Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8EB3B76018B11EF824A86FB007001B1.roa
File: F8EB3B76018B11EF824A86FB007001B1.roa (raw, json)
Hash identifier: jCbyxt0dcv0cpg11OadKw3dVd6p+IuYuoc8yJbTWCzI=
Subject key identifier: 3C:F0:0D:B4:D3:4C:1F:7E:4B:A5:08:12:B4:88:2B:68:46:1F:45:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 84B3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8EB3B76018B11EF824A86FB007001B1.roa
Signing time: Tue 23 Apr 2024 16:10:16 +0000
ROA not before: Tue 23 Apr 2024 16:10:13 +0000
ROA not after: Thu 02 May 2024 16:10:13 +0000
asID: 142062
IP address blocks: 45.204.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33971 (0x84b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 16:10:13 2024 GMT
Not After : May 2 16:10:13 2024 GMT
Subject: CN=6627dd68-459f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c7:39:94:a6:3e:58:2c:69:5c:23:da:9d:19:
c0:e2:1f:83:24:d2:c9:79:07:c5:20:73:45:66:ed:
23:ea:0e:eb:10:b2:ed:9d:27:c9:65:ca:27:2a:c2:
22:95:09:36:43:e2:20:26:e8:16:49:f5:3a:bc:86:
21:ed:a6:65:37:99:a0:e7:e1:ae:dd:f6:16:32:8a:
e3:88:66:be:1a:ea:39:55:b3:0e:4b:26:c5:f6:4f:
37:db:cd:4c:f4:27:14:29:4a:30:8e:0a:9e:f0:1e:
a6:11:d5:9b:84:d5:15:d9:61:2e:88:dc:d4:99:a2:
68:9b:9a:34:f9:c7:15:4d:84:d8:88:0d:61:99:23:
93:42:47:43:c4:85:fb:0c:51:46:11:18:31:67:45:
b0:aa:f1:9a:45:c6:c4:c1:c7:65:a4:8e:7b:8e:3e:
f0:8a:72:5f:61:b0:cd:bf:64:3d:0b:33:e0:2b:55:
71:ad:2c:6e:ad:91:25:64:de:50:4f:d1:c7:91:09:
74:33:f2:69:c0:13:b2:df:f8:68:01:73:f7:bd:73:
7e:07:b7:83:df:5a:ae:d8:28:71:b3:ce:75:28:e9:
d8:65:c5:38:be:88:4e:e5:e1:e1:d5:97:1f:e4:45:
ee:b6:2f:a2:70:64:7c:54:7e:c6:e0:1d:dd:b5:0f:
a5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F0:0D:B4:D3:4C:1F:7E:4B:A5:08:12:B4:88:2B:68:46:1F:45:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8EB3B76018B11EF824A86FB007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.89.0/24
Signature Algorithm: sha256WithRSAEncryption
05:bf:5a:1a:9c:a8:da:2a:71:6b:4f:5a:b8:64:1f:6e:47:b3:
fc:fa:03:f5:2c:61:09:be:08:13:d7:17:dd:e9:95:70:0c:fb:
34:87:95:76:4d:16:e9:92:c0:41:30:51:5c:ec:64:3f:08:ce:
1a:93:44:1c:0c:33:d5:6f:ec:ac:c7:2d:20:f8:1f:ee:b6:bf:
b5:98:84:e8:48:b2:ee:d6:15:d0:15:17:7e:d8:53:63:c8:61:
2c:6c:41:7f:ae:4c:7f:1f:32:ad:cc:93:f7:0f:fe:2e:48:4c:
90:ad:41:bb:13:89:36:45:48:b4:53:bb:7c:11:11:fa:7f:23:
29:a2:39:91:ff:37:97:1d:c2:17:d7:5f:c7:f1:53:72:ad:8e:
3e:87:6b:0c:0f:6b:bc:ce:4d:96:c1:93:d2:74:23:aa:41:03:
b2:63:12:a0:93:13:0e:fa:cd:56:83:5e:48:ff:7a:47:a1:27:
f1:83:87:ea:11:fc:50:52:70:b9:e5:4a:f1:5e:cc:ec:45:26:
5d:31:7a:ee:94:cb:d9:13:90:4d:b7:7f:c6:b0:f7:1a:c2:99:
61:d4:9a:0a:c5:c4:c3:ea:11:81:f9:b3:78:4a:4d:65:d7:67:
13:7c:c6:8e:8b:8c:1d:15:83:4f:33:23:23:64:48:df:e9:a0:
90:9e:99:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:45:05 2024 by rpki-client on console-ams.rpki-client.org