Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4EDC56DAE5DE11ECA8159599F1222468.roa
File: 4EDC56DAE5DE11ECA8159599F1222468.roa (raw, json)
Hash identifier: cKj3JdoquEN094Ym4AwDtfLGdzdUzji4HzERIVnEczE=
Subject key identifier: 12:E4:30:2A:76:1E:9D:F3:01:57:29:17:AF:74:0C:23:2B:ED:7C:B0
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0708
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4EDC56DAE5DE11ECA8159599F1222468.roa
Signing time: Mon 06 Jun 2022 21:19:11 +0000
ROA not before: Mon 06 Jun 2022 21:19:07 +0000
ROA not after: Tue 06 Jun 2023 21:19:07 +0000
asID: 203999
IP address blocks: 161.123.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1800 (0x708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 6 21:19:07 2022 GMT
Not After : Jun 6 21:19:07 2023 GMT
Subject: CN=629e6f4f-36c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:ba:4f:3f:df:6a:33:b5:fd:35:91:fc:3d:
39:99:eb:a4:aa:09:81:67:d5:cf:79:84:fc:c8:d9:
ce:a9:0e:07:62:be:42:fb:fa:c6:12:83:70:61:f5:
65:db:04:59:32:65:58:9e:4a:e1:04:ae:37:cf:b7:
e1:58:41:fb:01:85:4f:0b:42:f6:13:03:b7:d6:e5:
8a:dd:4a:4c:6d:0d:55:cf:46:06:75:8c:49:81:d0:
43:f1:11:00:72:8d:5b:bc:3a:fc:fd:38:df:2f:38:
53:b1:e4:24:2b:2f:15:2a:08:aa:2c:7e:8b:fe:61:
eb:26:73:a2:07:31:5e:c1:d8:78:4c:05:bc:4a:4c:
db:bf:1c:59:1b:5a:ee:d2:aa:10:5d:cb:d1:76:2c:
99:02:b7:b9:9c:6c:23:6c:fd:c4:98:5a:ed:2c:e0:
56:d2:a1:86:ff:d2:a4:30:eb:75:e3:12:4e:6c:ba:
d2:fa:5f:e2:f3:f6:26:67:ce:ea:11:16:2a:ac:62:
3b:01:8e:0c:60:c3:f1:be:e3:be:3a:5a:7d:b3:ba:
06:5d:01:93:53:7d:21:20:d7:11:46:b4:45:24:af:
49:66:f2:ba:c6:27:9a:34:32:30:1b:f3:2c:79:ee:
e8:91:69:34:7b:96:92:4b:cb:54:60:b0:a8:f0:e0:
07:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E4:30:2A:76:1E:9D:F3:01:57:29:17:AF:74:0C:23:2B:ED:7C:B0
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4EDC56DAE5DE11ECA8159599F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.14.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:98:7b:23:22:d6:de:b8:1a:40:c6:79:b1:bd:47:f4:28:74:
16:11:c0:1a:a9:21:4f:78:0c:17:ca:4f:a8:ef:26:65:ac:55:
99:bf:05:d4:eb:ee:8e:47:a7:1e:80:7f:ce:e7:3c:67:44:38:
ab:2a:7f:2d:51:c8:87:90:62:a0:fb:4c:02:a2:35:a2:2d:45:
db:88:32:db:91:96:d7:f8:49:a6:d6:b1:52:23:ed:e5:a6:63:
4a:39:0c:46:ac:32:75:ff:8b:05:58:8b:39:2b:a2:c0:31:36:
91:82:04:2f:4e:32:7f:95:9f:c4:3b:0c:4c:31:05:c3:68:2c:
c5:4b:18:35:a7:e0:96:17:09:90:41:c5:11:65:65:d2:ed:73:
b8:0a:62:c2:d6:f4:82:32:98:77:e0:00:b2:77:7e:45:c2:46:
1a:a6:9a:56:09:1c:77:76:bb:0c:31:b0:86:40:f3:82:c4:cb:
14:ba:35:49:5c:b2:49:cf:36:f3:52:76:7e:59:cc:5d:c7:48:
fc:9a:8e:ed:6d:88:df:6e:e5:b6:af:c7:72:48:7f:cf:05:84:
dc:59:61:d0:02:12:cc:17:85:ea:da:6c:a5:ad:91:74:a0:ed:
4d:63:b7:93:2b:9d:34:03:af:26:67:36:b3:5e:c7:64:5a:ab:
4f:00:53:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org