Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AAF4B790C89C11EDBA71FBE5F1222468.roa
File: AAF4B790C89C11EDBA71FBE5F1222468.roa (raw, json)
Hash identifier: ygi1JIyS2lq+Ahs5MBeNVhicKyrJrurhdap+Aozna3U=
Subject key identifier: 60:B3:D7:86:BC:AE:DC:89:14:2F:AC:A8:E9:09:78:BE:E1:49:48:8A
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A3D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AAF4B790C89C11EDBA71FBE5F1222468.roa
Signing time: Wed 22 Mar 2023 10:31:13 +0000
ROA not before: Wed 22 Mar 2023 10:31:09 +0000
ROA not after: Fri 22 Mar 2024 10:31:09 +0000
asID: 207990
IP address blocks: 161.123.76.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2621 (0xa3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 22 10:31:09 2023 GMT
Not After : Mar 22 10:31:09 2024 GMT
Subject: CN=641ad8f1-af22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b4:0f:07:49:b4:98:2a:19:38:a9:2a:35:03:
0c:7d:b9:19:38:ad:3b:62:48:a1:d8:ab:a3:0b:29:
97:7d:c7:ca:5f:80:7a:76:f3:5e:72:16:86:af:93:
51:42:dc:19:f5:0f:70:2f:3f:19:8f:e5:3d:4d:ca:
42:2c:80:63:06:b3:3e:bd:d5:af:38:63:b9:ee:21:
6f:33:75:fa:bf:56:f1:82:1e:10:aa:53:db:a7:9c:
12:86:4a:c6:0d:ed:03:05:ab:0e:66:db:c8:df:56:
65:58:37:9d:6e:f8:c6:af:df:0c:3f:13:d7:07:71:
40:3d:9e:b7:53:f7:74:7c:ff:78:ae:d8:d4:2b:e6:
04:db:d5:2b:64:d0:8d:3e:db:21:ef:c8:5c:20:0f:
e7:b5:e1:62:db:7e:8c:bd:06:4f:39:7c:98:33:d1:
86:f9:a3:68:ab:32:25:ec:9d:4e:51:d9:58:9c:6b:
f2:25:32:c7:78:2f:a4:da:4a:90:97:69:60:a6:d5:
61:f3:01:c7:dc:19:db:ce:f0:4b:8a:ed:36:7e:97:
29:49:91:ae:ad:7c:06:91:50:49:6e:c6:ef:ec:40:
3f:13:eb:bc:64:6d:b7:7c:44:28:db:c9:1f:28:b6:
92:16:87:bd:fe:80:39:a1:1a:ac:38:5d:e2:38:18:
94:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B3:D7:86:BC:AE:DC:89:14:2F:AC:A8:E9:09:78:BE:E1:49:48:8A
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AAF4B790C89C11EDBA71FBE5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.76.0/22
Signature Algorithm: sha256WithRSAEncryption
39:de:e7:d5:00:e0:96:22:8b:15:17:9b:b7:76:a0:d6:0f:73:
c8:d4:fb:a2:a6:55:68:47:c0:fb:7d:9e:86:63:d5:8e:bc:60:
55:03:9f:50:3c:b6:97:56:4a:59:02:e3:41:db:ec:c5:27:2e:
d8:80:ee:35:43:f2:0e:ec:16:5a:75:0d:aa:91:48:1d:2d:7e:
c4:da:b1:61:71:4d:48:b2:19:6e:26:fe:06:19:28:d5:71:88:
a4:30:71:96:cc:2b:58:b1:8c:45:fa:12:82:cf:3b:0e:31:b2:
4d:b2:b2:e9:e8:73:d2:31:71:98:ab:02:99:53:f0:45:0e:60:
64:74:2b:bb:14:fc:d5:e0:95:e3:57:33:e1:f1:e3:96:d1:48:
3f:3e:a8:d7:e8:08:5d:fe:3d:13:d4:0b:1c:a1:b6:37:be:f4:
11:03:7a:05:09:d0:4b:d6:dd:4a:ee:4c:e9:ce:28:1a:a7:17:
ea:32:18:ab:db:c1:45:3a:bf:0b:63:ff:be:7c:b2:d2:43:23:
2a:46:84:c2:0e:1e:8e:0a:73:b9:75:73:f4:2b:78:78:37:f6:
8a:0c:a4:3a:f1:66:42:17:e8:fa:5e:69:40:07:70:2f:10:88:
41:c9:c2:b1:2f:c8:00:d4:ff:af:c5:22:94:35:d3:f8:25:84:
3d:06:2b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 23 02:45:25 2024 by rpki-client on console-fra.rpki-client.org