Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/569D8FF8919911EDAF684BD9F1222468.roa
File: 569D8FF8919911EDAF684BD9F1222468.roa (raw, json)
Hash identifier: wLtGcAoKzrmtf1JjRe/oi1ZS5B8/VYa1iOMegm7ArT8=
Subject key identifier: D6:8D:20:62:5C:CA:8B:71:AF:98:40:E4:8E:21:9D:06:BD:C6:C6:84
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 095E
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/569D8FF8919911EDAF684BD9F1222468.roa
Signing time: Wed 11 Jan 2023 10:18:49 +0000
ROA not before: Wed 11 Jan 2023 10:18:45 +0000
ROA not after: Thu 11 Jan 2024 10:18:45 +0000
asID: 133499
IP address blocks: 161.123.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2398 (0x95e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 11 10:18:45 2023 GMT
Not After : Jan 11 10:18:45 2024 GMT
Subject: CN=63be8d09-f7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:62:44:fc:1f:74:52:13:6c:af:65:2a:50:3e:
c2:4c:41:6d:02:21:cd:bf:73:6e:aa:a3:c3:0c:dd:
f8:64:78:30:e0:2e:7f:7d:7b:7f:56:73:de:a0:f0:
5a:06:ea:ad:09:af:b9:34:a4:2a:5f:cb:5d:78:b4:
77:3f:c6:d4:b7:b9:9a:36:14:46:cf:54:fe:b3:80:
f4:ee:65:5b:fe:67:a4:c1:6f:c1:d7:7d:5f:5b:6c:
bc:7b:46:04:3e:ac:0e:dc:e3:cb:58:0f:83:d9:f6:
99:2f:3a:2e:7e:f0:6b:95:6b:2b:f7:e4:43:5f:31:
cb:4e:60:7c:f6:a4:81:14:e5:bc:8b:a5:6b:d6:4c:
d2:9a:bc:29:fe:24:1d:02:3e:dd:7f:e0:cb:2d:7f:
02:db:6f:99:55:4b:f6:6f:ad:3c:18:1e:a4:76:7d:
6c:53:35:0f:d4:1d:3c:5f:10:59:74:91:0a:0d:1a:
81:58:b8:43:fb:06:85:1b:cc:6e:8c:c1:f8:8a:b7:
d7:cd:fc:49:fb:23:6e:6e:9d:cd:50:96:f8:8f:bf:
47:84:b1:5d:88:07:8e:17:97:d7:04:cf:af:ce:38:
a9:3b:b0:04:3e:e7:2e:2c:97:6f:9a:2b:2a:18:65:
fc:86:46:d0:2d:74:6a:4d:d8:94:a6:9d:eb:06:35:
e8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8D:20:62:5C:CA:8B:71:AF:98:40:E4:8E:21:9D:06:BD:C6:C6:84
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/569D8FF8919911EDAF684BD9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.67.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:89:a9:f6:fe:d1:18:a0:3c:af:8b:2f:08:20:3d:f8:0c:3f:
1b:36:b0:b6:b5:a5:08:30:cd:8b:8c:ac:90:00:c9:c5:c1:9c:
d5:9c:fc:be:63:68:1f:e9:d9:20:dc:d8:a7:71:00:be:4e:a7:
dd:aa:51:58:5f:2c:84:a5:60:a0:ce:0e:13:42:f8:46:7b:7b:
e4:e3:46:32:24:fa:7f:80:98:61:ee:f9:76:dc:a4:b4:b0:c7:
d3:3c:95:8d:83:48:52:89:df:4f:9b:8d:e4:15:7c:5e:7a:da:
0b:9a:f3:7b:29:ee:32:a0:97:27:89:62:ce:16:b0:73:1a:ba:
83:cd:a7:11:b1:c2:a5:78:cc:20:d8:18:97:b5:bc:8b:c1:2e:
2d:5e:ef:3c:d3:eb:e5:ad:a0:c5:fd:df:23:f3:6d:1b:05:75:
54:18:25:1a:a6:e3:f7:b1:56:d7:ee:7b:46:e9:f1:e1:1f:5c:
63:91:7d:70:73:37:7b:c6:15:5a:96:e8:69:bf:78:b8:1c:45:
67:31:41:c9:d8:5e:55:41:9a:80:21:e4:e0:1d:8b:9e:d2:fa:
0e:54:cf:be:40:45:b3:f7:4e:d5:e8:c5:d5:02:17:ff:f7:6b:
67:94:d6:73:f8:d2:19:e3:b2:e1:41:2e:c7:42:a7:86:f5:52:
00:46:62:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 02:02:47 2024 by rpki-client on console-fra.rpki-client.org