Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/95410C2A7DE611ECA808739A5A40D577.roa
File: 95410C2A7DE611ECA808739A5A40D577.roa (raw, json)
Hash identifier: yOxs/EOQXP87tSwqAMwrl3cgo2qj3vg4Yi1IlCUreHY=
Subject key identifier: 96:FC:A8:15:92:81:EB:7A:3C:02:38:29:B3:94:A1:C2:2E:C9:5D:2E
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 04B6
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/95410C2A7DE611ECA808739A5A40D577.roa
Signing time: Tue 25 Jan 2022 13:56:24 +0000
ROA not before: Tue 25 Jan 2022 13:56:20 +0000
ROA not after: Wed 25 Jan 2023 13:56:20 +0000
asID: 327790
IP address blocks: 161.123.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1206 (0x4b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 25 13:56:20 2022 GMT
Not After : Jan 25 13:56:20 2023 GMT
Subject: CN=61f00188-8153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:a2:8a:a4:a0:8b:01:65:de:ff:48:f7:e2:
a0:4c:40:92:49:02:5d:97:fe:03:4b:e2:17:69:38:
4b:09:d4:35:95:d9:8b:b5:dc:a7:8e:d0:79:9f:1b:
f6:e6:be:ab:dc:50:a4:4f:54:b0:45:56:7f:3b:27:
f6:83:47:f2:57:ce:02:2a:fb:d0:b9:a4:59:1d:bf:
0f:b0:be:38:e1:75:6d:ed:2f:b4:4e:82:20:a8:db:
a9:db:d0:9b:9a:db:17:72:fd:07:4e:d8:c4:ff:dd:
9f:04:04:3f:cb:2f:ba:39:63:3a:87:c6:f1:a9:80:
00:30:e0:4f:1b:8b:e7:40:d4:d5:2f:18:a5:3e:69:
98:1e:40:06:cb:94:d1:63:37:7f:f7:5d:63:f2:c8:
05:77:4d:b6:04:db:ae:db:f2:41:00:5b:5e:a7:45:
ff:00:7b:27:b7:7b:d9:9d:93:e4:e8:88:dc:6a:33:
26:bd:37:c2:42:56:1e:23:2a:f6:f9:d5:ab:13:34:
63:f4:fd:50:1f:0a:46:0e:68:62:e3:6b:a0:23:88:
c2:4d:ad:66:58:05:bb:b2:86:9e:0f:da:64:73:d3:
89:d8:fb:18:8e:b7:81:1e:27:fc:d1:c8:7f:8f:64:
93:37:31:0c:d5:9d:bc:e5:02:49:ff:f1:9f:70:15:
d1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FC:A8:15:92:81:EB:7A:3C:02:38:29:B3:94:A1:C2:2E:C9:5D:2E
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/95410C2A7DE611ECA808739A5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.14.0/24
Signature Algorithm: sha256WithRSAEncryption
22:cf:0a:95:05:e1:d7:83:34:c0:9f:25:69:63:78:fe:d7:ea:
48:fe:d4:45:48:8c:01:28:1a:85:90:a9:29:62:57:c1:8d:ec:
c4:a7:6e:83:fe:4f:95:88:80:4a:a5:49:c8:ee:ff:1c:0e:b5:
e5:b8:2e:14:17:4f:4f:6e:90:92:fa:8b:f3:d9:03:58:21:a4:
f1:ed:a0:dd:fc:fc:6a:24:4f:f3:9e:e4:e9:ff:d7:69:4d:57:
86:4b:50:d1:61:3c:55:12:0c:0b:ed:ad:09:b2:4a:1a:91:85:
dc:86:34:2a:2e:5d:76:15:27:3f:d2:10:de:b5:ef:70:24:ec:
08:c8:8f:e2:1d:47:cf:91:c7:bf:9d:54:ae:05:99:fd:16:3c:
2e:5b:23:90:b5:37:08:8b:92:f0:31:a2:4d:0a:2e:83:83:41:
12:31:28:2d:b2:de:0c:cb:71:b5:57:29:05:0f:16:af:6f:5f:
d1:36:4e:0a:9d:f0:28:1f:46:06:eb:89:c8:a8:94:92:78:04:
3f:83:d7:43:61:f5:0f:2c:4e:6c:12:90:e6:de:50:be:7f:25:
f2:dd:f7:0d:01:72:c6:fb:ef:70:3a:fa:51:1a:5f:9e:fe:23:
3c:85:47:b9:9f:c3:e0:8f:b2:cc:1e:5c:f2:d4:14:39:ad:b6:
6a:6f:a1:f5
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBLYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAxMjUxMzU2MjBaFw0yMzAxMjUxMzU2MjBaMBgxFjAU
BgNVBAMMDTYxZjAwMTg4LTgxNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5YqKKpKCLAWXe/0j34qBMQJJJAl2X/gNL4hdpOEsJ1DWV2Yu13KeO0Hmf
G/bmvqvcUKRPVLBFVn87J/aDR/JXzgIq+9C5pFkdvw+wvjjhdW3tL7ROgiCo26nb
0Jua2xdy/QdO2MT/3Z8EBD/LL7o5YzqHxvGpgAAw4E8bi+dA1NUvGKU+aZgeQAbL
lNFjN3/3XWPyyAV3TbYE267b8kEAW16nRf8Aeye3e9mdk+ToiNxqMya9N8JCVh4j
Kvb51asTNGP0/VAfCkYOaGLja6AjiMJNrWZYBbuyhp4P2mRz04nY+xiOt4EeJ/zR
yH+PZJM3MQzVnbzlAkn/8Z9wFdHPAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUlvyo
FZKB63o8Ajgps5Shwi7JXS4wHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4Lzk1NDEwQzJBN0RFNjExRUNBODA4NzM5QTVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChew4wDQYJKoZIhvcNAQELBQAD
ggEBACLPCpUF4deDNMCfJWljeP7X6kj+1EVIjAEoGoWQqSliV8GN7MSnboP+T5WI
gEqlScju/xwOteW4LhQXT09ukJL6i/PZA1ghpPHtoN38/GokT/Oe5On/12lNV4ZL
UNFhPFUSDAvtrQmyShqRhdyGNCouXXYVJz/SEN6173Ak7AjIj+IdR8+Rx7+dVK4F
mf0WPC5bI5C1NwiLkvAxok0KLoODQRIxKC2y3gzLcbVXKQUPFq9vX9E2Tgqd8Cgf
RgbriciolJJ4BD+D10Nh9Q8sTmwSkObeUL5/JfLd9w0Bcsb773A6+lEaX57+IzyF
R7mfw+CPssweXPLUFDmttmpvofU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org