Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/703F28B03D8211ED8EA512B5F1222468.roa
File: 703F28B03D8211ED8EA512B5F1222468.roa (raw, json)
Hash identifier: CpkNt4IvdkEXFhkhFKkwczD6YBrtDZJeFm/cPcZvdO8=
Subject key identifier: AF:F6:41:4D:CC:1D:74:35:11:47:85:A7:DA:76:23:51:17:41:B3:07
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0889
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/703F28B03D8211ED8EA512B5F1222468.roa
Signing time: Mon 26 Sep 2022 10:03:16 +0000
ROA not before: Mon 26 Sep 2022 10:03:12 +0000
ROA not after: Tue 26 Sep 2023 10:03:12 +0000
asID: 203999
IP address blocks: 161.123.198.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2185 (0x889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 26 10:03:12 2022 GMT
Not After : Sep 26 10:03:12 2023 GMT
Subject: CN=633178e4-91f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a0:d2:ce:15:b8:89:18:fb:26:24:ef:e8:35:
3a:6a:3b:e1:cc:53:9a:b7:43:dd:78:85:fe:bb:cf:
8d:94:a8:96:48:95:83:2f:80:75:92:24:76:75:7c:
32:0c:3f:c7:82:03:3c:0a:a9:9c:b1:84:9c:0b:e1:
33:67:20:a2:e8:91:49:0d:45:5f:34:c2:69:59:c1:
3d:30:64:fa:36:ac:a6:4f:b3:cd:ee:ff:74:c7:10:
1a:ba:ce:36:b1:54:73:93:c6:ef:52:12:f2:90:05:
c9:7d:e7:1a:55:12:27:e8:1a:74:4a:c4:95:a5:e9:
79:ae:3b:99:c0:2f:df:b3:07:32:3a:af:c6:ad:6a:
6d:f6:31:bb:af:c2:d7:c3:ed:7c:82:91:f8:82:ec:
8e:bd:1e:0c:47:eb:45:07:a0:a7:6d:6c:da:f5:9d:
e7:33:71:f9:27:cc:be:2a:02:1f:ce:68:f7:09:e7:
04:8a:96:06:74:5a:c2:ce:aa:df:b4:1b:22:f1:fb:
4e:65:2a:a4:ad:c5:ad:79:48:5a:96:c1:08:57:98:
78:80:00:0b:d9:5b:cb:9a:c9:d5:43:b7:62:42:14:
e4:e4:dd:51:c6:51:00:6d:4d:4c:2e:bb:d6:85:0b:
6b:a6:bc:88:71:54:64:9f:84:87:0c:5f:4f:70:6e:
a3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F6:41:4D:CC:1D:74:35:11:47:85:A7:DA:76:23:51:17:41:B3:07
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/703F28B03D8211ED8EA512B5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.198.0/23
Signature Algorithm: sha256WithRSAEncryption
04:a1:e7:96:3d:11:05:9e:28:ba:08:62:67:f3:51:d0:09:2b:
c1:49:21:db:a1:67:64:dd:22:13:3d:b3:f9:c3:dd:b7:6c:34:
b2:80:54:b2:04:f3:88:74:e5:a0:6c:30:fc:78:e9:54:b6:51:
03:af:ad:63:bb:65:85:c0:44:c8:2b:75:98:33:98:9a:fb:98:
5f:f3:04:54:18:9e:fa:d0:c4:fc:01:15:04:4d:e2:d2:98:5b:
13:0e:bf:ae:5b:4a:2d:bf:76:7d:41:f1:24:6c:b7:05:5f:d1:
5b:b8:4b:f6:95:12:ea:f4:d7:8c:23:f3:ee:b2:6b:2c:9d:5a:
d5:66:1c:36:2d:d4:25:c5:84:32:b0:47:e5:ae:9f:70:e4:26:
09:14:b8:a4:a3:5f:30:4e:b2:f6:6a:de:58:3d:9e:47:a9:36:
38:0a:04:95:0b:ee:98:7e:a5:c9:51:18:d2:d7:ee:06:da:3d:
9d:5b:f7:8e:f5:bd:44:53:18:1f:6e:a1:a6:8b:6c:89:e5:82:
13:94:0b:6f:94:02:97:63:8a:d9:e7:19:a1:95:6f:fd:4d:60:
22:b6:76:f2:86:64:6f:de:ae:97:83:29:3b:12:92:eb:b7:32:
2f:6d:d3:03:8f:36:83:42:af:77:28:ff:0e:28:cc:ab:b6:00:
84:47:a0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 10:57:15 2023 by rpki-client on console-fra.rpki-client.org