Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F13A5E5C50F311EC85682601D8A014CE.roa
File: F13A5E5C50F311EC85682601D8A014CE.roa (raw, json)
Hash identifier: 3ycptlgFTjzWydtNd9vw4QqqPA5olEw5/KgJRjJpeE8=
Subject key identifier: 63:7D:24:30:0C:39:03:49:25:D4:D0:F7:3D:CB:CA:E6:47:A3:61:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0F97
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F13A5E5C50F311EC85682601D8A014CE.roa
Signing time: Mon 29 Nov 2021 09:08:40 +0000
ROA not before: Mon 29 Nov 2021 09:08:36 +0000
ROA not after: Thu 29 Dec 2022 09:08:36 +0000
asID: 9009
IP address blocks: 45.192.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3991 (0xf97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 29 09:08:36 2021 GMT
Not After : Dec 29 09:08:36 2022 GMT
Subject: CN=61a49898-af4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:4d:b5:7f:a0:1a:8b:46:db:e7:1d:73:80:
a4:f1:20:81:45:30:6f:d7:81:a7:1e:c3:87:c9:59:
f3:55:1d:73:3c:08:7b:8c:08:2b:31:01:d9:ae:91:
81:fa:71:be:79:c2:52:20:48:22:1d:31:bc:cf:12:
f3:c9:14:a5:9a:3e:df:7d:f1:f3:56:dc:48:3c:89:
28:73:33:77:2e:6b:ab:b0:6c:30:a0:e0:a1:70:7c:
43:8e:a8:a5:76:65:23:0a:33:48:8a:a7:87:1f:ce:
f1:c3:d6:a7:2b:8e:3d:5d:f6:ec:e7:dc:79:df:09:
e1:4c:5b:7f:6c:ce:b5:da:38:e0:bb:8d:27:50:bf:
00:4d:ae:bb:4a:d9:cf:ae:7e:ab:7a:aa:a6:9b:33:
15:2d:17:89:a1:28:4a:3a:ca:75:14:68:2c:33:fc:
01:38:6a:74:f1:44:7d:f2:df:e3:9e:e1:64:62:5d:
04:2a:5a:d1:fa:42:73:22:a9:63:12:2c:9f:18:58:
2c:e8:98:02:ec:53:0f:80:26:2c:ec:64:68:2d:69:
9d:82:82:23:1b:19:df:81:18:34:38:4a:c7:18:a5:
95:59:ea:e8:fc:b1:91:cc:96:22:a7:54:61:8d:41:
dd:75:09:cf:83:8f:67:45:d4:f8:cb:e1:4c:21:63:
d0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7D:24:30:0C:39:03:49:25:D4:D0:F7:3D:CB:CA:E6:47:A3:61:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F13A5E5C50F311EC85682601D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.156.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:eb:10:c7:81:a4:ca:6f:4d:70:46:58:71:2f:90:b0:0b:2a:
5c:0a:8f:17:52:ad:e4:b3:53:14:ee:82:65:b1:06:55:96:8f:
b2:1d:f4:ed:20:75:d5:50:3a:f9:30:ab:35:7c:b4:69:03:ff:
d2:d7:fd:fb:4b:b4:20:b1:d3:8c:a4:45:cd:02:1a:5e:f0:19:
c0:66:96:8a:93:2f:e0:40:44:18:26:7f:4f:5e:0f:2d:77:ed:
dd:ab:65:ea:76:df:04:7e:18:75:d4:80:31:9b:b5:cf:a4:3a:
45:ce:e2:df:42:9c:a3:a9:28:d4:0e:fc:80:82:0e:f1:b3:b9:
f2:fb:41:17:e8:15:6a:17:0a:89:d8:99:cd:16:57:4f:1f:14:
46:e3:7b:c2:67:66:97:e4:4d:33:d2:c7:4e:02:40:93:b5:f1:
d1:07:ab:27:86:12:62:ce:af:5c:14:9a:8e:fb:d5:fa:e6:38:
e7:30:96:05:10:52:49:d1:3d:09:f2:76:d9:8b:b3:f4:1f:a9:
72:ba:6d:cb:8d:c9:27:a1:99:a1:c4:52:e0:76:76:5e:a1:70:
e5:19:38:fb:e7:ca:f4:6c:7b:ad:ab:a5:bd:c3:57:68:eb:6e:
1d:85:f0:c7:28:21:a0:2f:0d:a6:0d:16:4e:87:40:e4:54:7a:
73:06:c2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:29 2023 by rpki-client on console-ams.rpki-client.org