Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/558A0BA03D7F11EDAD6D84ACF1222468.roa
File: 558A0BA03D7F11EDAD6D84ACF1222468.roa (raw, json)
Hash identifier: qKYeiSf0ngZSC9Ofczlv+wPGlRDJAv4/fdwnfQmzIv4=
Subject key identifier: FE:AA:40:C1:E8:C7:D3:C9:0B:71:E0:C2:77:A7:6A:20:9D:A6:05:AC
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 084F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/558A0BA03D7F11EDAD6D84ACF1222468.roa
Signing time: Mon 26 Sep 2022 09:41:02 +0000
ROA not before: Mon 26 Sep 2022 09:40:59 +0000
ROA not after: Tue 26 Sep 2023 09:40:59 +0000
asID: 203999
IP address blocks: 161.123.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2127 (0x84f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 26 09:40:59 2022 GMT
Not After : Sep 26 09:40:59 2023 GMT
Subject: CN=633173ae-8050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:96:5f:57:bf:ff:55:16:8f:bd:59:fe:df:
a0:d5:83:21:65:8d:fb:4b:3b:e8:43:66:71:33:02:
53:09:8f:e9:3b:2a:ed:ab:9d:11:a1:32:9b:38:9d:
5f:c6:95:5c:06:dd:01:45:03:e5:89:5a:7b:17:88:
77:d3:42:30:57:ab:c7:ed:b4:7b:70:c8:b7:93:f1:
55:eb:6a:2c:81:7f:80:09:09:37:4a:b9:41:ca:e3:
64:b0:87:e7:46:56:5f:68:7d:f6:ea:0c:d0:e0:b4:
8b:d7:c1:ac:b1:7a:ea:4e:76:b3:a8:44:bb:c3:a9:
2c:85:58:4e:ab:0c:ef:63:3a:74:17:24:43:8f:f8:
74:b9:c4:09:68:ed:0f:b1:80:fe:15:84:d5:6b:88:
03:c1:0b:62:29:72:7d:d5:15:97:b8:d0:c1:66:a5:
67:ff:eb:81:0a:9c:84:24:fa:bd:33:04:ac:aa:17:
82:eb:05:2f:f7:ba:9b:0b:03:ed:af:60:8b:23:29:
03:45:47:31:96:17:4e:e4:00:5e:45:1b:4f:10:91:
06:f1:46:f1:52:a2:2f:b9:fb:50:f0:75:79:b8:9e:
3a:01:12:ae:9f:49:d2:9e:ef:53:a4:66:cd:3f:c9:
ff:02:6b:6b:c5:b4:e4:31:6e:af:7e:3c:4e:11:11:
3a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AA:40:C1:E8:C7:D3:C9:0B:71:E0:C2:77:A7:6A:20:9D:A6:05:AC
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/558A0BA03D7F11EDAD6D84ACF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.33.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:3d:99:9c:15:9c:b9:4e:6c:74:01:ca:49:04:46:7b:8e:dc:
a4:7b:bf:a9:1f:59:88:40:2d:39:19:45:3b:20:3c:07:ca:99:
65:c6:38:3a:93:45:06:e7:30:e2:99:54:81:fd:d2:7b:a8:89:
d7:f1:ff:ae:f6:37:d3:92:06:a7:cc:f1:bd:0e:4c:35:f6:ae:
0e:7f:6d:b1:44:3b:b2:70:94:5d:30:74:cd:3b:ad:3d:24:62:
5b:30:fe:05:e7:ef:d3:35:53:e6:79:ac:68:a1:62:b5:82:2c:
cb:06:24:11:9e:9c:25:30:2f:c1:fe:ff:31:c5:7e:0d:54:54:
bc:84:24:6a:b6:45:47:d3:27:a0:d6:08:94:c0:17:99:2b:60:
c2:ea:2b:80:d6:f5:aa:06:cb:ad:d3:85:0a:64:d1:b8:0c:2e:
06:51:d1:8b:4a:f1:3f:55:4e:a6:ea:04:ec:43:8f:04:50:df:
6e:34:8b:76:37:3f:7f:7c:a1:b1:b6:08:b0:4d:f1:b1:c3:82:
41:04:a4:2f:26:4c:56:78:0b:7f:65:ea:2b:2d:bf:fa:0f:e7:
b4:4a:47:54:df:60:0f:e1:76:a8:44:45:75:45:2e:94:c9:c7:
d1:16:db:7b:c5:5f:2b:9b:b4:0a:a3:01:75:60:b1:06:b4:a0:
c7:b1:2f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 11:22:10 2023 by rpki-client on console-ams.rpki-client.org