Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD420820F5C911EC85CB74B7F1222468.roa
File: DD420820F5C911EC85CB74B7F1222468.roa (raw, json)
Hash identifier: 7h9Xl8IuORODO6FLGrmJluLIQ9mwbuBo/i4bObGYBzw=
Subject key identifier: 2D:A5:84:B1:70:C7:BC:C9:5D:25:BC:67:31:D2:EF:F3:FE:52:22:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1519
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD420820F5C911EC85CB74B7F1222468.roa
Signing time: Mon 27 Jun 2022 03:33:09 +0000
ROA not before: Mon 27 Jun 2022 03:33:06 +0000
ROA not after: Sat 01 Apr 2023 03:33:06 +0000
asID: 328957
IP address blocks: 45.200.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5401 (0x1519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 03:33:06 2022 GMT
Not After : Apr 1 03:33:06 2023 GMT
Subject: CN=62b924f5-c8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:84:a8:f8:99:42:5f:3b:a9:47:25:a8:62:
0a:a8:df:d1:c4:f1:98:62:34:fa:bb:fe:7f:d8:38:
59:43:93:bd:38:dc:76:b7:1f:81:8c:5c:de:44:1a:
f8:24:74:34:38:8a:7e:b3:43:5b:be:88:76:df:d7:
7c:20:d3:87:1c:10:9f:35:85:c5:c4:f1:9b:9d:d9:
dc:f6:e2:91:bd:34:cc:42:e0:59:19:b5:ae:67:e6:
14:e6:16:e3:d3:c1:22:e6:e8:05:1b:86:16:a0:af:
2a:09:4c:28:3f:95:a1:dc:89:9d:93:f9:5c:e9:44:
0c:bb:af:84:fa:3a:c3:cd:e0:7e:af:55:36:ec:07:
cf:85:a8:79:7d:14:2d:8e:ae:03:e6:0b:6c:13:14:
78:9b:cb:56:f0:cd:08:e4:69:bc:ee:c5:38:a7:d4:
18:39:c5:52:97:54:d3:6b:ef:b3:24:f0:f7:7f:aa:
b5:29:98:8d:ff:ba:a8:87:77:48:8f:db:c1:3e:f4:
7d:84:80:f3:d8:69:f3:2a:b5:91:ba:1a:ed:ad:e5:
ef:63:eb:a6:e0:7f:22:8e:91:f6:24:e6:06:5d:32:
15:30:f6:1a:ce:bc:00:f6:13:8d:0d:ab:20:c5:49:
f9:ed:77:04:74:de:f9:1f:d0:79:54:05:a4:0a:cd:
2f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A5:84:B1:70:C7:BC:C9:5D:25:BC:67:31:D2:EF:F3:FE:52:22:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD420820F5C911EC85CB74B7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.133.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:7c:f1:c6:6e:76:17:69:da:2a:d0:13:83:fb:a5:a5:60:ba:
5f:d5:76:86:6b:bc:50:d9:9f:af:3e:e1:d7:9e:88:3a:3a:96:
d5:2b:1d:aa:02:9b:7b:42:f5:90:d1:f1:2d:d9:fe:2e:be:d6:
28:62:7f:2a:4f:88:c5:87:3a:4a:64:a9:77:6e:5d:0f:11:25:
cf:11:c9:6e:04:48:ab:d2:a0:ae:5a:66:70:85:ae:6e:0a:19:
2f:a2:bf:e5:b2:c9:95:cf:0c:b2:d8:4d:32:cc:85:1b:fa:c1:
d7:29:32:47:c2:14:76:38:6d:bc:6f:ec:2e:08:b1:9e:19:00:
f9:22:65:0e:5f:01:14:25:ba:d8:85:11:26:41:03:f8:c9:02:
9b:2d:64:2e:3a:2d:b7:0e:92:fd:85:f6:37:98:06:11:84:05:
4a:aa:ae:41:0e:01:e8:ef:bb:2e:f2:99:24:6e:5a:7d:c7:ee:
5e:02:ba:6f:36:e2:a5:c3:34:9f:a0:e3:d0:13:5b:96:07:0e:
36:41:d8:93:14:dd:e6:88:90:51:29:88:4d:76:76:8e:bd:cb:
20:fa:b7:d8:9f:e4:9d:34:1b:ac:69:45:01:5a:4b:2c:98:31:
2b:ae:2b:01:eb:03:2e:8a:2c:ac:04:64:d9:7b:8a:36:9f:3e:
4b:cc:fa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-fra.rpki-client.org