Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E36702723A9711EFB3DD5344762E951A.roa
File: E36702723A9711EFB3DD5344762E951A.roa (raw, json)
Hash identifier: /aleh0lcE4Wuh3zg23n+gMLEH+/1n20tDU2HJPBCyrg=
Subject key identifier: 43:33:66:C3:37:39:7C:A3:E2:7C:41:D6:A0:E9:69:FA:63:80:8A:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 98BB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E36702723A9711EFB3DD5344762E951A.roa
Signing time: Fri 05 Jul 2024 06:29:10 +0000
ROA not before: Fri 05 Jul 2024 06:29:07 +0000
ROA not after: Thu 01 Aug 2024 06:29:07 +0000
asID: 21859
IP address blocks: 45.196.136.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39099 (0x98bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 06:29:07 2024 GMT
Not After : Aug 1 06:29:07 2024 GMT
Subject: CN=668792b6-005c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c9:a5:28:e4:b9:4c:43:ae:f4:16:45:15:40:
9f:ee:b3:7f:2b:53:e9:77:d8:b1:a5:fa:82:5b:f8:
90:5d:28:1e:8c:1e:4b:17:4e:39:7d:fb:8e:53:44:
50:f4:e1:77:0e:12:4a:26:2b:8f:17:53:27:0e:dc:
99:1b:1e:4c:ba:bc:16:4b:db:8e:a1:85:c8:51:d2:
7a:96:4b:97:e9:b8:98:e2:37:3e:89:61:54:9c:1e:
3e:7b:f9:5c:b6:94:83:67:97:22:88:c8:e3:c9:d4:
ce:b0:7d:c6:fc:59:e8:ea:b9:33:7d:fd:6d:f7:58:
37:5a:00:88:9b:3f:3c:bd:ad:87:da:b1:92:f6:ce:
c4:bc:6b:0e:a7:13:ec:c5:ec:61:7e:0b:c1:a9:f2:
5b:12:c6:71:38:a0:21:c8:d5:4b:a9:77:b2:9b:9d:
be:50:d9:79:2e:81:1e:26:00:de:a7:1f:2a:2c:73:
99:07:25:b0:58:95:7e:fc:98:5e:59:cb:ed:8d:09:
7e:67:35:58:54:4b:ea:19:f7:b0:63:dc:29:72:31:
06:54:35:fb:15:77:98:d8:56:36:25:cd:81:94:41:
7c:e3:2c:96:c8:8d:39:c4:2d:85:3b:13:ab:a6:8c:
f2:2b:a2:36:3c:ed:a6:f5:b2:5e:44:b2:9c:20:f2:
36:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:33:66:C3:37:39:7C:A3:E2:7C:41:D6:A0:E9:69:FA:63:80:8A:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E36702723A9711EFB3DD5344762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.136.0/23
Signature Algorithm: sha256WithRSAEncryption
07:87:89:74:5c:f9:e4:b4:2f:7e:da:30:f8:a4:88:db:d6:8a:
e5:4c:cd:26:0e:e8:2d:3e:56:c2:4b:cc:2c:6a:37:ef:ec:73:
46:37:ea:61:c1:7c:47:d0:94:94:82:04:f8:e5:ee:1e:73:0b:
00:bd:8d:a2:e2:70:06:98:8d:1f:b5:24:d3:26:ce:cd:da:79:
eb:1e:03:a9:d6:d2:7e:5b:e9:2b:b3:69:4e:6a:86:98:52:3d:
57:f4:81:16:2d:ec:39:78:e3:f7:da:8b:74:6d:29:51:af:c0:
10:ef:25:18:7d:d2:ca:52:42:f8:80:86:b5:80:95:7b:26:bb:
db:a8:5c:9f:e8:7e:39:cc:13:4f:ad:54:3b:c6:12:71:6d:91:
e5:b2:7c:58:fc:f6:2f:d5:96:2f:32:ec:cf:4a:fe:8c:96:a5:
17:cd:29:77:e9:f7:0a:87:0c:5d:05:be:49:31:f8:68:c0:f7:
59:a8:1c:b1:59:ce:f2:89:26:bd:80:77:60:2a:45:3b:51:0d:
ae:e5:c6:16:0f:d8:da:1f:a3:05:9b:9b:a3:31:f7:fa:56:09:
1d:d9:19:99:03:31:7a:98:0e:60:02:e4:54:a6:a2:9d:fd:6d:
b6:b1:d7:9a:f5:01:01:34:a6:55:16:c3:b9:09:d9:47:88:0e:
5f:cb:2a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 10:33:29 2024 by rpki-client on console-ams.rpki-client.org