Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/76F118B4441F11EDB022B8DAF1222468.roa
File: 76F118B4441F11EDB022B8DAF1222468.roa (raw, json)
Hash identifier: UMIirjZdKLrMcDwyTuIrryz2di6XGr6DR7mlej+rD4A=
Subject key identifier: CA:BD:15:98:F7:6C:BD:2C:63:D6:DD:43:48:2B:F6:1B:DB:8F:92:28
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 08B1
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/76F118B4441F11EDB022B8DAF1222468.roa
Signing time: Tue 04 Oct 2022 20:02:25 +0000
ROA not before: Tue 04 Oct 2022 20:02:21 +0000
ROA not after: Wed 04 Oct 2023 20:02:21 +0000
asID: 203020
IP address blocks: 161.123.214.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2225 (0x8b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Oct 4 20:02:21 2022 GMT
Not After : Oct 4 20:02:21 2023 GMT
Subject: CN=633c9151-b197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:30:bc:6f:3f:77:01:0e:ba:56:42:bf:e4:
d1:29:8e:9d:ef:81:75:43:3d:20:ca:8e:65:49:18:
be:76:cb:d0:60:18:1f:43:e6:0d:35:a6:88:d1:8e:
8e:56:63:c8:41:ee:9a:b8:af:b3:a4:49:ac:d5:9c:
9c:42:ec:4a:bb:3e:3a:59:52:11:01:b7:a6:74:51:
a1:66:23:92:d7:4b:3a:8b:67:1c:f7:7a:90:70:eb:
ee:57:7b:85:a2:0b:6e:b9:03:c2:a2:3b:f1:50:dc:
62:7e:da:bf:ef:c1:16:fc:e6:d9:53:ec:bb:d9:60:
70:b2:2a:37:05:76:66:2a:9d:05:34:33:16:c8:fb:
2d:4f:e2:52:da:30:79:15:8b:99:ba:d9:04:93:f9:
dc:2c:9b:0a:12:79:82:c6:f9:ca:fe:df:aa:ab:36:
0c:75:b5:2f:8b:72:21:cd:ca:6b:2d:65:db:0d:ce:
a2:3f:32:a8:cd:3c:e2:fe:0c:82:70:97:87:2a:e0:
9e:58:bf:d3:12:59:eb:f7:01:37:8e:d0:b0:d5:11:
72:bd:d9:ab:c2:84:0e:04:3b:cb:4a:cf:e6:bb:75:
33:56:32:57:d4:87:d8:98:b7:eb:9e:29:84:30:84:
66:31:33:db:3e:36:61:3f:a4:d2:7e:5b:d2:70:c5:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BD:15:98:F7:6C:BD:2C:63:D6:DD:43:48:2B:F6:1B:DB:8F:92:28
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/76F118B4441F11EDB022B8DAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.214.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:a4:5f:ae:b0:c8:f9:0a:51:0b:7e:44:31:2c:04:33:36:30:
6e:55:81:1d:58:ca:9f:14:e0:4b:b7:82:c1:14:93:2f:b7:57:
70:54:e2:21:79:f7:b0:b3:46:a4:bb:3b:53:62:98:87:65:82:
94:b9:af:4a:ec:db:0a:7c:0c:b3:6d:36:ce:d1:f7:c5:75:12:
02:cc:aa:77:9c:e5:65:ee:12:38:82:a0:0b:33:ca:3c:51:14:
ad:e7:af:fd:8b:c1:59:36:b9:e4:5a:a6:68:cc:96:d0:56:03:
b1:71:4c:21:38:82:c9:0a:4b:a5:c2:28:0f:35:11:a2:e1:3e:
d1:49:8c:20:0c:67:f6:33:5f:b0:d9:0c:2f:b9:b7:6b:da:65:
51:26:c0:4d:5a:2f:75:80:c4:b6:72:76:dd:53:4b:46:b4:6c:
98:e6:5c:e9:16:90:22:f6:a4:0c:32:65:9a:6f:81:d7:29:76:
b7:3f:ff:ae:84:ed:da:b4:37:74:68:cf:0e:2b:47:ff:c5:70:
d9:43:bf:11:d4:d6:bf:64:3d:11:ea:54:4b:be:93:18:34:15:
5d:65:e8:fe:bc:10:70:89:3f:a9:65:9e:d9:ee:36:5b:00:13:
9d:d5:48:44:95:1d:db:01:c4:1d:93:cc:b6:e0:da:ac:e0:ed:
85:bf:e6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 5 01:56:48 2023 by rpki-client on console-fra.rpki-client.org