Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AC3B9C12D1E511EC9F71D7B6F1222468.roa
File: AC3B9C12D1E511EC9F71D7B6F1222468.roa (raw, json)
Hash identifier: rmkqYcy1hslAr+elvddqEpgQkjMHP0DI65azmPqix+I=
Subject key identifier: 7E:5B:B3:BE:F1:14:C8:12:C7:6C:7F:A1:9E:84:E8:38:B5:67:10:0D
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 06C5
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AC3B9C12D1E511EC9F71D7B6F1222468.roa
Signing time: Thu 12 May 2022 11:21:31 +0000
ROA not before: Thu 12 May 2022 11:21:27 +0000
ROA not after: Fri 12 Aug 2022 11:21:27 +0000
asID: 327790
IP address blocks: 161.123.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1733 (0x6c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: May 12 11:21:27 2022 GMT
Not After : Aug 12 11:21:27 2022 GMT
Subject: CN=627cedbb-74f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:87:44:83:47:81:d8:c0:64:3c:68:0e:a6:0b:
9d:f1:6c:c3:79:bc:9f:9d:50:00:e6:6a:99:22:14:
58:8c:57:2d:41:0e:b1:ce:b4:4b:81:9a:b0:84:a6:
74:04:df:e5:91:c4:7f:2d:6e:2f:a3:51:8d:b1:6d:
de:7b:dc:90:86:33:c2:b4:4b:16:10:c0:49:8b:c5:
69:dd:02:79:d2:a2:e9:20:ad:af:51:4d:8a:7d:d7:
b9:08:29:b6:9f:c5:3d:87:45:71:a5:39:dc:e9:99:
db:44:0f:05:b8:72:00:b4:01:d5:f1:3a:44:69:a1:
c3:3f:ae:10:ed:fe:bf:53:a6:1e:17:41:7c:b7:0f:
4d:18:64:dc:23:dd:21:57:58:f5:f3:f3:af:c6:d1:
de:1d:a4:ac:8b:3b:2a:b0:f8:cc:1a:3a:5d:2b:9b:
3e:e4:39:e2:9f:e3:70:31:86:bc:09:7f:66:ac:2a:
b0:7c:e7:78:30:6d:dc:0f:60:2d:08:8f:e1:e0:26:
2c:1a:24:72:29:fd:e6:c3:a0:ba:bd:3d:8d:8e:a6:
54:5b:10:b6:61:c9:84:59:67:d9:7f:68:61:76:63:
55:8f:45:a1:93:9b:c4:c4:23:6d:10:5c:ce:51:1f:
1e:31:87:b6:41:5b:92:40:fe:c9:b4:54:83:bf:99:
f2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5B:B3:BE:F1:14:C8:12:C7:6C:7F:A1:9E:84:E8:38:B5:67:10:0D
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AC3B9C12D1E511EC9F71D7B6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.192.0/24
Signature Algorithm: sha256WithRSAEncryption
96:fa:37:ee:a4:83:35:90:6f:1d:56:6e:1b:70:e9:59:38:b6:
d5:13:1e:1e:4c:5e:02:3e:85:c9:89:99:b5:94:93:f3:6a:a4:
b6:b4:aa:f3:2d:9e:cc:9a:80:41:36:4f:55:18:ce:4b:38:ba:
72:c9:6a:ac:ce:f2:9a:96:d0:ca:a2:15:f0:8e:16:b7:7e:82:
70:d0:4c:90:c0:fc:14:29:4a:ac:71:88:89:6f:6c:c1:0c:5c:
39:44:94:ed:b3:ff:f5:44:d1:a4:94:3b:62:b9:1e:9b:e1:e5:
25:b0:58:48:61:65:64:70:3e:22:05:c1:6d:d7:38:2a:71:4f:
05:e8:c7:da:a3:6c:ef:7a:3c:13:a6:bd:fe:8e:d1:19:e3:68:
d7:af:47:f7:4e:e7:14:b8:30:56:03:ee:8b:a9:32:da:bd:c0:
7d:eb:0a:82:75:b6:e1:50:21:6b:1e:58:3b:2a:e3:51:86:63:
e9:c5:d9:ef:ff:0a:35:b6:2a:1c:9a:7b:b8:eb:03:d1:bc:11:
5b:c1:0d:64:80:f3:7b:c5:de:b1:b4:1b:46:4e:c0:2d:57:7d:
9c:ba:1c:b9:35:a2:16:9b:2b:07:2a:fe:07:26:cd:d7:3d:f3:
ef:77:b3:e8:40:4e:39:78:9f:c6:93:65:7f:4b:51:bc:46:9d:
3f:35:6c:37
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBsUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjA1MTIxMTIxMjdaFw0yMjA4MTIxMTIxMjdaMBgxFjAU
BgNVBAMMDTYyN2NlZGJiLTc0ZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDih0SDR4HYwGQ8aA6mC53xbMN5vJ+dUADmapkiFFiMVy1BDrHOtEuBmrCE
pnQE3+WRxH8tbi+jUY2xbd573JCGM8K0SxYQwEmLxWndAnnSoukgra9RTYp917kI
KbafxT2HRXGlOdzpmdtEDwW4cgC0AdXxOkRpocM/rhDt/r9Tph4XQXy3D00YZNwj
3SFXWPXz86/G0d4dpKyLOyqw+MwaOl0rmz7kOeKf43AxhrwJf2asKrB853gwbdwP
YC0Ij+HgJiwaJHIp/ebDoLq9PY2OplRbELZhyYRZZ9l/aGF2Y1WPRaGTm8TEI20Q
XM5RHx4xh7ZBW5JA/sm0VIO/mfIfAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUfluz
vvEUyBLHbH+hnoToOLVnEA0wHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0FDM0I5QzEyRDFFNTExRUM5RjcxRDdCNkYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe8AwDQYJKoZIhvcNAQELBQAD
ggEBAJb6N+6kgzWQbx1Wbhtw6Vk4ttUTHh5MXgI+hcmJmbWUk/NqpLa0qvMtnsya
gEE2T1UYzks4unLJaqzO8pqW0MqiFfCOFrd+gnDQTJDA/BQpSqxxiIlvbMEMXDlE
lO2z//VE0aSUO2K5Hpvh5SWwWEhhZWRwPiIFwW3XOCpxTwXox9qjbO96PBOmvf6O
0RnjaNevR/dO5xS4MFYD7oupMtq9wH3rCoJ1tuFQIWseWDsq41GGY+nF2e//CjW2
Khyae7jrA9G8EVvBDWSA83vF3rG0G0ZOwC1XfZy6HLk1ohabKwcq/gcmzdc98+93
s+hATjl4n8aTZX9LUbxGnT81bDc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org