Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/749EF98AA89411ED8DE5967DF1222468.roa
File: 749EF98AA89411ED8DE5967DF1222468.roa (raw, json)
Hash identifier: QSjnadAtMen/4nBeRlJCCZTs8Rria1vOOoiMTPFrS5g=
Subject key identifier: 52:0E:5E:D0:4B:E9:E8:44:8B:09:A5:0F:D2:08:49:B2:07:A0:15:98
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 099F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/749EF98AA89411ED8DE5967DF1222468.roa
Signing time: Thu 09 Feb 2023 16:11:49 +0000
ROA not before: Thu 09 Feb 2023 16:11:44 +0000
ROA not after: Fri 09 Feb 2024 16:11:44 +0000
asID: 207990
IP address blocks: 161.123.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2463 (0x99f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 9 16:11:44 2023 GMT
Not After : Feb 9 16:11:44 2024 GMT
Subject: CN=63e51b45-b11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:7b:6d:95:1a:54:cc:fd:7c:b6:90:01:a7:
b4:87:6d:71:e4:ff:4c:ee:ca:d0:e0:89:d6:6c:f0:
04:dc:5d:ed:f8:4e:08:71:a7:50:cc:ce:77:51:f9:
04:e0:f5:a2:23:85:43:6d:4d:a0:32:cd:78:ca:f4:
4c:6a:d9:b2:c6:1b:60:4d:04:b6:e7:01:6f:fa:89:
83:88:d2:dd:f0:dd:28:e3:6e:03:f0:d5:58:87:92:
14:74:64:55:71:50:0a:a7:42:12:37:9d:5b:bf:d5:
88:27:dc:92:75:c6:38:3a:b3:ff:f4:df:b1:ec:47:
f2:a0:a2:5c:c3:13:25:0e:20:38:26:6b:18:0a:55:
a9:e9:a2:cc:7b:54:91:e9:39:6c:af:dd:e4:42:41:
68:5b:96:8c:e1:1b:f9:2c:52:55:de:e8:d3:84:b1:
3d:ca:c6:ab:4f:72:53:5e:30:d4:20:ec:74:67:b1:
68:43:9b:ba:44:11:99:ca:68:25:34:10:11:88:4e:
d8:7f:77:dc:56:9a:e3:1f:2f:80:53:08:2d:22:32:
42:a7:3b:60:49:0a:9a:7d:d8:58:e0:f6:8b:ba:56:
8b:76:9d:35:ef:c2:58:d7:65:ce:30:4a:dd:5a:36:
7d:6b:a2:59:d2:b0:8c:1b:95:1f:bc:fd:51:65:63:
99:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0E:5E:D0:4B:E9:E8:44:8B:09:A5:0F:D2:08:49:B2:07:A0:15:98
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/749EF98AA89411ED8DE5967DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.222.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:26:b1:e7:38:0f:06:16:84:b2:29:b2:b8:13:dc:b7:7d:bc:
75:ef:ba:3a:0c:51:90:2e:84:9b:3d:62:75:97:4e:58:54:fc:
64:67:0a:90:30:a4:b9:9b:98:67:3e:ff:63:a5:0c:7d:b2:24:
cd:8e:33:6d:fd:5e:be:25:f8:9f:d1:eb:6c:1b:6f:8c:b5:63:
55:67:7f:bd:c6:cc:d4:63:a2:ec:f4:58:2c:3c:df:2b:55:6c:
00:d1:3a:e2:97:0d:b8:0d:2f:06:7d:64:41:e4:e6:c9:de:1c:
91:06:d0:ed:6e:a0:95:3c:3c:1d:09:0c:7e:23:58:9b:5f:b5:
47:50:fe:74:0d:56:68:9a:55:0a:ad:1c:2e:50:95:4a:98:d9:
de:2a:67:aa:c4:0d:30:93:9c:2e:65:a4:50:5a:b5:eb:9e:6e:
01:98:19:e1:28:3a:61:46:93:2c:86:86:51:41:45:9a:a0:e1:
4a:43:ac:74:50:9a:93:65:c4:ba:f8:4d:fc:a6:5c:da:1d:0d:
2b:12:1d:a6:3b:60:b6:5a:e4:bd:4b:81:93:54:29:85:a1:91:
a2:af:48:83:13:cd:60:be:a9:07:ee:05:fc:99:68:90:36:9e:
9e:de:4f:ee:9f:2b:84:14:79:84:f5:86:b0:b3:58:89:71:45:
b0:73:02:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 10 03:25:50 2024 by rpki-client on console-ams.rpki-client.org