Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F37B635802FA11EF8927802E017001B1.roa
File: F37B635802FA11EF8927802E017001B1.roa (raw, json)
Hash identifier: yzhyi03bQFXagecaHWlph2s9mrV964OLbN0r8LxXlnQ=
Subject key identifier: E5:AE:9D:4D:80:81:9F:F0:C6:05:DF:5C:92:50:8C:AA:B8:58:3F:CA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 852D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F37B635802FA11EF8927802E017001B1.roa
Signing time: Thu 25 Apr 2024 11:57:12 +0000
ROA not before: Thu 25 Apr 2024 11:57:09 +0000
ROA not after: Sun 05 May 2024 11:57:09 +0000
asID: 5065
IP address blocks: 45.204.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34093 (0x852d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 11:57:09 2024 GMT
Not After : May 5 11:57:09 2024 GMT
Subject: CN=662a4518-b331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ea:37:fd:fb:df:b1:f9:46:29:0a:85:91:d9:
4f:7c:1c:ca:5e:3f:b6:8c:00:d2:8f:29:f4:59:b5:
09:18:f9:f3:ae:a3:60:6d:19:9d:ef:19:b0:ce:4b:
cb:fa:2a:d4:0f:fc:1e:77:5a:da:94:57:95:f7:dc:
55:3c:77:4a:86:e8:66:ef:81:9e:91:e0:85:ee:e1:
73:0e:ba:80:14:e8:6b:ce:da:55:3d:09:b8:01:d9:
2c:bd:7e:cb:84:be:22:bb:a7:cf:38:e0:67:0d:f9:
fb:05:93:bf:e6:82:8d:ff:ba:97:9d:54:4a:55:d0:
56:2d:32:ca:d3:d2:4b:78:cc:4e:4d:09:b0:c1:28:
47:59:52:e9:ee:db:49:7e:79:a2:72:2e:bc:5b:15:
d3:da:f2:49:98:8a:e4:e0:64:ae:8b:e8:8a:5e:89:
bc:28:36:e3:a2:7c:de:a3:0d:e7:c7:9e:dc:33:3d:
29:b4:a5:aa:2a:b3:1e:83:2d:f7:66:35:4b:08:61:
82:06:87:1f:44:ae:b9:75:2e:8d:21:eb:8f:29:43:
ac:7f:60:11:f0:f4:6c:66:80:ae:02:cc:e5:2e:22:
e9:f5:43:eb:2e:ad:1a:d4:30:bc:73:52:22:54:78:
2d:37:47:b8:09:5b:48:10:70:4b:9f:1b:86:71:60:
30:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AE:9D:4D:80:81:9F:F0:C6:05:DF:5C:92:50:8C:AA:B8:58:3F:CA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F37B635802FA11EF8927802E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.76.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:c6:b2:31:f9:96:df:f9:02:04:bc:cb:41:c2:66:49:fc:be:
76:63:41:ff:c8:c0:a4:51:9d:22:20:07:41:96:03:62:61:e0:
00:94:79:bb:e0:de:fd:18:d0:a6:88:fb:99:aa:4d:ba:f2:d7:
e9:75:60:40:9f:5a:f0:88:23:6f:25:c8:a4:10:77:33:a5:7e:
c3:e4:1b:da:a9:8a:d7:b4:d2:ed:93:61:fa:7f:4d:ff:93:40:
41:3e:cf:96:95:80:d9:9c:80:02:e2:45:c9:8e:6e:04:f3:18:
70:fc:23:d6:56:e3:bb:c2:f8:47:66:ed:20:0f:a5:a9:01:5f:
e8:14:87:92:eb:56:eb:f0:9e:d8:89:35:30:de:a2:75:30:c1:
5d:0c:da:57:43:22:bf:64:54:37:29:47:88:c7:33:92:02:5f:
a7:fa:02:88:09:1e:21:5b:aa:90:33:58:95:21:7f:e7:92:fc:
e9:20:bb:a3:f5:c8:9c:80:05:9d:e8:40:ee:73:dd:95:ca:61:
46:62:b5:b1:47:77:87:4f:41:a7:ab:36:ca:d7:d2:d0:e6:78:
0c:78:aa:fe:d4:7e:6c:1e:8f:59:61:0d:80:ec:49:68:86:b4:
03:08:74:1b:7c:65:e0:04:3f:2f:d6:2c:0d:9e:21:37:eb:86:
08:7e:e4:fe
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIUtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDI1MTE1NzA5WhcNMjQwNTA1MTE1NzA5WjAYMRYw
FAYDVQQDEw02NjJhNDUxOC1iMzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7uo3/fvfsflGKQqFkdlPfBzKXj+2jADSjyn0WbUJGPnzrqNgbRmd7xmw
zkvL+irUD/wed1ralFeV99xVPHdKhuhm74GekeCF7uFzDrqAFOhrztpVPQm4Adks
vX7LhL4iu6fPOOBnDfn7BZO/5oKN/7qXnVRKVdBWLTLK09JLeMxOTQmwwShHWVLp
7ttJfnmici68WxXT2vJJmIrk4GSui+iKXom8KDbjonzeow3nx57cMz0ptKWqKrMe
gy33ZjVLCGGCBocfRK65dS6NIeuPKUOsf2AR8PRsZoCuAszlLiLp9UPrLq0a1DC8
c1IiVHgtN0e4CVtIEHBLnxuGcWAwMwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOWu
nU2AgZ/wxgXfXJJQjKq4WD/KMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GMzdCNjM1ODAyRkExMUVGODkyNzgwMkUwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcxMMA0GCSqGSIb3DQEBCwUA
A4IBAQC0xrIx+Zbf+QIEvMtBwmZJ/L52Y0H/yMCkUZ0iIAdBlgNiYeAAlHm74N79
GNCmiPuZqk268tfpdWBAn1rwiCNvJcikEHczpX7D5BvaqYrXtNLtk2H6f03/k0BB
Ps+WlYDZnIAC4kXJjm4E8xhw/CPWVuO7wvhHZu0gD6WpAV/oFIeS61br8J7YiTUw
3qJ1MMFdDNpXQyK/ZFQ3KUeIxzOSAl+n+gKICR4hW6qQM1iVIX/nkvzpILuj9cic
gAWd6EDuc92VymFGYrWxR3eHT0GnqzbK19LQ5ngMeKr+1H5sHo9ZYQ2A7ElohrQD
CHQbfGXgBD8v1iwNniE364YIfuT+
-----END CERTIFICATE-----
Generated at Mon May 6 02:18:25 2024 by rpki-client on console-ams.rpki-client.org