Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/25955CD23D8011EDB8C7C7AEF1222468.roa
File: 25955CD23D8011EDB8C7C7AEF1222468.roa (raw, json)
Hash identifier: VVDrnInzzOces8qqLChGisv0DpDuPEn3MfWOzgvaL0M=
Subject key identifier: DF:81:10:1B:B3:C6:F8:35:B3:B7:1B:66:9C:67:D2:4C:E0:21:AE:DA
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 085D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/25955CD23D8011EDB8C7C7AEF1222468.roa
Signing time: Mon 26 Sep 2022 09:46:51 +0000
ROA not before: Mon 26 Sep 2022 09:46:48 +0000
ROA not after: Tue 26 Sep 2023 09:46:48 +0000
asID: 203999
IP address blocks: 161.123.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2141 (0x85d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 26 09:46:48 2022 GMT
Not After : Sep 26 09:46:48 2023 GMT
Subject: CN=6331750b-18eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:58:d6:22:ed:27:36:d6:9b:1c:64:59:53:df:
79:71:d5:28:89:bb:ee:7f:00:29:79:57:0f:04:71:
5b:86:bd:97:70:83:17:e8:db:23:93:e3:70:d9:a0:
fb:2a:8b:fe:6e:b1:89:85:89:10:c2:cd:63:af:ab:
2e:6c:d6:2a:59:d0:97:df:cf:e1:43:79:80:f8:f9:
d3:f9:9b:13:de:b7:76:5c:84:cd:71:7a:3b:59:d0:
a1:5e:63:79:e7:b4:58:52:21:5d:11:c0:f0:56:44:
6d:ed:03:44:fa:01:0b:d4:d9:bc:51:62:81:2a:16:
6f:83:ee:e5:51:7b:40:25:3e:ff:83:5c:aa:25:6c:
99:1c:c3:6e:0c:af:df:72:ce:fb:de:df:8b:cd:20:
a7:4d:32:e1:ed:5d:e1:16:3e:6b:d4:0c:61:dd:f3:
52:69:90:b5:23:fd:fc:64:cd:34:90:73:eb:a8:c6:
fd:c7:ce:64:38:b5:cb:38:c2:84:4f:a6:4e:fe:99:
f5:e6:c5:52:1c:48:df:dd:20:e3:9b:0a:d0:61:17:
2f:77:c1:a6:e3:f1:33:8b:fb:07:35:18:fa:a2:91:
16:0f:31:6f:89:a0:e1:09:d1:f7:ff:9c:95:04:28:
b5:9c:f8:74:f1:72:9e:cf:dd:c6:42:58:a5:f8:bb:
a3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:81:10:1B:B3:C6:F8:35:B3:B7:1B:66:9C:67:D2:4C:E0:21:AE:DA
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/25955CD23D8011EDB8C7C7AEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.101.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:9b:5e:59:71:31:f0:a7:00:f2:f9:3b:c2:9f:8f:af:39:f3:
cf:57:d4:a8:69:f7:5b:5c:e6:b2:10:47:56:83:6d:3d:ee:1f:
10:57:19:bf:85:25:29:96:d6:0d:d0:b1:f3:52:7a:9a:60:04:
73:d0:8f:ee:51:ff:72:83:87:8b:b4:5c:62:7a:7d:78:32:30:
16:95:bf:24:39:94:db:70:78:68:37:36:91:34:19:d1:73:f6:
0f:2e:0d:77:58:08:7b:58:9a:1f:b8:02:ca:fc:f4:3e:4c:5b:
ac:c3:d5:42:af:7e:4c:3e:29:f1:ba:5d:f2:45:82:37:93:e6:
21:7c:d3:ef:14:e1:63:c7:f3:ea:94:7b:7f:ef:f8:ad:c0:58:
12:8e:25:45:83:5d:b3:bb:61:0c:59:7a:38:04:99:af:03:5a:
10:02:90:f7:b8:0f:8c:2b:b0:2e:c4:79:ff:86:46:b3:12:0c:
65:8d:a8:39:b9:35:25:8e:6d:a6:13:3e:2d:0c:2c:ab:f3:7b:
25:70:a9:b7:a6:d8:eb:ac:7d:ba:a4:1b:9c:22:06:d4:32:0f:
15:d0:06:e1:0f:42:ec:ff:ce:19:d0:6f:07:9a:ba:6b:21:88:
72:f4:90:e3:4c:8a:a8:3f:4f:e8:0c:b3:23:d5:01:92:1e:54:
ae:40:62:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 10:57:15 2023 by rpki-client on console-fra.rpki-client.org