Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5110E563A9611EF83E6E9B9762E951A.roa
File: F5110E563A9611EF83E6E9B9762E951A.roa (raw, json)
Hash identifier: Jz7kkzcK2CDkfHkHqZZ817oSBDDKj1IjwwLHeHTRNUg=
Subject key identifier: BB:70:41:58:0A:9B:39:FE:49:BF:45:6C:1B:B6:D4:33:DD:9E:E7:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 98AB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5110E563A9611EF83E6E9B9762E951A.roa
Signing time: Fri 05 Jul 2024 06:22:31 +0000
ROA not before: Fri 05 Jul 2024 06:22:27 +0000
ROA not after: Thu 01 Aug 2024 06:22:27 +0000
asID: 5065
IP address blocks: 45.204.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39083 (0x98ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 06:22:27 2024 GMT
Not After : Aug 1 06:22:27 2024 GMT
Subject: CN=66879126-3447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:81:1e:98:5f:55:30:a5:b2:11:90:ab:f1:b2:
77:fb:62:32:1a:19:ca:39:7a:5d:f3:42:be:09:16:
82:ce:86:fa:80:08:f4:64:31:62:85:3f:51:64:d2:
8c:b8:c4:e2:19:c5:d0:9b:15:7c:6a:e4:64:73:5e:
58:65:36:e0:d7:29:43:97:07:89:8e:19:15:56:1e:
33:02:d7:67:16:c1:2c:16:7c:fe:c1:41:47:5a:31:
f5:60:ea:24:36:2c:8c:5e:36:4c:be:66:56:6d:bd:
ce:dc:a4:c5:71:2d:01:3d:9e:82:32:cd:e8:6b:5d:
4e:9d:6c:31:76:51:64:5d:2b:10:f1:c2:53:07:22:
fc:a3:33:8d:e5:79:10:8a:5a:38:6b:51:13:52:44:
90:bb:ec:38:f7:3d:b6:77:d0:8a:be:d4:2d:8a:3f:
ff:f2:bb:3b:86:ca:34:bd:b1:39:9b:83:26:29:28:
d6:cb:02:dc:8f:39:83:86:f5:fc:14:8e:30:ef:0c:
8c:a3:a2:dd:d9:ee:67:8f:bb:aa:c1:ab:20:be:bc:
4b:a0:77:11:8b:59:18:fc:84:08:5e:8b:94:1a:ce:
f2:1e:04:d8:f2:89:60:ac:98:fd:1f:22:53:f1:97:
98:4c:4b:23:1a:6a:2c:95:36:32:06:65:ea:a0:c9:
04:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:70:41:58:0A:9B:39:FE:49:BF:45:6C:1B:B6:D4:33:DD:9E:E7:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5110E563A9611EF83E6E9B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.76.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:75:a6:f4:b3:aa:8d:a8:90:d5:66:e3:43:8d:45:9e:5b:3b:
5e:dc:8a:1f:ea:aa:26:bc:8c:02:50:29:c1:2b:9d:94:14:d8:
df:1e:97:98:4c:82:ac:e0:8b:ba:9a:8c:dd:60:ab:6b:6b:61:
bd:8f:5d:6e:3d:bd:2f:40:55:3c:44:b9:55:02:b2:be:dd:09:
1d:43:8a:fe:32:32:ba:0b:e2:9a:10:02:5b:fd:e0:39:76:e4:
ae:78:01:12:82:fd:58:c8:33:bb:60:6b:bb:7f:f4:84:c1:f1:
9a:3c:81:05:24:92:18:7a:3b:05:d5:78:8d:40:94:05:4b:15:
7d:74:1a:1f:40:53:a6:2a:3b:26:59:f9:dd:7b:24:86:4a:c7:
b3:67:00:82:b0:73:85:9e:05:d1:92:53:92:46:b8:39:8e:54:
4f:74:d3:9a:83:3b:c8:fb:7b:dc:ae:3f:a5:b9:66:c0:87:32:
cc:2a:f3:fb:2c:ba:43:fb:b4:dd:10:5c:3c:3d:42:9e:05:14:
49:df:05:c1:96:33:2d:8b:15:00:a0:e7:de:e0:d8:2e:76:c3:
fb:78:69:dc:48:c4:96:af:f4:99:af:a1:cc:3c:b2:9d:3c:08:
d6:ec:b8:15:8f:98:81:cb:12:d4:49:84:85:a3:d2:9b:25:50:
43:1c:77:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 10:33:29 2024 by rpki-client on console-ams.rpki-client.org