Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1A73D11E9EE111ECBD34D27C5A40D577.roa
File: 1A73D11E9EE111ECBD34D27C5A40D577.roa (raw, json)
Hash identifier: +VTEfbadWlueSfa6hqOYu0pz9NFUH62Ie9Zc/ppdq40=
Subject key identifier: D5:F5:95:44:5F:82:99:2F:B2:02:7D:3B:A8:6B:4F:52:1F:DA:F3:8A
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 05FE
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1A73D11E9EE111ECBD34D27C5A40D577.roa
Signing time: Tue 08 Mar 2022 13:10:19 +0000
ROA not before: Tue 08 Mar 2022 13:10:15 +0000
ROA not after: Wed 08 Mar 2023 13:10:15 +0000
asID: 400377
IP address blocks: 161.123.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1534 (0x5fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 8 13:10:15 2022 GMT
Not After : Mar 8 13:10:15 2023 GMT
Subject: CN=622755bb-a711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:3b:09:9e:57:06:be:9b:ef:90:2a:61:13:
de:f7:90:86:f6:de:f5:34:9b:02:d4:0d:fe:08:c0:
0b:0b:81:bd:15:e5:83:c3:d5:fd:41:c0:0d:1d:2a:
a4:f2:16:c3:54:b3:7a:74:c4:86:76:c6:ef:15:9e:
f1:47:b2:76:e0:77:44:00:16:21:93:9d:8d:9e:21:
f0:9d:29:b3:e9:9c:64:51:66:6a:8c:1a:7a:e0:b5:
83:45:bc:67:f0:f3:fb:cc:ed:98:e8:05:16:e0:62:
74:b7:33:a6:6a:41:f8:52:da:b8:96:3b:41:ba:a8:
0c:51:1e:af:e4:04:d0:ed:86:9b:19:5d:e8:45:a0:
50:3b:09:36:58:49:ba:36:a5:a7:66:d9:a0:9b:b6:
3f:1d:ee:da:58:3e:c3:3b:98:4f:39:51:e1:45:61:
18:58:44:cd:3e:2a:b6:11:43:3d:11:68:ce:e7:7e:
31:88:76:73:51:ae:24:65:b6:fb:bd:24:51:de:12:
0a:28:cb:ea:53:43:23:35:18:6e:82:15:f3:86:06:
6f:f1:f4:a6:4d:b1:d0:cc:93:75:fc:b0:2b:47:dd:
05:4b:7b:1d:08:56:df:e6:b5:a5:dc:07:5d:9b:33:
c3:b3:f7:3e:ae:b1:a0:06:41:80:bc:fa:e9:13:4c:
3d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F5:95:44:5F:82:99:2F:B2:02:7D:3B:A8:6B:4F:52:1F:DA:F3:8A
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1A73D11E9EE111ECBD34D27C5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.98.0/24
Signature Algorithm: sha256WithRSAEncryption
38:41:99:84:ef:5d:96:d1:6b:64:46:79:34:1f:da:9f:ad:53:
67:f9:78:8e:53:fb:3b:02:27:e9:25:50:ec:8f:99:31:d0:cc:
23:26:af:15:c5:b0:19:f1:66:49:5a:13:18:41:ba:fe:13:34:
9f:b5:48:25:95:8c:52:51:be:b0:5d:06:73:9d:fc:40:1f:71:
0f:a9:1a:22:09:56:ac:49:db:6c:7d:3e:a9:0c:c4:3f:d2:36:
e6:14:18:b3:e4:7c:4d:2a:a9:1f:d3:5f:02:7a:be:e5:88:ad:
ee:c6:71:7d:d7:2f:75:e6:57:bb:56:d0:37:e7:76:d3:17:c8:
6e:2b:7b:51:27:cd:7e:d9:e6:e0:15:61:ce:4c:35:ce:f9:dd:
ac:6d:4c:cb:c4:1f:3d:33:e6:26:3b:5f:05:0a:29:3b:25:45:
a3:5d:da:cc:d4:a7:8f:57:bf:70:44:22:a6:cf:85:08:4e:e8:
f1:a5:97:8d:19:8e:0e:93:47:5a:1d:85:6d:4c:8e:49:ad:7a:
a6:31:78:4f:f4:9c:a9:c8:7a:9a:aa:76:43:38:96:60:7e:0d:
17:c6:a9:fc:c1:7f:4d:9f:29:3a:94:19:3c:1a:89:30:fe:24:
c4:e7:db:d9:15:11:57:9a:67:00:e9:42:d8:b1:de:5d:50:d2:
51:25:ad:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org