Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD28D31C074611EDB70126C5F1222468.roa
File: DD28D31C074611EDB70126C5F1222468.roa (raw, json)
Hash identifier: 6v6UGIfLQLiq1yD6R4EcF8z8vl17dSgH+/tL5ecSOnk=
Subject key identifier: 59:0D:79:4C:0F:DD:6D:F8:CE:57:C1:85:C1:21:95:8E:6F:BD:37:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 157E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD28D31C074611EDB70126C5F1222468.roa
Signing time: Tue 19 Jul 2022 09:40:46 +0000
ROA not before: Tue 19 Jul 2022 09:40:42 +0000
ROA not after: Tue 11 Jul 2023 09:40:42 +0000
asID: 136950
IP address blocks: 45.204.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5502 (0x157e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 09:40:42 2022 GMT
Not After : Jul 11 09:40:42 2023 GMT
Subject: CN=62d67c1e-d8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:12:6d:db:fc:85:dd:ee:00:20:2e:69:73:
52:ba:30:ad:59:ee:05:b3:e3:f1:c3:29:43:61:08:
47:99:21:0e:aa:ba:be:4e:e9:de:d0:ca:e0:d5:93:
86:1a:62:6b:c1:bd:f7:e2:4c:6d:2c:c3:5c:fc:6c:
c8:1f:95:53:bd:90:0a:3f:ff:bf:a0:12:4d:dd:52:
7f:1c:a4:ae:4e:0d:87:a6:37:6a:1c:f2:1a:da:d7:
02:40:d0:30:ce:77:ae:7c:a8:d4:bf:7e:9a:70:f5:
3e:40:82:0b:aa:1a:25:c2:ef:50:2b:df:43:3b:35:
ea:ec:9c:96:c9:12:c4:59:c0:6b:48:2d:9b:1e:9b:
7c:9c:ca:13:85:a6:f6:ea:cb:02:93:34:db:fc:3c:
8f:9d:a3:89:2c:c1:b4:58:be:e5:5d:b7:5e:2f:a4:
8c:7e:11:38:d9:43:57:2c:0d:4b:0f:f6:07:b2:8f:
c4:24:a0:6f:21:f0:a0:07:85:d8:08:39:84:b5:a2:
c9:05:d7:a2:a5:1b:f9:45:8e:d3:4b:5c:a5:51:20:
a0:3a:5e:86:5c:73:44:de:96:3c:72:b8:fb:8b:d4:
21:77:b7:2b:fc:ea:60:b8:6c:7a:f1:f8:e3:35:17:
7d:b7:6a:6d:24:ef:f3:a3:3e:20:34:2d:54:98:be:
54:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0D:79:4C:0F:DD:6D:F8:CE:57:C1:85:C1:21:95:8E:6F:BD:37:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD28D31C074611EDB70126C5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.82.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:91:97:ec:b1:33:ff:f9:d3:72:bb:05:97:7c:c5:e6:b0:63:
7a:51:3f:80:b7:73:8b:fa:16:42:19:5b:30:40:52:c7:07:d5:
15:8d:29:5a:5d:b7:e8:74:b3:c0:f4:14:95:59:8c:04:64:ab:
bd:d4:68:ec:85:57:c9:7b:ad:c7:d7:2f:45:7d:e8:34:95:67:
fd:73:a6:51:f7:94:39:5f:25:5d:2e:8a:7a:c6:db:01:7f:7a:
3b:16:14:99:01:8b:f2:5f:e4:50:47:1d:31:39:90:6b:d8:b0:
b8:c7:6d:d4:08:1a:42:a1:6a:05:be:c5:d1:b6:b4:4f:bb:b6:
00:c8:3c:fb:7f:f8:a3:b0:a2:22:2e:dc:f8:af:be:21:f1:6f:
cb:8c:4d:90:f4:57:9f:39:58:f4:ee:87:ba:0e:83:5f:46:6f:
92:c4:88:44:08:b4:f1:ab:6b:1f:6f:69:ae:1f:bf:38:96:ef:
b6:2f:6e:65:d7:73:4d:87:de:d4:8c:2b:ae:37:d9:a4:9a:9c:
44:75:bb:46:f2:47:1a:5b:bc:c3:54:73:76:57:6f:db:eb:af:
57:fd:af:91:79:5a:db:d4:5d:1d:bd:62:e1:63:a3:c7:82:bd:
e4:10:7b:e7:c1:8c:ca:dc:7c:c6:ff:f0:a0:c8:a9:39:8e:d6:
26:5e:ab:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-ams.rpki-client.org