Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E858EB70030011EF86C3A460017001B1.roa
File: E858EB70030011EF86C3A460017001B1.roa (raw, json)
Hash identifier: WrPXp6jeRhTebawLvBCL0m1TUATgqst5920OKJNZztM=
Subject key identifier: E8:3F:CF:92:2D:4B:C3:DE:74:7D:03:1A:75:ED:D3:53:D0:04:2D:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8553
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E858EB70030011EF86C3A460017001B1.roa
Signing time: Thu 25 Apr 2024 12:39:51 +0000
ROA not before: Thu 25 Apr 2024 12:39:47 +0000
ROA not after: Sun 05 May 2024 12:39:47 +0000
asID: 142062
IP address blocks: 45.204.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34131 (0x8553)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 12:39:47 2024 GMT
Not After : May 5 12:39:47 2024 GMT
Subject: CN=662a4f16-b164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:2c:ed:c0:15:6b:4b:6b:93:3e:46:cb:d3:
41:a6:f9:68:dc:34:ee:cb:7f:b4:72:de:39:fc:36:
c5:43:7b:11:ac:cc:aa:ba:a3:05:5e:87:0b:85:c5:
02:2e:fb:b0:86:b2:dd:de:55:c3:b3:4a:f5:4a:07:
88:23:eb:ae:31:54:39:a8:0e:f9:9d:81:38:ff:1a:
f3:dd:ec:fe:0a:54:53:8d:71:90:26:56:7a:73:5b:
b1:92:1d:ab:a5:f8:4f:f1:ac:98:8d:19:02:70:cf:
bc:79:a4:b0:a2:d4:02:55:03:0e:bb:2d:ab:d3:0f:
2b:dd:08:12:41:21:2d:39:2c:16:b1:83:15:ab:7e:
82:34:3e:89:29:92:21:f3:77:f9:21:aa:a7:8f:60:
5b:be:ca:49:2f:ae:67:c7:30:a4:d1:0b:49:ce:03:
61:17:33:ce:2e:90:93:ca:e4:15:79:ff:c3:6a:f2:
6f:f3:a1:f2:b2:89:49:7b:5e:40:d5:66:33:e2:9b:
1c:ad:78:ab:06:3b:03:b0:ae:1f:0c:79:05:10:fc:
09:17:fa:36:db:32:e4:19:56:59:7a:67:f0:7d:46:
b0:6b:40:ad:f9:b8:aa:4e:a4:ce:40:3b:36:19:18:
7c:97:af:1a:22:be:d4:10:5d:ff:37:f9:20:b8:34:
2c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3F:CF:92:2D:4B:C3:DE:74:7D:03:1A:75:ED:D3:53:D0:04:2D:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E858EB70030011EF86C3A460017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.32.0/19
Signature Algorithm: sha256WithRSAEncryption
9b:37:18:f4:e5:bf:50:9a:91:d3:fd:91:5b:78:94:b4:81:14:
c4:ac:ba:0b:c3:8e:a3:44:79:e5:d8:5a:a1:a5:c7:6e:23:77:
33:bf:0f:c7:6b:b9:2f:cf:69:08:dc:15:c1:73:bc:de:8a:ac:
a9:ef:d6:1c:6d:95:56:ad:eb:ed:80:3d:22:99:6a:56:92:de:
85:bb:19:6c:a8:b8:b1:61:72:f0:5b:69:45:c5:86:2f:15:61:
ef:26:64:4f:39:11:76:86:22:5f:a4:2a:71:c9:a3:88:59:84:
de:18:23:95:8f:fd:26:24:93:78:7b:a6:fd:80:76:4f:96:cd:
07:a6:fa:de:d7:19:af:ce:da:9b:d6:f3:23:92:45:12:2d:fd:
06:a3:e7:b1:28:11:08:61:0c:0e:d8:c7:e0:80:15:2a:d2:ee:
82:47:30:82:0c:a0:9a:83:99:a0:ec:52:ed:b6:0f:cb:21:78:
cc:7d:17:54:bc:a6:83:41:e2:37:00:fe:d4:c7:d1:43:34:96:
30:0d:18:be:6e:95:81:75:e9:70:83:bd:e7:20:dd:c7:5c:5e:
78:00:8a:51:de:2e:4b:14:47:df:3c:07:72:69:13:08:ed:af:
f7:c7:0e:07:06:32:ae:59:d9:de:40:eb:48:43:b3:05:bf:a1:
e0:6d:f3:cb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIVTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDI1MTIzOTQ3WhcNMjQwNTA1MTIzOTQ3WjAYMRYw
FAYDVQQDEw02NjJhNGYxNi1iMTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAptks7cAVa0trkz5Gy9NBpvlo3DTuy3+0ct45/DbFQ3sRrMyquqMFXocL
hcUCLvuwhrLd3lXDs0r1SgeII+uuMVQ5qA75nYE4/xrz3ez+ClRTjXGQJlZ6c1ux
kh2rpfhP8ayYjRkCcM+8eaSwotQCVQMOuy2r0w8r3QgSQSEtOSwWsYMVq36CND6J
KZIh83f5Iaqnj2BbvspJL65nxzCk0QtJzgNhFzPOLpCTyuQVef/DavJv86HysolJ
e15A1WYz4pscrXirBjsDsK4fDHkFEPwJF/o22zLkGVZZemfwfUawa0Ct+biqTqTO
QDs2GRh8l68aIr7UEF3/N/kguDQsrQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOg/
z5ItS8PedH0DGnXt01PQBC29MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FODU4RUI3MDAzMDAxMUVGODZDM0E0NjAwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLcwgMA0GCSqGSIb3DQEBCwUA
A4IBAQCbNxj05b9QmpHT/ZFbeJS0gRTErLoLw46jRHnl2FqhpcduI3czvw/Ha7kv
z2kI3BXBc7zeiqyp79YcbZVWrevtgD0imWpWkt6FuxlsqLixYXLwW2lFxYYvFWHv
JmRPORF2hiJfpCpxyaOIWYTeGCOVj/0mJJN4e6b9gHZPls0Hpvre1xmvztqb1vMj
kkUSLf0Go+exKBEIYQwO2MfggBUq0u6CRzCCDKCag5mg7FLttg/LIXjMfRdUvKaD
QeI3AP7Ux9FDNJYwDRi+bpWBdelwg73nIN3HXF54AIpR3i5LFEffPAdyaRMI7a/3
xw4HBjKuWdneQOtIQ7MFv6HgbfPL
-----END CERTIFICATE-----
Generated at Mon May 6 02:18:25 2024 by rpki-client on console-ams.rpki-client.org