:b4:e3:44:8b:26:ba:06:a0:eb:
d8:a4:f7:0f:75:14:98:a3:1b:2d:6e:6a:a8:7e:79:40:08:a6:
5d:2b:9e:67:14:9e:c5:e2:61:f4:61:88:12:24:98:e8:74:25:
b2:1d:af:f2:4f:59:15:53:1c:48:0c:d2:67:48:6e:7b:b3:0e:
0c:60:04:77:f5:94:cb:e4:64:a6:5e:cb:69:05:50:24:66:58:
a5:ac:ce:4e:94:0e:c3:33:af:e8:0b:85:f8:56:15:dd:d1:21:
df:07:26:b0:90:ed:38:6b:f4:ea:f6:33:a6:46:32:92:b3:08:
30:92:ec:2a:1b:1f:8b:2d:0d:ce:5b:3b:24:cd:e5:7d:3b:62:
ee:75:38:e8:34:b8:fe:3d:3b:36:5d:3a:eb:0b:87:89:ca:1d:
fa:70:86:e0:d5:d6:49:30:15:df:3e:e3:5a:a1:80:20:21:bd:
0d:ec:4a:12:cc:5c:53:41:e9:5b:b2:37:11:ce:81:f0:f6:cb:
24:51:06:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-ams.rpki-client.org