Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/35F48424E5E011EC987CAD9FF1222468.roa
File: 35F48424E5E011EC987CAD9FF1222468.roa (raw, json)
Hash identifier: +ShSkqf+0aNjK/sg3hJeUG62rlwggQ5GdvlQdzTKzTw=
Subject key identifier: 35:6A:12:45:A0:55:A3:7E:A7:7E:E7:E7:3A:C9:BC:B7:F3:E7:80:A2
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0730
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/35F48424E5E011EC987CAD9FF1222468.roa
Signing time: Mon 06 Jun 2022 21:32:48 +0000
ROA not before: Mon 06 Jun 2022 21:32:44 +0000
ROA not after: Tue 06 Jun 2023 21:32:44 +0000
asID: 203999
IP address blocks: 161.123.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1840 (0x730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 6 21:32:44 2022 GMT
Not After : Jun 6 21:32:44 2023 GMT
Subject: CN=629e7280-ade0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b3:06:51:fe:96:a6:8e:85:84:fc:63:4e:eb:
f8:31:78:73:93:50:1f:c1:cf:07:58:e4:2f:9d:ed:
db:a4:4f:80:a7:c3:f0:04:ff:49:d7:35:23:66:ae:
f5:72:4c:0b:1c:60:8b:b5:35:4c:2b:05:de:4a:44:
b9:fe:dd:7d:8a:f3:89:75:23:6c:0c:54:41:7a:ae:
0a:b6:d9:41:38:f3:de:9c:34:f1:af:58:b9:37:0b:
8a:c5:b3:27:49:e8:d4:2d:73:69:3c:4d:ac:a5:e5:
2d:f0:93:68:25:19:49:87:2e:b4:e4:8d:48:30:c9:
d7:be:93:50:7c:b1:cc:70:0a:c7:08:42:4a:b6:57:
bd:d1:5d:3e:45:b4:f8:a2:a5:6d:47:67:50:00:c2:
9d:01:a4:df:03:49:4d:fb:a2:45:a5:b7:78:b3:10:
23:7a:61:bc:85:07:3b:8c:41:f5:17:b6:8a:85:b9:
9f:fd:62:82:a9:0e:67:77:52:1b:71:41:8e:b6:28:
00:e3:5d:ec:14:70:23:ff:a4:a4:ed:be:37:b8:fa:
95:49:bd:bb:89:da:f8:b9:4c:8c:97:41:2d:eb:df:
e5:e1:0f:35:67:6f:e5:b6:78:0b:35:f6:1d:e6:2c:
4c:b7:70:b7:5e:45:f2:3e:68:d7:67:36:d7:66:15:
91:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6A:12:45:A0:55:A3:7E:A7:7E:E7:E7:3A:C9:BC:B7:F3:E7:80:A2
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/35F48424E5E011EC987CAD9FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.46.0/24
Signature Algorithm: sha256WithRSAEncryption
79:bb:f9:32:ec:89:f9:7f:3d:84:b9:35:14:e4:b8:e7:a7:76:
c3:82:1c:fb:37:dd:75:d3:26:c1:bd:3b:c1:52:94:96:50:1d:
53:c5:29:62:99:37:a0:d7:ee:78:3f:f0:f1:e8:2b:3e:70:46:
15:90:01:d7:df:b1:6c:78:a3:fc:54:d7:ab:d8:37:fa:dd:ae:
e6:cd:d5:ff:67:6b:7d:93:7c:84:2f:7a:0f:ab:81:48:cd:3a:
96:fc:b9:f7:86:a5:d2:94:77:23:b1:9d:41:b0:d8:9f:d8:2b:
d0:24:8b:bb:5c:13:b5:01:f7:f0:c2:87:4e:8f:6f:3e:61:55:
fc:04:5c:d8:31:fe:ae:95:4c:cb:67:75:a9:23:22:02:32:f1:
2e:81:3b:05:41:9b:f6:19:42:4a:1b:24:35:40:6c:08:9a:32:
3c:69:84:04:28:e8:78:23:62:af:fe:de:ff:c2:bc:a2:be:e8:
9e:e5:fe:f0:a3:d4:25:e3:75:9a:3b:eb:a4:0f:25:e2:f3:94:
b0:83:c6:cd:5f:cf:90:08:32:1f:c5:5c:f3:3a:af:81:d4:80:
3f:10:df:ff:1b:6a:82:2d:3e:79:ed:d4:04:ad:a4:75:0d:ae:
52:83:44:37:3b:a9:70:38:44:34:f9:da:6d:63:5b:4e:f0:ca:
58:0a:c2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org