Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B4AFC2F8E80311EDB9515C6B4AD9E6FC.roa
File: B4AFC2F8E80311EDB9515C6B4AD9E6FC.roa (raw, json)
Hash identifier: xv0bUnHQlYqDQiRHEPus/REp1QOA9uXaFNWS7pb8/DU=
Subject key identifier: 8C:81:5D:E5:7F:EB:57:3D:D3:6A:C1:D5:38:C7:1C:A5:54:B8:AD:B0
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A8B
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B4AFC2F8E80311EDB9515C6B4AD9E6FC.roa
Signing time: Mon 01 May 2023 09:36:53 +0000
ROA not before: Mon 01 May 2023 09:36:50 +0000
ROA not after: Thu 01 Jun 2023 09:36:50 +0000
asID: 400377
IP address blocks: 161.123.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2699 (0xa8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: May 1 09:36:50 2023 GMT
Not After : Jun 1 09:36:50 2023 GMT
Subject: CN=644f8835-f2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e3:80:6f:3d:bb:4b:27:be:25:16:04:cb:38:
3b:5f:6d:07:f5:a5:43:9c:ae:92:c3:a7:aa:66:db:
bf:2e:79:ef:c0:0b:f0:43:7e:0d:4d:a6:79:8d:a0:
db:5e:df:b8:8c:a0:18:10:69:d4:5c:78:08:7a:95:
35:9c:c1:d7:08:5d:8b:f8:99:24:95:66:89:3c:5d:
f8:ee:e1:23:e3:04:2f:0a:4f:86:9b:67:45:0a:0d:
ea:23:05:fd:44:b4:aa:0c:ff:4b:36:51:c6:8a:7c:
7d:b1:a8:8c:31:10:46:e6:3f:81:b5:77:f9:9c:fb:
04:b6:a5:3f:7b:cb:79:7c:fa:4a:37:d2:b4:d7:83:
bb:6d:36:01:e1:4f:f2:f0:f8:fc:7c:7c:6f:83:61:
c9:ea:23:d6:0c:98:dc:89:a2:d5:7c:1c:9a:58:2e:
c1:b4:17:f7:b9:91:9e:46:f0:c7:06:b8:79:2e:20:
29:6a:fa:61:d4:2f:a2:3a:ba:e3:78:fc:74:e7:b2:
ec:78:6e:fc:b4:e1:04:d4:a8:aa:a1:46:d7:df:02:
a1:7f:45:68:75:72:73:12:51:eb:c4:51:89:a6:39:
ff:73:4d:66:11:63:8d:42:5f:4e:e8:7a:f8:3f:91:
f8:76:19:1b:85:ac:f9:cd:b0:63:66:8d:56:88:7e:
c4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:81:5D:E5:7F:EB:57:3D:D3:6A:C1:D5:38:C7:1C:A5:54:B8:AD:B0
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B4AFC2F8E80311EDB9515C6B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.240.0/24
Signature Algorithm: sha256WithRSAEncryption
65:61:30:2c:20:99:9a:e2:f1:33:f0:85:41:57:a0:9d:63:40:
21:70:7c:40:92:e9:68:41:0e:53:b2:a2:c6:21:9d:0c:2c:25:
ce:fb:9f:c2:0b:75:f6:eb:b9:7b:2b:e8:8c:b5:25:07:49:a1:
1a:e2:63:e0:b4:5e:37:5d:0d:bb:67:c7:39:26:a1:b7:63:1f:
2e:e0:2a:72:54:82:f5:e1:94:db:43:fe:75:e1:91:e5:cf:67:
df:3b:6d:39:5f:7c:37:d4:23:cd:ad:05:c4:a1:46:7d:51:39:
7c:90:3d:be:7d:84:f2:fc:ac:49:66:45:e6:67:1f:06:4c:f8:
13:68:58:84:6e:87:09:35:75:d2:f3:69:51:22:08:1b:18:bb:
14:db:4a:47:b0:b1:eb:68:60:8b:97:3e:ec:b5:2d:d3:ed:ac:
b0:05:29:54:ba:90:c4:aa:b3:5d:8c:eb:b7:1e:15:0e:47:47:
23:ab:f2:64:ed:c8:53:42:c2:8b:7f:21:17:31:57:99:1e:90:
9a:08:b9:1c:45:09:fe:7a:30:bc:e5:44:0a:7e:06:f4:bc:1b:
9e:7a:62:56:79:16:3b:1b:64:77:be:46:ab:74:82:3e:86:fb:
9e:8e:5d:4b:78:46:5d:fe:96:ce:22:11:b9:36:6a:46:82:b6:
8b:fa:da:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org