Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B32F2A8E3D8311EDA20680B8F1222468.roa
File: B32F2A8E3D8311EDA20680B8F1222468.roa (raw, json)
Hash identifier: uVWnSU22y07bjtZynjz9naTRhpuwpy+eHIWJsxdDthA=
Subject key identifier: CC:5A:C1:CF:C2:B0:7A:64:D0:38:0C:96:3B:3A:BA:C4:A9:DD:0A:74
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 08A3
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B32F2A8E3D8311EDA20680B8F1222468.roa
Signing time: Mon 26 Sep 2022 10:12:17 +0000
ROA not before: Mon 26 Sep 2022 10:12:14 +0000
ROA not after: Tue 26 Sep 2023 10:12:14 +0000
asID: 203999
IP address blocks: 161.123.244.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2211 (0x8a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 26 10:12:14 2022 GMT
Not After : Sep 26 10:12:14 2023 GMT
Subject: CN=63317b01-731f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:2c:d5:46:1b:a4:33:ea:a4:9b:8e:27:65:
e5:cc:ba:af:d7:0e:8f:eb:9e:3e:65:c6:3b:31:15:
d4:d2:ec:63:a2:16:d1:c6:bc:94:63:3e:22:b1:2c:
af:d4:f9:67:9a:3b:3a:73:fe:02:e7:6e:71:ee:d5:
25:7c:50:21:aa:e6:13:75:af:b2:f5:8e:59:04:fe:
d4:c5:11:3c:8b:ce:89:72:b1:ca:fb:f3:23:cf:ac:
a3:b5:0b:b6:08:13:de:49:aa:19:5f:4b:b9:15:b7:
7e:fe:10:7e:11:12:8c:01:a8:bd:8d:53:83:04:9d:
a5:b9:af:19:98:ef:12:bd:a3:74:8a:62:ba:08:01:
37:90:70:67:6d:bd:33:7d:a4:c3:1a:f8:df:da:38:
6a:cb:c3:ef:4b:ad:7e:c0:a1:11:2a:ef:d2:25:4b:
61:b2:63:9f:6d:06:87:f5:38:1b:f5:25:74:3f:3a:
30:21:7b:54:b4:b8:4c:a7:2f:e3:c4:3f:26:ba:59:
df:19:26:91:01:7b:fc:9a:c0:6e:61:18:97:48:50:
bd:22:60:78:a6:50:60:19:20:95:78:69:d4:38:e1:
78:f5:19:ce:f8:83:f3:60:a1:24:58:54:15:48:77:
09:d6:d1:2b:cf:94:e7:02:7f:06:aa:d5:0b:a7:f7:
65:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5A:C1:CF:C2:B0:7A:64:D0:38:0C:96:3B:3A:BA:C4:A9:DD:0A:74
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B32F2A8E3D8311EDA20680B8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.244.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:2b:fa:f5:ca:49:43:64:b5:33:cf:d3:a8:fe:76:15:ce:3d:
ab:eb:1c:96:6c:fe:b3:7a:bc:05:f4:79:4a:e1:34:66:8e:1d:
81:3e:66:e8:5f:99:eb:f9:94:a6:9f:c6:19:e1:45:ea:fe:3a:
89:3c:80:a5:29:37:fd:a1:11:7b:d0:7b:db:a6:e7:92:30:00:
a4:ee:29:98:ea:01:0d:10:b5:2a:d3:19:51:5e:e6:af:bd:8a:
d3:93:e3:ba:4f:df:28:3e:ce:4d:e8:2c:f8:2b:dc:fc:49:05:
a1:fc:be:65:4c:9e:60:7e:ce:66:58:94:5f:0f:93:86:36:2f:
b1:bf:d4:ff:95:9f:e9:57:68:81:1f:ff:d9:15:9a:b4:0c:4d:
17:b6:82:97:5a:34:fe:b2:6a:37:b0:dc:3d:ee:3e:fb:14:8f:
f0:1c:da:49:ce:5a:85:de:ea:52:4e:20:8f:4f:1b:af:1d:91:
1b:56:df:e1:6b:99:ad:11:bc:08:eb:a9:04:33:72:80:22:f1:
23:e7:b8:ec:14:71:e0:6f:22:19:19:6c:13:57:e3:6b:1e:35:
2d:7a:d6:62:24:ab:1f:70:96:fa:f8:ce:17:c0:24:52:e3:e5:
ce:7d:c2:d2:ae:0b:e0:8d:49:01:ff:de:89:b6:b7:fa:b2:be:
c1:22:30:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 10:57:15 2023 by rpki-client on console-fra.rpki-client.org