Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0CF9036AF6CA11ECB657E7E4F1222468.roa
File: 0CF9036AF6CA11ECB657E7E4F1222468.roa (raw, json)
Hash identifier: 1eyuxBEh9J5OYPiUG8tNcMxn+ts8x5zLEmXW89/Zv8M=
Subject key identifier: A9:84:8B:8D:A1:E4:C0:36:FB:FF:3B:E7:90:05:7D:BE:A0:51:5B:BF
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 078B
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0CF9036AF6CA11ECB657E7E4F1222468.roa
Signing time: Tue 28 Jun 2022 10:07:00 +0000
ROA not before: Tue 28 Jun 2022 10:06:57 +0000
ROA not after: Wed 28 Jun 2023 10:06:57 +0000
asID: 23470
IP address blocks: 161.123.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1931 (0x78b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 28 10:06:57 2022 GMT
Not After : Jun 28 10:06:57 2023 GMT
Subject: CN=62bad2c4-5059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7a:30:0e:d2:82:ee:58:04:20:81:b5:be:ad:
f8:10:2e:b0:86:98:a9:5b:b0:02:7d:f2:66:38:43:
b1:7b:e3:08:54:4d:be:52:27:c7:e6:9d:f7:f1:a4:
ae:93:19:3a:25:9f:6c:4c:53:29:d4:4b:aa:4a:e8:
8d:f5:0d:fe:c5:f8:61:25:5b:fc:db:fa:1b:d8:32:
a8:ec:ff:b6:ee:29:48:77:83:e1:16:6e:60:11:26:
eb:0d:db:38:37:a5:34:84:d7:dc:85:85:67:ac:9b:
d0:17:da:03:02:d8:1f:0a:e4:89:f2:2b:27:06:aa:
71:62:87:09:aa:d3:95:6f:ea:a3:e2:0f:cf:65:ec:
82:59:ed:6a:c1:ac:e4:a3:50:12:1c:a8:77:76:3f:
e2:34:11:b3:bc:ba:72:1d:d9:ee:91:4e:05:27:e0:
cc:68:d2:8d:9d:9a:80:90:2d:77:81:a8:b2:b2:bd:
e2:97:4c:c2:f2:24:5c:06:f6:1a:00:5e:4f:f3:e7:
a3:28:51:71:25:5a:9e:b5:ee:10:e7:88:c8:20:a7:
f0:0c:f6:6e:a8:93:29:99:54:01:ec:cb:79:29:1d:
5d:a0:ae:81:28:ea:86:7c:d3:7b:69:fb:b9:b8:f8:
bd:55:cb:62:53:5b:28:23:4d:09:9b:af:04:16:6d:
90:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:84:8B:8D:A1:E4:C0:36:FB:FF:3B:E7:90:05:7D:BE:A0:51:5B:BF
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0CF9036AF6CA11ECB657E7E4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.220.0/24
Signature Algorithm: sha256WithRSAEncryption
62:58:bd:46:10:9e:b0:34:4b:70:4d:c9:35:f9:34:79:29:cd:
e8:4a:b6:60:24:f1:e3:5e:69:da:94:52:f9:c5:9e:24:1e:ee:
03:82:84:48:b1:bb:d8:b1:61:f6:25:b3:9e:10:90:05:75:72:
46:be:a0:0b:f7:7b:fb:5a:c0:8a:c1:71:c4:92:a3:0c:6e:79:
47:e7:21:33:f2:6b:10:c6:f1:ef:19:67:98:1e:9a:5e:42:96:
31:f9:bf:c5:01:73:04:a9:1c:bc:3c:db:c8:94:6d:27:eb:95:
2c:3d:96:91:01:eb:51:d0:b6:c7:fd:99:f6:85:c9:26:3c:bc:
24:91:70:01:02:ed:df:ee:a5:d6:3b:94:e0:dd:51:0a:bc:dc:
f3:c7:fa:fb:75:fa:c5:bf:e6:68:b0:3e:eb:8b:4b:29:20:47:
90:7f:5e:76:88:19:ed:99:d4:bd:c4:e6:c7:95:19:c3:cd:b3:
cd:20:e1:0f:34:10:dd:80:80:80:1c:8d:5b:1f:72:af:1f:08:
03:1d:e4:67:50:20:16:b7:9c:3a:8d:97:a4:4b:21:77:d7:9b:
c8:86:53:6d:d6:42:33:7a:51:d6:3b:7f:76:16:97:e2:a0:7e:
e4:8d:e2:36:81:c7:7b:ea:7f:de:83:89:ad:e5:62:af:39:51:
cb:4e:e2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org