Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8FA306383D8011ED8323D8AFF1222468.roa
File: 8FA306383D8011ED8323D8AFF1222468.roa (raw, json)
Hash identifier: 9vOfVsH9A6OmIzkD805+qRuLXib7aQjK7P0iAteJPiA=
Subject key identifier: 40:CF:8A:D1:B0:DF:F4:42:0F:EA:B7:05:31:40:99:25:16:0B:7F:35
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0865
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8FA306383D8011ED8323D8AFF1222468.roa
Signing time: Mon 26 Sep 2022 09:49:49 +0000
ROA not before: Mon 26 Sep 2022 09:49:46 +0000
ROA not after: Tue 26 Sep 2023 09:49:46 +0000
asID: 203999
IP address blocks: 161.123.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2149 (0x865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 26 09:49:46 2022 GMT
Not After : Sep 26 09:49:46 2023 GMT
Subject: CN=633175bd-1a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ac:f8:03:d2:4b:5c:15:97:a2:f9:b1:d6:2c:
ce:dd:a7:04:e3:c8:8e:be:bb:5d:0b:89:c4:c7:9d:
ec:9f:c3:70:80:2b:2a:31:df:dd:82:b5:3f:50:5d:
5f:65:50:7d:a5:37:50:30:70:43:94:8d:d0:23:dc:
98:6f:2f:41:e8:72:b6:ee:a5:12:11:76:cf:31:b1:
6f:d0:7c:f5:52:a7:f3:7a:50:12:ce:e3:b4:61:03:
49:e8:75:92:3a:a6:01:f4:f1:24:a0:6b:cc:84:35:
50:fe:47:8c:b1:83:ac:cd:15:e6:2f:35:ec:49:5a:
aa:86:bb:a1:7e:99:f0:75:b3:4e:4c:53:21:51:0e:
9d:d5:6c:fd:64:09:cf:df:2c:5d:61:c9:a7:fa:f5:
ce:2c:2c:ce:92:f2:f7:cf:04:75:22:cb:36:6c:92:
74:3f:d6:c3:12:7c:3e:f6:62:05:65:84:d5:c0:e1:
d0:1d:c0:5d:b0:65:5a:fe:df:ee:8f:c5:76:72:ac:
cf:79:f0:d0:c0:85:8f:b6:99:62:6a:6b:f9:c3:88:
d6:c5:5a:94:14:27:09:ec:be:68:84:5e:05:19:d7:
34:36:00:ff:4a:00:5c:46:97:9e:75:e2:12:4d:c9:
f1:34:9c:ce:37:4b:94:b7:9c:15:55:01:c4:86:c7:
14:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CF:8A:D1:B0:DF:F4:42:0F:EA:B7:05:31:40:99:25:16:0B:7F:35
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8FA306383D8011ED8323D8AFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.115.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:fa:74:22:9e:99:d7:8e:1f:18:53:92:c9:78:99:03:0d:7a:
07:ac:3b:bb:af:88:c3:f2:79:5c:5f:4d:63:51:12:83:9f:95:
cb:49:2c:6e:dd:a7:3c:b4:e4:6e:a6:5a:0e:1f:b4:bb:af:70:
c1:61:94:91:67:88:39:fe:f4:a5:31:f7:17:c2:63:bd:a7:5a:
82:df:f1:b4:93:23:c8:69:58:27:61:08:15:4f:6a:3f:be:96:
2b:a1:40:38:33:48:99:7a:b5:67:9b:d2:6c:fb:c2:be:b5:4d:
40:41:c5:17:83:3d:70:35:bd:0a:2a:13:f1:1a:94:20:ab:41:
bb:43:db:d3:9b:4a:1e:e0:9d:4a:3d:3e:54:c5:27:2c:ad:bb:
35:74:82:dd:83:aa:c2:ef:a5:64:0f:9c:17:0d:2d:0a:df:25:
96:8c:f8:d5:fb:1e:6e:d3:52:85:42:66:56:ae:63:c9:29:35:
f9:8e:8d:08:45:fd:d8:2c:5d:78:f1:f1:1c:9f:cd:5b:e3:56:
1d:46:32:6c:23:97:d7:93:71:69:ad:1d:47:32:c5:e6:91:5e:
35:c0:26:4d:5e:bf:52:e2:98:7c:91:e7:da:18:45:fb:7c:a5:
e3:7a:d6:d9:82:3c:56:a1:d3:f8:2e:a5:19:8b:fd:cd:6d:00:
d8:85:45:b9
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjA5MjYwOTQ5NDZaFw0yMzA5MjYwOTQ5NDZaMBgxFjAU
BgNVBAMMDTYzMzE3NWJkLTFhMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQClrPgD0ktcFZei+bHWLM7dpwTjyI6+u10LicTHneyfw3CAKyox392CtT9Q
XV9lUH2lN1AwcEOUjdAj3JhvL0HocrbupRIRds8xsW/QfPVSp/N6UBLO47RhA0no
dZI6pgH08SSga8yENVD+R4yxg6zNFeYvNexJWqqGu6F+mfB1s05MUyFRDp3VbP1k
Cc/fLF1hyaf69c4sLM6S8vfPBHUiyzZsknQ/1sMSfD72YgVlhNXA4dAdwF2wZVr+
3+6PxXZyrM958NDAhY+2mWJqa/nDiNbFWpQUJwnsvmiEXgUZ1zQ2AP9KAFxGl551
4hJNyfE0nM43S5S3nBVVAcSGxxSzAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUQM+K
0bDf9EIP6rcFMUCZJRYLfzUwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzhGQTMwNjM4M0Q4MDExRUQ4MzIzRDhBRkYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe3MwDQYJKoZIhvcNAQELBQAD
ggEBAA76dCKemdeOHxhTksl4mQMNegesO7uviMPyeVxfTWNREoOflctJLG7dpzy0
5G6mWg4ftLuvcMFhlJFniDn+9KUx9xfCY72nWoLf8bSTI8hpWCdhCBVPaj++liuh
QDgzSJl6tWeb0mz7wr61TUBBxReDPXA1vQoqE/EalCCrQbtD29ObSh7gnUo9PlTF
JyytuzV0gt2DqsLvpWQPnBcNLQrfJZaM+NX7Hm7TUoVCZlauY8kpNfmOjQhF/dgs
XXjx8RyfzVvjVh1GMmwjl9eTcWmtHUcyxeaRXjXAJk1ev1LimHyR59oYRft8peN6
1tmCPFah0/gupRmL/c1tANiFRbk=
-----END CERTIFICATE-----
Generated at Tue Sep 26 10:57:15 2023 by rpki-client on console-fra.rpki-client.org