Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4D708BE8E5E011ECA06B06A0F1222468.roa
File: 4D708BE8E5E011ECA06B06A0F1222468.roa (raw, json)
Hash identifier: lShE8Wcc8lwb7aLb0TlWAoO1jq7twzlUzgJCOMWh29k=
Subject key identifier: 0E:57:A7:5F:F9:D0:B6:0C:2B:BB:FD:85:55:97:01:10:C8:10:E8:20
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0732
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4D708BE8E5E011ECA06B06A0F1222468.roa
Signing time: Mon 06 Jun 2022 21:33:28 +0000
ROA not before: Mon 06 Jun 2022 21:33:24 +0000
ROA not after: Tue 06 Jun 2023 21:33:24 +0000
asID: 203999
IP address blocks: 161.123.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1842 (0x732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 6 21:33:24 2022 GMT
Not After : Jun 6 21:33:24 2023 GMT
Subject: CN=629e72a8-8f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d8:60:ce:8d:29:39:30:35:70:2e:bc:f5:f6:
60:1a:93:13:d2:89:87:98:8a:82:76:b6:e1:f4:6b:
6e:8d:0f:7b:53:63:d3:9b:f3:85:0f:c1:99:a7:fa:
a0:71:14:4f:96:e3:c0:5c:91:b9:76:51:59:91:5c:
04:40:a4:34:59:4b:59:53:aa:8f:37:a1:ab:a1:59:
b7:98:8a:85:50:77:e8:01:d9:c4:13:bb:86:89:38:
41:18:49:b1:a7:4b:2f:23:74:0c:bc:a3:2e:0a:30:
9c:5e:21:c1:8b:56:b4:04:15:28:9d:98:14:f0:54:
61:44:7d:3e:49:f9:b3:f0:f6:81:15:72:38:e6:04:
d6:7d:48:8b:39:e1:11:4e:a7:ec:63:28:9c:38:d7:
01:ca:94:72:0d:12:23:30:50:d2:6c:c9:f5:ed:8c:
c9:1b:98:12:80:ba:9b:fa:36:85:f9:3d:bb:77:76:
5a:f2:04:e6:ec:f9:2f:11:13:43:c1:0a:58:e7:ce:
b2:8a:70:9a:e3:c2:ee:a3:66:0e:fd:89:62:b0:d3:
33:c0:14:0e:0b:24:e3:38:0b:09:31:df:3e:0c:99:
a3:b8:9b:cf:ef:43:78:0b:34:e6:16:44:68:82:2b:
f4:57:c2:13:58:95:39:30:7d:6d:f2:64:2e:f7:3e:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:57:A7:5F:F9:D0:B6:0C:2B:BB:FD:85:55:97:01:10:C8:10:E8:20
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4D708BE8E5E011ECA06B06A0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.47.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:2e:b5:0b:22:49:11:78:42:68:15:47:2f:9d:ce:a8:ec:78:
00:7c:44:81:50:3b:8b:90:9b:35:91:0f:fe:d3:17:67:3b:ea:
4e:74:bf:c9:94:83:e5:de:f6:3f:ff:92:2a:20:41:7b:9f:a5:
21:a6:14:67:ff:3d:80:b3:f4:fd:2c:7e:c4:95:de:b8:01:cc:
33:f0:10:f8:0e:70:eb:17:1e:70:ef:20:81:84:fb:cf:11:50:
aa:5f:76:ae:ab:09:d9:d7:32:ad:91:5a:b6:09:d9:42:1d:54:
8d:da:50:37:00:00:cd:d0:6f:0a:4b:d8:93:86:ec:d6:da:77:
4c:10:7a:8d:27:4a:02:ed:42:7a:33:f9:29:2e:ff:11:16:e6:
fe:49:85:f5:e3:5e:46:14:bc:21:4d:bf:05:a0:8f:b5:63:8e:
86:ff:10:8e:df:91:c7:94:ae:4f:b3:3c:f7:d6:af:b5:c2:da:
2b:9f:f4:8a:8a:fb:a2:3d:5e:d5:fb:99:b0:3c:0d:8f:ac:2c:
b6:da:1d:5d:af:18:15:1a:41:60:35:2a:20:50:15:b4:e0:1a:
a3:d7:01:fb:ef:36:7a:43:25:e7:b1:3e:ed:89:09:01:2f:ff:
24:77:70:6a:0c:02:31:16:8c:ab:fa:85:52:41:28:ea:d8:99:
7b:4a:bb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org