Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/599ACE34E5DF11EC8A5CD39CF1222468.roa
File: 599ACE34E5DF11EC8A5CD39CF1222468.roa (raw, json)
Hash identifier: djqy0YXYBzvY3qASUXJUMcdefhieexlYptr+h2xey+0=
Subject key identifier: 89:21:D1:9A:5A:88:1F:CF:DF:C8:C0:4B:0A:3E:D4:D1:F5:EC:49:7E
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 071E
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/599ACE34E5DF11EC8A5CD39CF1222468.roa
Signing time: Mon 06 Jun 2022 21:26:39 +0000
ROA not before: Mon 06 Jun 2022 21:26:35 +0000
ROA not after: Tue 06 Jun 2023 21:26:35 +0000
asID: 203999
IP address blocks: 161.123.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1822 (0x71e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 6 21:26:35 2022 GMT
Not After : Jun 6 21:26:35 2023 GMT
Subject: CN=629e710e-dd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cb:bf:e0:47:c4:b0:83:37:fc:3d:a5:c6:38:
2b:b8:76:94:b7:06:65:e6:58:f3:14:a8:c4:1d:dc:
83:18:8a:6b:52:c0:9b:ea:13:9a:0f:82:6b:45:a0:
7c:74:e8:a2:92:9b:03:47:ce:57:2c:a6:f5:60:30:
c1:9c:3e:52:6c:0d:12:29:e7:e5:a0:d4:a8:bc:58:
35:aa:9a:e1:09:3a:d3:55:7d:d4:77:4f:68:70:4f:
d0:1a:3d:98:c5:37:75:9e:df:9c:a7:f5:7f:2b:05:
88:c6:67:fd:12:8f:b1:df:46:85:33:08:85:62:f9:
f5:9b:2c:52:c9:9a:65:79:c6:2c:c0:8e:ae:2f:f8:
1f:7d:db:dc:06:66:f8:87:af:0a:4c:9b:d7:cc:bf:
34:47:f1:cb:de:b9:20:7e:85:fb:be:1f:8d:74:fe:
1e:55:4c:f0:5d:4a:5c:50:77:26:02:eb:d7:46:d8:
3e:d7:7a:bb:40:03:09:53:b5:3d:c8:6d:de:c0:15:
42:6c:9d:cd:6b:1f:c1:58:47:ea:8b:35:53:e8:19:
2a:b7:e3:49:0e:0b:60:ff:e9:10:b5:48:b0:57:16:
c1:62:13:ba:22:13:7c:47:17:43:b0:48:65:fb:23:
95:d3:0e:3f:ea:27:7d:e3:c8:9b:ec:b6:9e:0c:8e:
e9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:21:D1:9A:5A:88:1F:CF:DF:C8:C0:4B:0A:3E:D4:D1:F5:EC:49:7E
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/599ACE34E5DF11EC8A5CD39CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.25.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:2a:7b:26:2e:6b:39:05:8b:a9:3f:91:81:b2:2b:0d:82:c3:
59:72:cb:50:a3:52:65:d7:28:13:30:e4:18:11:1a:28:74:6a:
84:18:02:78:fb:e9:fb:09:72:c0:61:e0:86:8e:b3:81:d6:9f:
56:01:06:6a:c2:64:81:57:db:81:16:f2:11:1e:31:9b:b1:51:
96:57:f3:1e:8e:a2:e2:8e:0c:ff:91:de:fd:b9:ca:6e:7d:c5:
71:a0:5e:ff:6e:c8:02:d7:fd:1b:47:f8:95:4f:ea:f3:a6:47:
d3:26:1f:82:82:14:c9:f2:3e:9a:b9:fc:a0:1b:9e:e1:65:db:
81:d0:4b:30:ef:b9:3e:76:be:06:8d:33:4a:53:d8:a6:6f:f2:
38:a8:6c:d0:db:d7:da:de:47:0d:22:a4:62:26:0b:86:14:2c:
0b:ff:6e:78:85:8b:0f:61:a1:21:12:98:f5:b4:d4:00:11:9c:
9e:35:db:0f:67:c0:34:9c:8b:48:42:a6:24:df:8b:c1:da:d5:
ab:ad:54:62:c8:cd:8b:cb:b4:0e:9f:29:e9:17:ac:9b:c7:65:
74:cd:34:58:09:f0:51:8f:22:e5:76:8b:49:cc:11:68:4c:06:
b1:c1:6c:e2:3e:5b:2d:5c:27:10:55:d8:6c:b3:12:14:26:1d:
1b:3d:47:ef
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBx4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjA2MDYyMTI2MzVaFw0yMzA2MDYyMTI2MzVaMBgxFjAU
BgNVBAMMDTYyOWU3MTBlLWRkNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9y7/gR8Swgzf8PaXGOCu4dpS3BmXmWPMUqMQd3IMYimtSwJvqE5oPgmtF
oHx06KKSmwNHzlcspvVgMMGcPlJsDRIp5+Wg1Ki8WDWqmuEJOtNVfdR3T2hwT9Aa
PZjFN3We35yn9X8rBYjGZ/0Sj7HfRoUzCIVi+fWbLFLJmmV5xizAjq4v+B9929wG
ZviHrwpMm9fMvzRH8cveuSB+hfu+H410/h5VTPBdSlxQdyYC69dG2D7XertAAwlT
tT3Ibd7AFUJsnc1rH8FYR+qLNVPoGSq340kOC2D/6RC1SLBXFsFiE7oiE3xHF0Ow
SGX7I5XTDj/qJ33jyJvstp4MjunTAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUiSHR
mlqIH8/fyMBLCj7U0fXsSX4wHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzU5OUFDRTM0RTVERjExRUM4QTVDRDM5Q0YxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChexkwDQYJKoZIhvcNAQELBQAD
ggEBAD8qeyYuazkFi6k/kYGyKw2Cw1lyy1CjUmXXKBMw5BgRGih0aoQYAnj76fsJ
csBh4IaOs4HWn1YBBmrCZIFX24EW8hEeMZuxUZZX8x6OouKODP+R3v25ym59xXGg
Xv9uyALX/RtH+JVP6vOmR9MmH4KCFMnyPpq5/KAbnuFl24HQSzDvuT52vgaNM0pT
2KZv8jiobNDb19reRw0ipGImC4YULAv/bniFiw9hoSESmPW01AARnJ412w9nwDSc
i0hCpiTfi8Ha1autVGLIzYvLtA6fKekXrJvHZXTNNFgJ8FGPIuV2i0nMEWhMBrHB
bOI+Wy1cJxBV2GyzEhQmHRs9R+8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org