Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/033C9236F60911EC9F83B87FF1222468.roa
File: 033C9236F60911EC9F83B87FF1222468.roa (raw, json)
Hash identifier: 5/PpzQ1lNg/B3CbqoWfpVokksdLI2bdX0276Zv53Llo=
Subject key identifier: 5B:86:AC:99:22:12:CA:EC:90:06:72:4F:0D:45:68:1B:7C:03:5D:D8
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0782
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/033C9236F60911EC9F83B87FF1222468.roa
Signing time: Mon 27 Jun 2022 11:05:11 +0000
ROA not before: Mon 27 Jun 2022 11:05:07 +0000
ROA not after: Tue 27 Jun 2023 11:05:07 +0000
asID: 203999
IP address blocks: 161.123.84.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1922 (0x782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 27 11:05:07 2022 GMT
Not After : Jun 27 11:05:07 2023 GMT
Subject: CN=62b98ee7-1694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:02:27:45:d7:7d:d8:bf:f0:b8:5d:7b:c0:
ab:6e:2d:8a:da:f0:cf:c9:15:ae:a8:27:fa:bd:36:
65:3b:19:63:85:aa:77:e5:3d:9b:ae:9c:b7:98:a2:
18:26:59:25:02:92:2d:15:09:63:62:45:3d:c8:e3:
ee:56:31:94:40:7e:a2:a6:d6:c4:68:5a:61:b1:4f:
64:75:ed:3d:17:da:65:fb:c3:63:76:72:3c:4a:24:
85:a0:e7:6b:21:b3:08:d7:b0:3d:58:2f:b0:da:97:
12:cb:f4:fe:4a:5b:63:cb:30:b1:11:e6:a5:ab:19:
d5:42:09:f1:2f:9f:35:0c:65:e0:fa:e6:82:1e:ea:
af:43:2b:c0:b7:69:44:da:6f:7b:58:61:8e:c4:d5:
1a:0b:00:60:53:3f:d9:a6:ee:ab:f6:99:0a:87:75:
49:e2:37:67:1b:49:d4:e6:b5:bf:ee:1d:30:1a:37:
08:ba:15:5b:8c:36:25:8c:ff:bb:15:cc:84:d1:35:
91:5f:ce:9e:c3:de:6d:66:a5:a4:60:72:74:9b:a0:
82:a5:50:2a:30:a9:3d:22:ca:34:7e:87:73:b9:43:
17:11:61:2c:a5:c3:b2:da:9b:ef:23:38:c2:60:ae:
56:b4:75:d7:54:01:ce:26:05:8d:38:6b:fc:dd:13:
07:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:86:AC:99:22:12:CA:EC:90:06:72:4F:0D:45:68:1B:7C:03:5D:D8
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/033C9236F60911EC9F83B87FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.84.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:8d:10:42:12:42:a1:a0:b5:71:fd:3a:3c:e6:41:10:7b:89:
80:d7:83:60:e9:8c:db:bf:ce:85:c4:ab:56:37:cd:15:5b:13:
a0:b3:cf:5b:93:71:83:f8:3f:2f:b1:4b:0f:8a:04:a9:f6:fd:
b0:aa:25:0f:2d:c8:39:c9:b3:aa:45:a8:67:21:87:23:58:d9:
8e:81:64:b6:ed:fe:f8:d1:5f:2b:9e:8e:4a:81:ed:89:7f:f6:
cb:dc:4d:aa:e7:75:5b:da:a8:4a:55:1d:c0:43:d3:94:e0:f2:
1d:c1:db:c0:15:78:f7:1b:1b:c8:8b:5b:54:6b:d0:de:fb:2f:
f4:c7:55:c8:1b:34:f4:a5:25:0b:fb:70:36:6b:92:42:07:8d:
d8:71:01:6d:f6:bc:cf:04:ac:ec:7c:14:a5:40:37:ab:64:b8:
1d:f2:5c:81:12:54:75:29:fe:cb:86:e2:28:f9:d4:25:a8:2e:
b1:21:cd:df:0e:e0:1b:59:ac:5e:38:dd:57:37:4b:b3:50:4d:
17:78:88:ad:44:0c:ef:8f:07:f7:fe:2c:97:9d:5c:b1:69:df:
3a:83:07:9d:e1:88:ca:a0:6a:b1:81:52:ba:e8:01:d3:4c:8e:
79:e3:62:ea:ff:fb:88:fd:dd:ad:c8:bb:e0:a3:48:73:ea:d0:
e5:37:f0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org