Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3B6975BC919911EDA92DF8D8F1222468.roa
File: 3B6975BC919911EDA92DF8D8F1222468.roa (raw, json)
Hash identifier: Z2mnDy9aItwClyjjZDQ3+DCUh8QnQMBtUgderRg9ZW4=
Subject key identifier: 01:BE:38:5B:58:D1:7F:44:6B:79:6A:A3:C0:45:BC:D2:74:F3:DC:8B
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 095C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3B6975BC919911EDA92DF8D8F1222468.roa
Signing time: Wed 11 Jan 2023 10:18:03 +0000
ROA not before: Wed 11 Jan 2023 10:17:59 +0000
ROA not after: Thu 11 Jan 2024 10:17:59 +0000
asID: 133499
IP address blocks: 161.123.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2396 (0x95c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 11 10:17:59 2023 GMT
Not After : Jan 11 10:17:59 2024 GMT
Subject: CN=63be8cdb-6182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:52:02:96:09:25:c4:ec:27:ee:f3:1b:3f:b8:
e3:70:b2:a6:ab:c2:e9:5b:73:49:58:4d:ba:cc:94:
6d:4d:fa:b6:ce:60:1a:70:ee:77:4e:ad:96:9d:e5:
cb:df:8c:72:79:32:58:89:20:e3:be:14:0c:b4:dd:
60:0f:28:70:86:5d:d9:7e:96:d4:73:b7:ff:07:f0:
22:72:58:1f:2f:e1:06:ad:c1:8a:1b:ac:e0:fe:10:
42:9e:e0:2a:c9:3c:b1:4b:ee:68:7d:5a:ba:1a:30:
1c:a0:b5:ef:03:1f:6d:2f:42:5d:ee:64:d5:ed:f9:
7c:a8:3a:99:df:be:ae:15:1f:23:af:3a:94:ce:51:
5b:53:a5:99:c6:67:66:2e:5f:68:77:dd:4e:65:88:
72:57:7a:63:9c:bd:12:79:95:c6:be:be:bb:88:d7:
d3:35:4a:40:ce:04:b7:b0:a0:8f:99:dd:8e:74:49:
cf:49:f8:a2:b4:b0:4d:95:1c:0a:f4:82:f4:76:2f:
1d:9c:6e:28:1c:94:fb:11:52:54:7b:65:04:72:7c:
81:de:e7:96:df:ea:71:22:ad:dc:b0:fc:83:99:55:
de:7e:68:05:9c:d4:8c:42:e3:a7:b9:73:fe:ed:00:
0c:f4:f6:0b:09:86:de:1c:05:55:c2:09:f4:76:c0:
04:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BE:38:5B:58:D1:7F:44:6B:79:6A:A3:C0:45:BC:D2:74:F3:DC:8B
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3B6975BC919911EDA92DF8D8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.64.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:3c:5f:2d:4a:88:25:51:a2:46:8d:f2:6a:90:36:cb:e6:8d:
1c:b9:6e:9f:42:27:85:9d:df:f7:77:82:06:de:84:1e:66:ca:
c1:c8:45:c8:e1:22:35:86:6d:73:9b:d9:16:0b:45:09:cd:6e:
25:03:16:8b:8b:80:9f:27:ff:23:65:87:8c:fb:65:a8:65:6b:
bf:0b:00:9d:67:32:59:1c:5a:3e:d6:d1:3d:9d:7f:de:1a:1d:
77:7c:fd:2a:95:06:01:bc:60:2b:f5:ea:f3:8e:59:85:ed:be:
28:be:81:44:cb:e6:43:75:53:79:46:d4:4b:a6:d0:b1:a8:55:
6d:2e:e8:73:a0:54:82:c9:17:4f:06:99:25:39:2e:b5:89:52:
74:3d:cf:ec:07:fe:80:7e:92:b5:5b:a0:df:40:46:49:6a:b9:
de:db:29:8c:63:bf:b6:20:2f:a1:dd:9c:2c:fe:94:8d:3d:c1:
be:40:dd:39:b5:9a:18:a0:52:c4:65:a6:95:8c:55:2c:2c:c6:
90:b5:96:c7:7b:d7:c5:f4:c3:7d:41:73:01:25:39:95:ac:de:
2a:50:d2:10:3a:19:38:5d:24:1c:24:23:16:dc:73:2f:33:e5:
44:62:ef:fa:e4:75:c3:11:a9:69:b2:6f:66:ad:ad:61:a9:d3:
32:dc:f0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 02:02:47 2024 by rpki-client on console-fra.rpki-client.org