Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1792FA16C31011EDBFDB807EF1222468.roa
File: 1792FA16C31011EDBFDB807EF1222468.roa (raw, json)
Hash identifier: W96QRuwoVsgZLQnUd9ahKyB/OMBcwJUV1275mTPjK8o=
Subject key identifier: 03:34:D7:51:E9:87:C6:A7:34:A4:E7:08:CA:E3:BD:25:15:78:70:FD
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A0F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1792FA16C31011EDBFDB807EF1222468.roa
Signing time: Wed 15 Mar 2023 09:02:20 +0000
ROA not before: Wed 15 Mar 2023 09:02:17 +0000
ROA not after: Fri 15 Mar 2024 09:02:17 +0000
asID: 207990
IP address blocks: 161.123.40.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2575 (0xa0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 15 09:02:17 2023 GMT
Not After : Mar 15 09:02:17 2024 GMT
Subject: CN=6411899c-14de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:16:6a:24:5c:f7:64:4a:7b:a0:c1:b9:d4:
39:63:76:c0:e2:9f:d3:3b:50:2e:49:24:40:63:03:
25:a0:e1:5a:24:42:63:65:3b:20:3c:7c:1d:d8:a3:
ea:b5:c2:87:72:a4:b7:e5:49:a7:7b:d8:02:69:19:
b3:2b:6d:3b:71:55:99:b6:b0:23:dc:d0:bd:3e:aa:
f7:5b:35:5a:0c:dd:9e:25:da:81:9a:bd:d4:37:02:
b8:55:8b:26:ce:27:ca:22:af:69:5f:6e:f7:9d:c6:
d0:75:8f:4a:37:f4:87:0a:c8:be:61:ac:a8:a6:57:
59:ba:74:94:11:99:9d:94:b9:d5:11:d7:21:fe:df:
98:15:9f:56:c3:8a:8d:0b:ab:6f:99:4a:5a:bf:c5:
d0:99:4e:23:0a:47:1c:83:53:b1:aa:f8:9d:09:11:
95:a3:79:02:61:1a:41:c0:b1:16:99:ec:37:e5:c0:
7f:4f:42:06:8f:18:4a:27:2e:3c:11:1e:fd:b7:21:
07:e1:3a:13:93:9c:e8:d6:f0:2e:be:78:6f:72:72:
f8:b8:fb:50:a9:71:f6:a5:2b:db:11:a6:82:04:8c:
46:bf:f3:18:1d:69:fe:17:dc:b2:8c:a8:71:68:66:
bd:fe:3c:b5:3b:1b:d6:91:28:b7:4f:d0:2c:57:23:
92:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:34:D7:51:E9:87:C6:A7:34:A4:E7:08:CA:E3:BD:25:15:78:70:FD
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1792FA16C31011EDBFDB807EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.40.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:19:d1:10:1a:df:46:0c:17:a0:4a:d3:df:0a:26:41:22:70:
0b:6d:34:70:00:5b:0e:d9:d8:25:4d:be:d7:1a:0e:b8:08:8a:
04:9c:88:2a:77:ca:cd:28:87:f1:90:94:1b:fd:f8:0a:9d:64:
55:5a:cc:f7:3b:a3:c6:d6:24:d6:16:66:58:9f:c3:69:6f:13:
57:a8:40:f9:2d:f6:c5:e6:b1:df:8d:e0:ed:b8:5e:3d:85:f5:
55:99:55:6c:24:de:e1:76:1d:43:b6:aa:dc:af:3c:d8:b0:37:
27:6e:57:ac:39:30:e1:34:7e:0b:7d:7c:cf:42:8c:4f:14:35:
e2:d0:d3:a6:78:5b:72:a5:db:dc:e4:da:b3:52:b8:a1:6c:8d:
a7:8b:c0:b9:7e:42:99:73:f0:a6:06:42:2c:9f:a9:f6:4f:e7:
f7:c6:1a:51:9a:5c:91:ab:dd:6e:02:57:26:53:55:24:43:bb:
3e:9c:ee:6f:15:3e:87:d2:5d:b7:6d:69:94:61:f0:91:b5:da:
4f:9a:3a:44:30:89:8e:31:fa:38:23:50:a9:87:61:2c:81:a4:
c2:54:ff:94:ce:16:60:7a:e7:42:0d:0c:4d:fd:1f:63:4d:13:
83:36:ef:21:7b:17:6e:b8:23:c5:e4:66:f1:3c:f4:3f:72:45:
4b:b9:d9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 16 02:53:56 2024 by rpki-client on console-ams.rpki-client.org