Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A8B0BB0685BC11EC9CD9B09F5A40D577.roa
File: A8B0BB0685BC11EC9CD9B09F5A40D577.roa (raw, json)
Hash identifier: TuZNEW38kY1ovPsDlRsIrBXdcHECeu/oK7tM1yulOwY=
Subject key identifier: 19:6B:6C:EB:70:98:B8:87:BE:95:FA:25:EA:89:89:41:60:03:ED:7C
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 059B
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A8B0BB0685BC11EC9CD9B09F5A40D577.roa
Signing time: Fri 04 Feb 2022 13:16:27 +0000
ROA not before: Fri 04 Feb 2022 13:16:24 +0000
ROA not after: Fri 03 Feb 2023 13:16:24 +0000
asID: 58202
IP address blocks: 161.123.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1435 (0x59b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 4 13:16:24 2022 GMT
Not After : Feb 3 13:16:24 2023 GMT
Subject: CN=61fd272b-08ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7a:bc:8b:30:28:5b:46:2e:ca:4a:ab:0b:da:
d8:70:43:da:44:3a:7f:91:60:88:b1:df:b2:a3:d0:
21:6a:e2:25:ec:58:7b:74:b2:22:01:19:27:25:e6:
ad:ed:26:dd:b1:84:92:23:6a:b2:c4:9f:0b:90:9f:
2e:5e:47:bc:40:05:c7:ff:bb:87:d9:13:61:ba:f5:
0f:3c:00:4e:db:61:dd:34:2e:50:b8:4f:c5:b7:fd:
29:cb:c0:ef:5c:05:ad:b0:c9:cd:6f:df:85:fa:3e:
bb:56:ce:29:f4:54:d4:1a:62:e3:fa:f4:51:3a:42:
96:bc:fe:c9:fb:40:4d:54:09:cd:46:95:ad:88:b3:
59:19:7b:1e:4f:09:23:3e:0e:f8:ce:56:26:a1:4f:
dc:b4:38:ed:30:92:30:e5:b5:7f:38:ed:71:15:29:
48:51:cf:39:0b:f5:56:1a:aa:1e:3e:9b:01:c2:dc:
f4:c1:43:cb:34:69:b4:d1:2e:b0:84:43:78:a9:d1:
f2:11:17:d6:3f:53:22:d4:ac:74:64:f3:8a:4f:dc:
da:fa:a4:e6:d4:33:98:4d:68:0e:33:ad:cf:b5:57:
d9:25:f4:a9:1e:c4:fc:1c:f8:ab:20:67:63:a1:ec:
64:48:80:89:d7:c5:0a:25:21:50:43:6c:7c:4f:9f:
4e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6B:6C:EB:70:98:B8:87:BE:95:FA:25:EA:89:89:41:60:03:ED:7C
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A8B0BB0685BC11EC9CD9B09F5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.233.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:bd:cb:80:1d:c2:1f:fa:40:18:04:0c:45:d0:dd:15:0c:2c:
69:4b:18:8c:c0:3a:da:ad:ca:37:28:ea:d0:5b:9d:69:99:8c:
66:44:27:ac:fa:fd:2c:87:dd:e3:f2:66:9a:84:b0:12:98:33:
ff:38:c4:32:2a:b7:20:42:88:7b:f7:50:3f:ec:a7:95:f2:2d:
05:58:f5:94:91:c6:f7:09:ec:0d:ec:74:d9:93:70:d7:7c:1e:
bd:76:b1:5f:38:c2:1e:ac:de:9c:28:93:de:6d:4b:1a:43:ce:
26:d0:f7:61:ed:6a:da:79:7a:e8:6a:83:b9:c6:e2:8d:63:34:
8d:d3:1b:57:fd:10:31:d7:4e:7c:c1:83:df:1a:69:4b:c8:07:
01:21:91:f8:87:7e:1d:4b:3e:c4:06:51:b4:ff:9c:b1:67:41:
c9:90:eb:ed:4a:40:65:ff:f6:56:6f:bc:b8:11:b6:ea:33:e0:
96:db:b4:4a:05:7b:c2:6e:41:4d:a1:33:4b:c0:0d:a4:75:c2:
40:42:06:3e:4f:b6:48:45:c8:8a:4d:c7:9a:2e:c5:f6:53:d8:
aa:59:29:97:e1:c3:cd:bf:a2:24:21:45:1a:35:70:e6:81:ad:
01:30:42:a1:d0:1f:62:85:6a:5d:7a:88:2c:e6:db:2e:0c:37:
ac:2e:e5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org