Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/844F7390919811ED8E20B9D6F1222468.roa
File: 844F7390919811ED8E20B9D6F1222468.roa (raw, json)
Hash identifier: YfCUkwqAfCToktsowaAwRT6CKeZKbMjmW40cEy/dz28=
Subject key identifier: 3D:41:66:9C:A9:1F:96:22:29:93:CB:66:29:EE:A5:B1:2C:CA:1C:32
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0950
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/844F7390919811ED8E20B9D6F1222468.roa
Signing time: Wed 11 Jan 2023 10:12:56 +0000
ROA not before: Wed 11 Jan 2023 10:12:52 +0000
ROA not after: Thu 11 Jan 2024 10:12:52 +0000
asID: 133499
IP address blocks: 161.123.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2384 (0x950)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 11 10:12:52 2023 GMT
Not After : Jan 11 10:12:52 2024 GMT
Subject: CN=63be8ba8-8e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3c:ae:d3:3a:56:64:64:9c:0e:68:0c:8c:b3:
76:81:b9:79:15:b9:da:a2:64:21:a4:bf:ce:d1:ad:
19:f2:53:be:34:03:07:74:9d:1f:e7:b1:a3:b4:57:
7f:e8:88:09:7c:28:af:df:06:b4:c1:35:b4:a8:d6:
cd:98:16:c9:55:94:a4:fa:67:0f:2f:2e:05:f3:1d:
a9:3b:eb:b9:77:c9:75:90:9f:b2:5d:74:7b:81:12:
4b:45:b7:e5:6d:aa:6f:38:1e:28:46:16:a8:64:16:
f7:c3:12:60:01:3d:9b:14:db:12:54:fc:57:6c:70:
00:48:5d:78:f4:da:d1:37:27:05:a5:4c:37:ea:fd:
b8:6e:d5:cd:a3:c6:49:8b:eb:8d:29:93:36:68:d3:
d0:26:9f:78:b6:2c:5c:1c:14:5b:34:21:18:99:44:
af:ed:25:b5:27:35:4d:68:94:9f:0f:40:5a:23:73:
30:fa:40:f2:2f:27:bc:8d:5e:87:81:d7:81:4f:45:
92:8e:3f:6b:43:39:92:6c:6e:55:84:4d:44:30:eb:
00:9c:a3:56:4f:97:a4:83:c2:03:bf:01:b2:20:11:
41:01:a3:ba:26:b2:62:3a:20:40:5c:c0:6f:04:d4:
d9:d0:8f:37:e1:74:fd:73:50:ed:ad:c6:55:90:f2:
ff:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:41:66:9C:A9:1F:96:22:29:93:CB:66:29:EE:A5:B1:2C:CA:1C:32
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/844F7390919811ED8E20B9D6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.210.0/24
Signature Algorithm: sha256WithRSAEncryption
84:7f:d2:61:43:e5:8d:3e:b6:a5:40:22:68:31:c6:ea:62:d3:
c4:fe:48:52:c8:ae:1d:4e:bb:9a:26:11:61:20:b7:a9:9f:08:
8a:37:ec:da:de:cb:b4:a9:52:59:aa:a4:1f:b6:cc:53:c8:0c:
8f:46:d0:12:60:8a:da:ab:0f:18:a2:fb:93:50:ee:39:ab:1b:
2f:02:f3:8a:90:b7:93:19:d1:0a:9f:9e:45:8f:79:59:2e:09:
43:28:c7:60:cb:c4:55:2c:0f:ef:29:23:68:7a:f4:a5:73:ba:
2f:97:7f:a8:b8:d8:a2:47:06:d5:03:9e:e2:ad:c8:97:81:53:
f8:22:92:b4:00:ad:bb:c3:f8:81:b5:1d:61:16:0a:91:fe:ac:
6e:af:c1:cc:7a:7d:cd:d2:6c:40:5b:a9:9e:cc:d3:85:fa:1d:
be:7e:5c:c5:d3:1a:20:77:11:4e:78:c0:ca:2c:e7:d4:97:76:
03:44:22:02:cb:fa:65:12:4a:53:9a:07:18:25:49:e2:e6:38:
44:6b:2d:68:a1:1f:a1:16:75:c4:3a:93:1f:40:e1:dc:a1:09:
96:b1:8b:23:8c:ae:d0:25:cc:30:23:17:20:fa:c4:93:46:e9:
55:4e:b2:b5:63:23:45:6f:92:3f:9a:07:5d:d6:eb:20:5e:0f:
91:c0:85:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 02:59:22 2024 by rpki-client on console-ams.rpki-client.org