Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4DDA964A82C211ECB6CB9BDD5A40D577.roa
File: 4DDA964A82C211ECB6CB9BDD5A40D577.roa (raw, json)
Hash identifier: wm3BarUY46XfrVphz9/ZeiPu275+WhmsKHuD1cnYXzY=
Subject key identifier: 9F:6B:91:E0:F0:A6:8D:38:0A:BF:62:2C:05:1F:2B:B1:A1:27:8B:A4
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0567
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4DDA964A82C211ECB6CB9BDD5A40D577.roa
Signing time: Mon 31 Jan 2022 18:19:18 +0000
ROA not before: Mon 31 Jan 2022 18:19:15 +0000
ROA not after: Tue 31 Jan 2023 18:19:15 +0000
asID: 327790
IP address blocks: 161.123.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1383 (0x567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 31 18:19:15 2022 GMT
Not After : Jan 31 18:19:15 2023 GMT
Subject: CN=61f82826-87c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:eb:f0:a2:e8:11:70:34:dc:e5:8d:75:2d:9a:
cc:25:dc:6f:46:74:8f:74:d7:21:e5:39:aa:06:d5:
ed:98:96:99:bb:8d:a8:39:d7:2f:7c:44:35:6a:40:
8b:7c:ca:c2:37:cc:45:ff:d5:12:63:21:0b:81:55:
f4:e4:9d:ce:ec:4a:d0:29:2f:4f:90:1b:72:50:45:
f4:83:4e:15:83:2d:64:b3:4c:38:87:56:13:60:87:
33:c9:bc:7e:83:ba:41:48:5d:f6:27:3d:48:b3:76:
9a:14:2d:82:44:7f:28:cf:39:e3:55:5b:5a:ce:57:
12:9d:79:fc:7d:63:26:3e:8a:c8:b9:39:ba:f9:8f:
23:16:79:65:25:09:e0:46:3c:5a:9b:15:e3:98:47:
5e:b8:30:b0:05:0f:e4:1f:7b:1d:79:22:40:0c:2b:
59:15:55:d7:8c:d8:75:0c:05:1c:10:28:76:96:c9:
33:8a:41:d2:0e:76:94:d1:35:83:0e:90:a8:5b:46:
02:aa:38:2a:65:7f:66:91:4c:a1:18:b1:ae:b0:ad:
a1:61:e6:29:c0:67:1d:53:2e:dd:22:87:ca:87:dd:
fc:7c:db:06:6c:52:48:7e:cb:3b:a8:31:02:62:75:
01:9b:ad:38:f1:7b:3e:5d:33:76:8a:f1:0f:93:ae:
54:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6B:91:E0:F0:A6:8D:38:0A:BF:62:2C:05:1F:2B:B1:A1:27:8B:A4
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4DDA964A82C211ECB6CB9BDD5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.184.0/24
Signature Algorithm: sha256WithRSAEncryption
87:da:b7:23:cb:65:9f:57:09:d1:fd:99:3e:29:29:f8:48:ac:
07:1b:0e:c8:13:a0:ce:fc:66:37:ea:16:bb:95:c2:4c:02:d3:
db:2c:ae:67:27:a3:dd:6a:47:73:74:4a:fe:a2:b6:e0:b2:15:
f7:c3:79:30:a7:27:fb:91:38:75:b4:90:93:05:af:ed:81:d2:
71:aa:11:df:85:72:97:09:6c:66:ce:1e:97:4f:6c:8f:cd:9a:
18:7f:47:50:11:9b:2d:0e:34:4c:07:af:59:c1:53:94:83:a3:
22:39:13:bb:84:c0:16:1c:f2:eb:66:9f:57:41:a4:1f:f5:e5:
7f:01:8a:05:14:94:94:f6:bd:7d:48:c3:83:66:9d:3f:7a:4b:
fe:da:4e:fc:3b:b3:01:b0:75:2e:21:8b:2b:69:ea:67:07:65:
2f:46:c1:6a:81:d1:c2:de:94:76:cc:9e:72:47:3c:df:fd:c7:
a6:a4:4d:c9:c9:fc:17:b6:b6:9a:ec:74:23:c6:63:21:4e:90:
e4:00:1c:26:86:69:fb:6d:02:40:24:ab:4d:b3:f8:7d:9f:ea:
60:66:ad:20:dc:0a:1c:dd:a4:75:79:09:92:58:8b:41:d0:8e:
6b:dd:f2:03:ed:6f:b6:b0:86:7a:12:78:d7:af:96:c8:68:6b:
64:90:76:aa
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBWcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAxMzExODE5MTVaFw0yMzAxMzExODE5MTVaMBgxFjAU
BgNVBAMMDTYxZjgyODI2LTg3YzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDF6/Ci6BFwNNzljXUtmswl3G9GdI901yHlOaoG1e2Ylpm7jag51y98RDVq
QIt8ysI3zEX/1RJjIQuBVfTknc7sStApL0+QG3JQRfSDThWDLWSzTDiHVhNghzPJ
vH6DukFIXfYnPUizdpoULYJEfyjPOeNVW1rOVxKdefx9YyY+isi5Obr5jyMWeWUl
CeBGPFqbFeOYR164MLAFD+Qfex15IkAMK1kVVdeM2HUMBRwQKHaWyTOKQdIOdpTR
NYMOkKhbRgKqOCplf2aRTKEYsa6wraFh5inAZx1TLt0ih8qH3fx82wZsUkh+yzuo
MQJidQGbrTjxez5dM3aK8Q+TrlTnAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUn2uR
4PCmjTgKv2IsBR8rsaEni6QwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzREREE5NjRBODJDMjExRUNCNkNCOUJERDVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe7gwDQYJKoZIhvcNAQELBQAD
ggEBAIfatyPLZZ9XCdH9mT4pKfhIrAcbDsgToM78ZjfqFruVwkwC09ssrmcno91q
R3N0Sv6ituCyFffDeTCnJ/uROHW0kJMFr+2B0nGqEd+FcpcJbGbOHpdPbI/Nmhh/
R1ARmy0ONEwHr1nBU5SDoyI5E7uEwBYc8utmn1dBpB/15X8BigUUlJT2vX1Iw4Nm
nT96S/7aTvw7swGwdS4hiytp6mcHZS9GwWqB0cLelHbMnnJHPN/9x6akTcnJ/Be2
tprsdCPGYyFOkOQAHCaGafttAkAkq02z+H2f6mBmrSDcChzdpHV5CZJYi0HQjmvd
8gPtb7awhnoSeNevlshoa2SQdqo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org