Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0EFA4A0D1D811EC9289328FF1222468.roa
File: F0EFA4A0D1D811EC9289328FF1222468.roa (raw, json)
Hash identifier: fPavIVXmutD0TX70dYac74QyG7l5EniG2tEJSCj4Syg=
Subject key identifier: 5E:C1:74:60:85:F5:1E:D1:CD:C1:72:38:F2:F7:4F:0B:9B:2C:1C:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 13DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0EFA4A0D1D811EC9289328FF1222468.roa
Signing time: Thu 12 May 2022 09:50:23 +0000
ROA not before: Thu 12 May 2022 09:50:19 +0000
ROA not after: Fri 30 Dec 2022 09:50:19 +0000
asID: 35916
IP address blocks: 45.199.188.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5085 (0x13dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 12 09:50:19 2022 GMT
Not After : Dec 30 09:50:19 2022 GMT
Subject: CN=627cd85f-38f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:38:40:00:87:d5:93:fa:7f:0d:c1:00:2e:a9:
f9:f4:da:64:76:79:5b:8c:cd:3f:45:98:f0:39:b4:
9e:e4:3b:e9:a3:5c:16:e5:c9:a9:6a:cb:d6:21:5b:
9c:4d:6f:96:4d:50:46:75:9f:05:0d:19:08:4d:53:
51:a5:69:93:bc:1d:cb:1b:e9:62:0c:26:ee:b7:86:
d8:f0:77:81:d5:9f:e1:1c:6e:45:1b:ab:25:7e:b3:
15:88:3e:c7:83:52:c1:63:a4:92:d8:8c:3f:13:8a:
a0:45:88:3c:23:d7:28:50:e5:89:80:3d:af:22:9a:
d5:77:7b:7d:4d:28:c9:8a:0b:ba:3d:1b:af:06:7d:
85:a0:b3:47:22:03:bc:ac:32:d7:a8:28:15:7f:4f:
e6:9c:87:5d:1e:b5:db:55:30:ad:83:11:ab:77:e5:
86:df:56:4f:e6:aa:9a:ca:b5:fc:b3:68:98:4e:b7:
bb:91:f2:88:34:63:33:c8:2d:25:ad:22:14:b2:5f:
d6:2c:37:19:25:03:3a:39:3a:b1:af:69:33:56:b8:
8a:8b:2d:60:57:1b:c0:e0:3b:4a:97:8f:f2:c9:59:
33:87:18:81:63:25:14:fc:71:e8:21:6a:d4:f8:0a:
7c:72:01:ed:c4:fd:b3:fe:21:f9:73:a8:06:d8:9a:
64:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C1:74:60:85:F5:1E:D1:CD:C1:72:38:F2:F7:4F:0B:9B:2C:1C:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0EFA4A0D1D811EC9289328FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.188.0/23
Signature Algorithm: sha256WithRSAEncryption
12:f8:d5:7c:ca:2d:60:f6:2a:92:d1:43:f5:31:73:95:e8:41:
4d:33:47:ff:68:86:c4:a8:28:5b:e9:b2:15:67:48:70:52:eb:
9e:36:81:b2:5b:31:87:ce:57:9c:84:eb:3f:cc:35:f8:1a:ba:
37:d2:5a:78:54:99:e5:39:c2:cb:a6:48:e7:f5:05:e4:61:1a:
7b:31:66:88:66:09:af:aa:6b:05:ed:36:28:8c:de:91:bd:d4:
47:02:88:43:09:31:df:de:9c:f7:6e:4a:b9:4c:e3:c9:4d:5c:
dc:58:3c:25:dc:33:52:2f:4e:eb:c2:aa:49:31:91:15:e6:69:
45:a8:8a:44:47:9f:fa:ca:12:73:59:45:ca:1c:3f:be:2b:ee:
14:39:f7:29:05:25:db:d2:7c:aa:17:a3:3f:c9:a6:69:66:82:
3a:11:ee:72:9b:20:89:6b:9a:61:fe:d5:2e:5a:75:b6:36:db:
de:73:fd:1e:ba:a6:a5:06:81:03:48:5a:2a:2d:3d:c0:f3:5d:
2e:e9:93:f1:dd:20:ba:bc:5a:f9:af:a6:21:74:bb:c9:da:a2:
1a:fb:66:81:05:08:47:d8:ef:86:97:50:a0:a5:07:d8:f5:fb:
9f:34:6a:84:e2:3e:5a:1a:77:80:a2:88:89:db:3d:af:0a:f4:
81:00:d9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-ams.rpki-client.org