Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/76D8C1049A3011EC82EB6DB35A40D577.roa
File: 76D8C1049A3011EC82EB6DB35A40D577.roa (raw, json)
Hash identifier: 4EIqxp1lE/oK0O1bV5G9hBxj1kzOw+KKX7/Lx1/p9mg=
Subject key identifier: AB:79:F9:23:05:18:2F:D1:24:90:C2:34:F0:32:28:55:4B:2E:2E:86
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 05F2
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/76D8C1049A3011EC82EB6DB35A40D577.roa
Signing time: Wed 02 Mar 2022 13:55:49 +0000
ROA not before: Wed 02 Mar 2022 13:55:44 +0000
ROA not after: Thu 02 Mar 2023 13:55:44 +0000
asID: 58202
IP address blocks: 161.123.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1522 (0x5f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 2 13:55:44 2022 GMT
Not After : Mar 2 13:55:44 2023 GMT
Subject: CN=621f7764-e7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ae:69:8a:e5:dd:cb:aa:3d:a4:8f:20:16:a7:
d6:71:00:96:b8:8f:73:b4:df:a7:09:64:63:9f:21:
49:f3:cc:1e:2d:2b:1f:b2:c9:c0:8a:6f:39:95:92:
d2:42:0d:b8:17:db:91:93:ee:6c:9d:0c:52:93:74:
ca:1f:40:bb:3f:7e:a2:c2:b2:f3:72:99:94:c8:2b:
42:ae:c5:1f:a1:78:3f:98:f5:0e:ca:05:41:d7:34:
23:30:86:45:a6:a5:c6:ca:b7:c5:8c:46:d9:b0:8f:
2b:b5:df:f5:d2:f2:8d:35:fa:b3:61:42:fa:e7:2e:
43:99:eb:b5:7b:20:28:1d:f5:94:68:a4:1a:ab:19:
8b:3f:45:1a:51:9d:26:5a:13:66:18:b3:ec:fd:e3:
9f:56:c6:42:3c:28:dc:77:36:41:0e:ed:39:75:9c:
cc:66:31:36:8e:60:00:3d:dd:2d:1b:4d:15:d2:a7:
cb:9f:62:1f:be:87:9b:81:d7:fe:4d:ff:02:bd:1e:
68:80:ff:c8:6c:c6:7d:db:e5:1c:1d:82:00:c8:0a:
20:85:12:7e:27:d8:e5:80:24:59:b7:36:0d:98:d4:
cb:2e:e9:f5:bb:da:79:e2:3c:30:b8:ca:38:30:73:
8f:ad:b7:04:ba:4d:7b:32:a6:58:77:b1:91:0f:ef:
60:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:79:F9:23:05:18:2F:D1:24:90:C2:34:F0:32:28:55:4B:2E:2E:86
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/76D8C1049A3011EC82EB6DB35A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.234.0/24
Signature Algorithm: sha256WithRSAEncryption
61:79:b5:84:cc:a3:f2:76:84:84:f6:8e:c5:e4:89:3f:32:13:
b1:a4:38:25:8c:2b:3e:64:10:64:2a:87:3f:1d:d9:e0:4a:1a:
c1:c2:58:06:13:96:dd:a3:f1:06:5e:48:b3:0d:a4:11:b5:dc:
a1:21:84:df:c4:21:0a:8f:da:59:8f:bc:06:d3:26:d3:ae:e6:
07:a6:59:f2:07:99:30:c7:4f:05:fb:e7:d1:1b:dc:37:4d:3a:
cc:62:49:8e:a1:df:86:99:c5:50:d0:d1:25:91:23:f9:d3:2d:
b3:f7:d0:aa:7d:4d:bf:e2:08:16:7d:36:e1:81:8a:02:6e:33:
97:91:d9:c7:36:d8:07:c3:e9:ab:e2:01:1f:ed:f0:28:13:bb:
46:41:f9:9e:ab:48:2a:65:57:6a:ee:37:a3:1b:2b:48:6c:51:
e6:d9:de:35:21:8a:74:c5:aa:00:fe:8c:30:4c:0c:aa:95:72:
7c:2e:b2:d6:77:d1:2c:fb:e4:dd:f3:7e:fd:59:6d:7e:70:d1:
7f:06:c7:65:99:f1:61:7c:f7:ac:6f:22:2b:65:6a:05:94:da:
7c:69:0e:32:eb:bc:18:cc:74:1e:80:bf:9b:9f:91:4f:81:1a:
14:5e:5d:00:b7:82:2b:94:bc:ba:69:89:1b:5d:ea:c9:c6:d3:
21:6a:0c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org