Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F399D530736211EFB97A58AB762E951A.roa
File: F399D530736211EFB97A58AB762E951A.roa (raw, json)
Hash identifier: iTY70WHAr2UMNHCwoSlDhjKrn/V6zpX6nvn12N4Vqcg=
Subject key identifier: 72:52:B0:21:DB:3C:90:68:E6:2A:21:4A:CA:76:C3:82:EE:27:0C:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B690
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F399D530736211EFB97A58AB762E951A.roa
Signing time: Sun 15 Sep 2024 13:03:50 +0000
ROA not before: Sun 15 Sep 2024 13:03:47 +0000
ROA not after: Tue 15 Oct 2024 13:03:47 +0000
asID: 50580
IP address blocks: 45.200.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46736 (0xb690)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 13:03:47 2024 GMT
Not After : Oct 15 13:03:47 2024 GMT
Subject: CN=66e6db36-1af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:88:bf:97:dc:3d:2c:81:86:32:cb:e2:99:04:
fa:2c:14:03:6d:9e:0c:06:5e:51:71:a4:b8:f1:d9:
4b:7d:d5:4f:7f:15:ab:79:ec:9c:ec:6a:c3:f1:24:
22:b7:12:54:18:ad:93:00:0d:0b:3e:1d:e2:94:62:
73:2d:01:84:c7:c2:17:0a:cd:ba:37:b6:56:bc:e5:
8e:82:94:91:65:09:de:f0:fb:75:69:16:8b:da:bd:
8a:08:32:de:e7:4f:9d:1d:2a:3d:43:34:72:8e:b2:
0e:cd:a4:ee:f8:d2:77:7e:0b:06:d3:e2:fc:17:92:
e0:4b:de:b1:c7:f8:dd:50:a2:b8:b2:52:5c:54:7a:
a1:c4:38:8e:02:37:6d:20:7f:50:be:b6:ae:0c:dd:
72:2f:89:ce:85:53:ea:89:b2:a9:29:86:90:55:fe:
02:44:51:81:27:cc:b8:fa:6e:56:93:ec:d8:a2:bc:
12:48:8e:7f:90:c4:2c:28:37:71:ca:83:bb:56:6e:
7a:11:5b:23:54:cb:f4:0e:79:c1:5d:ac:bc:c0:83:
78:be:6d:1c:22:eb:cf:9d:b2:60:95:2a:ee:f6:3b:
f4:00:86:bf:24:a8:8d:97:5f:72:10:87:69:a0:4a:
1a:5f:30:d5:16:6f:b0:1c:ff:d4:4d:c1:4b:ab:0f:
37:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:52:B0:21:DB:3C:90:68:E6:2A:21:4A:CA:76:C3:82:EE:27:0C:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F399D530736211EFB97A58AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.148.0/24
Signature Algorithm: sha256WithRSAEncryption
68:2f:0a:a8:c1:17:06:94:31:14:e7:34:86:77:08:a0:84:66:
83:11:67:5e:6f:a2:fd:c3:d8:3d:3c:73:29:ef:c9:ff:ea:2b:
20:8e:9a:30:1f:c3:66:ce:4c:98:bd:2a:5b:eb:4f:2c:9b:ff:
93:45:8d:df:13:cd:83:f3:4f:7a:2a:82:e8:b7:22:5e:aa:e6:
bf:67:c3:12:b4:54:9d:62:ee:8c:6d:8f:61:3c:5a:6b:7a:2f:
31:58:61:07:b2:b2:5d:d6:0a:bb:80:ac:c0:8b:5a:da:6b:74:
7a:68:cd:70:2b:62:2f:c0:3f:4b:8f:49:f0:3b:02:e9:c0:ec:
2d:6c:65:bb:fa:7e:8f:fd:99:6c:0c:f7:83:6f:e6:8d:46:f5:
b5:3a:13:5d:69:0a:92:d1:6e:cb:7e:4f:6e:86:b7:6e:cc:60:
0f:3d:07:fc:22:ef:37:b7:6f:dc:01:c0:c3:5e:eb:c3:81:6d:
39:3a:31:88:b4:de:a7:86:14:cb:83:07:46:27:76:ed:de:4a:
41:fa:2d:06:58:32:50:48:84:bb:41:e4:03:67:e2:a5:ca:3f:
e4:e7:8a:6d:ac:ec:a1:a1:6c:49:4a:43:10:df:86:4c:72:c2:
0e:23:11:83:a5:b6:d1:33:3c:8c:f4:b2:5a:63:37:64:4b:94:
1c:7c:0f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 20:42:50 2024 by rpki-client on console-ams.rpki-client.org