Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3B7B507C3D8211EDAD0280B4F1222468.roa
File: 3B7B507C3D8211EDAD0280B4F1222468.roa (raw, json)
Hash identifier: 4vwYGjSN6VKqIh2X8dUfq4QQYBwukBh0vhA9uCBgsc0=
Subject key identifier: 00:10:4A:67:8F:D3:E8:AD:25:9A:B1:00:7E:24:6D:60:52:F5:64:92
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0885
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3B7B507C3D8211EDAD0280B4F1222468.roa
Signing time: Mon 26 Sep 2022 10:01:47 +0000
ROA not before: Mon 26 Sep 2022 10:01:44 +0000
ROA not after: Tue 26 Sep 2023 10:01:44 +0000
asID: 203999
IP address blocks: 161.123.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2181 (0x885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 26 10:01:44 2022 GMT
Not After : Sep 26 10:01:44 2023 GMT
Subject: CN=6331788b-8b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:df:70:f4:9c:20:36:77:4e:c0:0c:b2:4f:ed:
af:df:61:d9:ed:eb:c9:18:0e:9c:af:9d:15:dd:93:
db:5d:53:da:7e:8b:f6:42:d6:47:91:37:c6:1c:05:
d4:95:0b:a1:32:1b:ca:a2:e9:6b:36:e4:f4:cd:ca:
57:d5:3d:1d:80:d9:19:34:73:34:ab:72:46:76:14:
fb:af:30:50:75:62:8c:52:a7:68:72:e8:aa:e9:48:
ee:f2:c1:b9:52:0c:c5:98:ae:c2:e0:be:51:99:16:
3b:15:c9:a3:f7:18:ce:89:f0:cd:fc:c2:d0:d2:13:
09:1a:39:48:05:df:e8:40:b2:1c:71:64:86:78:0b:
fe:79:51:68:92:36:00:2c:ab:b5:ff:bd:c7:3b:a0:
75:59:4d:e3:fc:c7:b6:bc:c9:72:af:3e:3f:44:b2:
b3:5a:89:f4:5c:dc:5e:77:be:ef:23:76:30:82:11:
c6:0c:b6:d5:85:bf:70:ef:ec:83:e1:1b:56:05:49:
23:02:e0:40:0d:d4:dc:8f:0e:b5:37:bc:2e:4d:1d:
61:0a:e7:51:af:3d:86:26:67:da:ec:27:ab:0e:2b:
3e:57:47:15:78:71:cb:b7:1f:12:7e:5a:e3:76:48:
ed:85:5e:60:a1:d1:0b:e1:ce:41:8b:67:e8:66:2f:
b7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:10:4A:67:8F:D3:E8:AD:25:9A:B1:00:7E:24:6D:60:52:F5:64:92
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3B7B507C3D8211EDAD0280B4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.194.0/24
Signature Algorithm: sha256WithRSAEncryption
96:81:a6:62:16:13:b9:4b:8c:93:a7:9b:c4:63:dd:bc:ae:c4:
ab:14:b1:c1:28:06:44:e6:42:b7:3d:84:cd:bf:4a:e4:59:95:
0d:14:07:86:19:f1:a6:0a:db:93:e9:86:5e:ec:3c:82:4f:23:
f2:e8:74:6b:10:9d:3f:02:ad:5e:d0:e0:a9:3b:c3:3c:c4:0d:
1e:ac:c5:2e:1a:0b:d3:9d:92:96:61:b4:15:b3:7c:81:49:bd:
2b:8e:37:e6:8a:98:ac:30:8e:9c:bf:0a:d4:0b:5c:67:9e:3e:
41:26:75:54:39:4c:97:81:c7:4e:00:7d:d9:34:29:8d:a8:04:
88:c3:11:3f:15:e7:cc:6b:6d:b7:60:0e:d0:9d:83:72:59:e4:
ff:fb:e0:84:b9:c1:6d:5c:43:2d:4f:7f:a4:27:99:5a:ef:cd:
7d:b6:f3:2f:eb:f4:01:f3:f7:52:de:52:b2:0f:d9:39:e5:19:
af:00:c4:99:50:e3:67:db:96:3c:c4:2d:9d:b6:57:b7:7c:8e:
60:21:26:5b:6b:fd:b5:74:34:be:9a:8c:17:7d:82:b2:33:f5:
ae:ad:04:dd:c6:ac:38:70:8b:69:23:25:45:fa:e2:3b:ea:47:
a0:35:e3:d2:87:30:cc:24:4d:5a:81:4f:d4:45:e6:3b:55:fc:
27:db:ef:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 10:57:15 2023 by rpki-client on console-fra.rpki-client.org