Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7C07E4AFB9811EEAACB9203017001B1.roa
File: E7C07E4AFB9811EEAACB9203017001B1.roa (raw, json)
Hash identifier: aNi/Zv7lCguGj/I1iRltg78fUijmBJ7FB//xcstVq0Y=
Subject key identifier: 11:26:8C:22:8F:C4:EF:0F:B2:4D:49:A0:7E:9D:E4:4C:66:87:03:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 82AB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7C07E4AFB9811EEAACB9203017001B1.roa
Signing time: Tue 16 Apr 2024 02:27:44 +0000
ROA not before: Tue 16 Apr 2024 02:27:40 +0000
ROA not after: Thu 25 Apr 2024 02:27:40 +0000
asID: 136950
IP address blocks: 45.204.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33451 (0x82ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 02:27:40 2024 GMT
Not After : Apr 25 02:27:40 2024 GMT
Subject: CN=661de220-3d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bf:48:b7:dc:4b:f3:af:c9:01:f1:d9:5d:1b:
ad:88:34:f5:18:82:19:30:0e:9e:b3:88:c9:75:5e:
20:00:57:11:df:5a:70:10:18:fb:f5:e2:d8:2a:26:
43:d1:30:c8:66:e3:4e:f0:d6:f9:bb:0f:aa:f1:bf:
ef:d2:07:86:13:f2:05:30:92:d8:f8:5e:80:70:12:
e4:f5:a4:53:8f:9f:13:c0:86:10:d6:d0:99:5a:53:
9a:35:ff:96:9c:6e:b7:0a:5b:37:a5:93:9c:80:e8:
0a:4a:90:a2:2a:34:f3:1f:23:a4:83:57:15:87:66:
26:56:eb:75:a0:2b:51:8b:c6:97:b5:d2:ec:fa:86:
ba:08:ec:d6:1b:b0:fe:e5:33:8c:ef:44:8d:13:61:
b5:5a:83:46:3d:be:fc:88:dc:52:c4:68:fc:1c:3c:
87:03:34:73:bf:89:40:99:79:81:85:b9:d1:3d:4b:
95:fb:b8:81:ea:b7:c8:3a:0e:50:4b:aa:43:77:ad:
a3:42:f3:88:ae:0c:4c:04:27:87:d5:9e:bb:b9:27:
54:80:67:78:ee:f4:e9:13:50:80:2f:90:f3:da:0f:
38:6f:b0:33:e0:16:fb:f9:55:4e:48:8b:c7:f0:d3:
83:bd:91:89:78:95:4f:68:8a:6d:2e:72:e5:ff:e2:
db:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:26:8C:22:8F:C4:EF:0F:B2:4D:49:A0:7E:9D:E4:4C:66:87:03:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7C07E4AFB9811EEAACB9203017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.85.0/24
Signature Algorithm: sha256WithRSAEncryption
18:16:3e:4d:de:2f:17:14:0f:89:12:4f:f5:bf:ae:db:d7:b4:
ba:58:82:09:59:e1:cd:2f:68:f8:6e:94:a4:2f:ca:2a:c3:66:
46:5b:b2:26:32:2b:6b:63:a9:5b:ca:5e:e3:95:2d:db:c7:5c:
a3:07:61:a7:ae:24:f1:3c:e4:1a:df:2c:22:5b:64:69:91:66:
c0:41:25:92:d1:83:7a:76:8b:80:fa:82:59:2f:c8:f9:96:17:
7c:ad:7f:e7:c3:a6:57:96:f3:e9:b1:a1:55:5e:95:28:5f:d2:
b4:98:77:fd:39:80:a5:32:4b:23:69:3a:56:d1:cc:70:0b:1a:
55:da:99:c0:38:08:b0:95:7f:2f:bb:4c:51:cf:9e:ba:eb:2c:
4b:ab:45:17:2b:04:cc:04:9b:b6:f9:40:ae:8f:cf:7e:34:2c:
d7:d4:0d:6c:44:be:41:f6:bc:a4:8f:75:51:12:85:09:88:ac:
c6:ae:50:5d:12:1e:ad:db:07:90:ca:95:c6:d7:37:01:a5:c9:
77:74:64:69:03:90:59:2a:bf:e2:88:1b:15:2a:d3:50:8f:29:
74:1b:52:da:62:c6:f0:b6:5d:be:eb:f0:e8:d6:8f:3e:66:25:
f3:b4:7c:c4:1e:bd:6e:a8:8a:4b:1d:49:97:f0:32:1b:de:34:
9b:0b:8b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:50:19 2024 by rpki-client on console-fra.rpki-client.org