Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0E5B3332E5DF11ECBD4AF49BF1222468.roa
File: 0E5B3332E5DF11ECBD4AF49BF1222468.roa (raw, json)
Hash identifier: aDthgEuf1efaYKGIA9f7CpthjiZWvXb4Qacx6E0yLv8=
Subject key identifier: 5E:C1:39:8D:15:70:C8:7E:5E:05:2E:51:AE:DD:B0:F7:E9:93:73:86
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0718
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0E5B3332E5DF11ECBD4AF49BF1222468.roa
Signing time: Mon 06 Jun 2022 21:24:32 +0000
ROA not before: Mon 06 Jun 2022 21:24:29 +0000
ROA not after: Tue 06 Jun 2023 21:24:29 +0000
asID: 203999
IP address blocks: 161.123.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1816 (0x718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 6 21:24:29 2022 GMT
Not After : Jun 6 21:24:29 2023 GMT
Subject: CN=629e7090-f727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:55:d9:d2:b9:ae:15:2c:fc:db:1a:0d:51:31:
26:ad:11:b2:47:a1:24:bb:56:0b:9b:4f:cb:4b:1e:
90:95:40:75:94:bf:58:1f:cd:33:97:b3:bb:11:fb:
3c:4d:8c:f3:cc:97:c3:74:11:8e:94:da:5b:6c:08:
07:43:96:43:89:ab:25:fa:26:51:a5:73:65:d1:8e:
54:fa:f3:f9:23:df:2e:50:96:cc:09:64:a4:30:08:
80:39:b0:27:87:73:a5:41:31:09:6e:df:a1:30:06:
28:f2:4c:fa:46:40:15:a0:a2:20:78:ae:24:d1:23:
e3:66:64:4f:fd:05:d1:68:48:91:1d:e5:a5:71:dd:
87:14:32:8d:ef:27:bc:c5:4b:41:18:5d:16:4e:6c:
be:d3:18:0c:a6:4a:c3:6e:c5:c1:7a:4a:d4:02:a4:
2e:3e:34:b7:6f:eb:b2:5e:93:7d:eb:3b:af:3d:6b:
b0:61:ca:4f:25:a9:a2:d5:af:63:af:75:da:bc:aa:
04:c1:c6:12:0f:4e:1b:66:e9:16:50:ad:06:e8:e1:
b5:07:2c:d7:75:d4:f9:55:4f:42:5a:da:8b:fd:b8:
b0:7f:e8:83:fb:8b:70:1d:ba:3e:54:a9:cb:b3:40:
d2:dc:99:00:4a:74:ad:98:69:ed:2f:15:4f:d9:8a:
67:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C1:39:8D:15:70:C8:7E:5E:05:2E:51:AE:DD:B0:F7:E9:93:73:86
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0E5B3332E5DF11ECBD4AF49BF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.22.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ff:fa:2c:4c:fe:83:8e:ec:90:94:d8:2f:55:ec:9d:25:e3:
6f:97:f2:eb:5c:61:69:30:e7:b7:1e:2c:ab:73:ac:1d:98:2b:
d6:3f:4a:bc:f3:1b:73:9a:c4:6b:98:c7:45:fb:40:01:d2:54:
9e:fd:a4:cd:a1:1f:56:72:79:71:9f:c3:54:09:60:28:de:b2:
14:88:e8:b8:30:ac:6f:cd:4d:b3:69:32:6d:46:e4:95:a6:a9:
48:0e:5d:82:ad:bb:58:b5:8b:5f:72:27:de:52:2b:6d:3c:ca:
b1:97:20:88:8e:0d:0d:38:d3:27:47:d9:10:7f:18:90:32:bf:
7f:56:bd:f5:ff:5b:ee:01:5a:bb:e4:b0:e4:93:2c:fe:3e:0e:
7a:6e:c0:c3:88:fb:ae:d1:19:aa:a4:d2:0c:2c:54:df:9f:42:
0c:16:f5:c8:e1:ae:ef:28:c5:d3:b0:42:e9:bd:20:70:b4:98:
ed:33:aa:cf:1b:43:8d:6c:dd:4b:bb:10:9a:3b:36:9d:b6:fb:
6a:b5:8b:57:fd:a8:25:9a:fe:ef:c5:63:b2:d3:a6:75:52:02:
5f:74:70:f0:be:9f:fc:56:ff:64:d3:cc:9c:12:82:a7:de:08:
aa:4e:d8:ea:8c:af:8a:c4:a9:ac:0c:4d:6c:ec:40:5f:f1:55:
e4:c1:6f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org