Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7822FD03DC111EF8CFFEC97762E951A.roa
File: E7822FD03DC111EF8CFFEC97762E951A.roa (raw, json)
Hash identifier: zYrt9sA0cX6Lk2QCht8ynONCj4fdzSTkIj49baNXju8=
Subject key identifier: 29:7D:AB:2A:20:61:18:EF:4F:52:54:15:67:11:07:D6:C5:8F:61:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 99FD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7822FD03DC111EF8CFFEC97762E951A.roa
Signing time: Tue 09 Jul 2024 07:07:29 +0000
ROA not before: Tue 09 Jul 2024 07:07:26 +0000
ROA not after: Fri 02 Aug 2024 07:07:26 +0000
asID: 139646
IP address blocks: 45.200.18.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39421 (0x99fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 07:07:26 2024 GMT
Not After : Aug 2 07:07:26 2024 GMT
Subject: CN=668ce1b1-d86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:c6:67:09:81:2e:e9:81:b1:90:a6:0f:66:
95:c7:3e:84:50:12:d1:80:d7:07:81:45:e8:96:57:
41:1d:a4:db:5c:07:45:cc:cf:cc:6f:00:0d:6f:40:
2e:bf:5d:2b:fe:1d:fc:13:ae:40:0a:1d:51:36:f3:
60:4a:82:d8:47:37:a1:77:b5:6f:ca:86:13:0c:7a:
b7:5f:cf:4d:68:15:b2:9b:83:f7:53:bb:ce:4d:d4:
1d:83:33:0d:f5:77:fd:43:84:57:44:8d:93:a8:a8:
10:96:dd:aa:ce:94:70:69:ce:72:a5:17:be:06:70:
f5:90:32:8a:9a:40:75:be:b5:2c:2b:c6:0d:77:be:
b4:f5:84:3e:ff:1d:35:af:62:08:fb:fe:b5:a8:43:
38:3a:dd:49:95:54:e5:60:90:ee:f9:86:98:2c:08:
6a:ef:41:72:8b:65:59:5e:a2:26:10:47:87:c2:9c:
d4:90:3c:79:69:e4:a2:af:10:4c:6a:1d:09:48:99:
61:92:9f:b2:4e:75:88:36:42:e3:d8:61:24:15:67:
e7:d5:db:1c:c9:97:d6:8f:98:59:98:49:88:88:49:
02:76:fe:1a:0d:45:d9:c8:6d:93:4c:14:8d:fb:2d:
3b:7e:1f:c2:56:31:a4:0f:24:a8:37:70:78:63:65:
89:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7D:AB:2A:20:61:18:EF:4F:52:54:15:67:11:07:D6:C5:8F:61:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7822FD03DC111EF8CFFEC97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.18.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:78:54:fe:dc:37:04:46:2f:9a:13:de:6c:75:90:3c:15:a2:
23:99:00:97:af:31:1b:2d:34:12:cd:10:58:03:a6:88:e7:71:
c2:35:22:1d:05:32:6f:79:5b:91:96:88:aa:64:5a:92:74:33:
d6:fd:e1:38:16:88:25:74:49:f0:f5:0a:c6:de:bf:06:c9:aa:
66:45:b8:d2:a3:f5:32:96:69:5d:c1:ee:73:4e:e8:b3:bd:ed:
e3:96:4a:92:b9:50:50:1d:89:6f:6f:fb:0e:d2:63:5c:98:c5:
6f:4c:c7:f4:9b:79:ed:20:43:29:15:1e:3b:3b:53:e5:29:ff:
74:82:72:38:29:29:18:bd:c5:21:e7:83:20:8c:aa:a0:44:53:
96:14:13:3f:f0:5c:5b:fd:d0:b3:8a:e1:89:1f:41:0a:53:ba:
76:cc:e6:bf:35:29:e5:06:3d:ee:3f:32:26:0d:fa:ff:ea:46:
aa:fa:4e:39:1e:75:77:39:29:bf:a2:7f:80:d0:6c:aa:ab:e5:
f1:da:f7:03:22:88:7b:28:48:a1:9d:bb:79:89:d1:68:f4:17:
9a:c6:f6:7f:04:27:82:e0:65:25:2a:2b:1d:e0:08:64:9a:98:
2a:e1:bf:a0:33:fe:41:51:dc:23:4d:e8:b7:20:60:1f:34:28:
2b:a5:0e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 09:58:15 2024 by rpki-client on console-fra.rpki-client.org