Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B617060285BB11ECBEEFC59C5A40D577.roa
File: B617060285BB11ECBEEFC59C5A40D577.roa (raw, json)
Hash identifier: 1MbM6xQCNfUXFszC05c3tZPdLjPP+sKDasbXe9Pz0+U=
Subject key identifier: BA:9B:E2:A2:B9:80:2D:8E:C2:8C:D5:34:6D:AA:6E:70:D7:33:BF:B7
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 058B
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B617060285BB11ECBEEFC59C5A40D577.roa
Signing time: Fri 04 Feb 2022 13:09:40 +0000
ROA not before: Fri 04 Feb 2022 13:09:37 +0000
ROA not after: Fri 03 Feb 2023 13:09:37 +0000
asID: 58202
IP address blocks: 161.123.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1419 (0x58b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 4 13:09:37 2022 GMT
Not After : Feb 3 13:09:37 2023 GMT
Subject: CN=61fd2594-d93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d7:6f:a2:d4:05:fa:4d:59:2d:ba:38:0b:01:
cc:38:4b:fc:93:ff:eb:c3:b1:f2:1a:96:8a:66:cb:
2a:75:d1:20:cd:66:08:32:d3:09:9c:72:5b:e3:bd:
64:e1:5e:7b:06:17:5b:e2:ac:da:58:0c:ac:67:74:
87:4d:0f:94:34:25:d3:48:cd:06:af:53:ca:a4:6a:
93:3f:4f:9f:d7:01:d8:e1:0f:ae:a3:e2:f4:7d:90:
be:3d:21:df:20:b2:96:a6:74:d3:a9:4b:3b:b0:08:
bb:e6:34:97:5b:f6:60:50:da:5b:df:e8:b6:3e:28:
ef:b5:e3:4c:e4:2d:ab:22:70:4e:34:27:00:6a:8a:
09:b4:85:de:93:95:cd:70:9e:3d:41:a0:07:ba:5c:
b8:c7:1f:83:d3:88:6d:00:8a:51:f6:72:18:22:d2:
a2:9b:4a:b5:1b:19:95:44:bf:3d:d0:73:0d:9c:b4:
80:11:a3:e1:c2:9c:4b:85:c3:fd:36:2d:57:a9:e0:
a5:31:9c:44:08:7d:55:9d:43:d8:b3:93:ce:57:4b:
47:e1:cc:0a:ff:d2:28:8c:c4:2b:db:48:22:6d:be:
69:3d:1c:df:20:b8:7b:79:8b:22:b1:e8:fa:58:fe:
d4:bb:9d:cc:4c:0f:4c:1c:87:df:6b:43:8a:91:18:
be:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9B:E2:A2:B9:80:2D:8E:C2:8C:D5:34:6D:AA:6E:70:D7:33:BF:B7
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B617060285BB11ECBEEFC59C5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.27.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:29:d5:50:25:f4:f2:38:8d:bc:6a:03:dc:69:1c:18:50:ef:
6e:90:b7:3a:cf:c4:3d:4a:45:ef:8e:1e:52:a0:28:31:84:43:
12:7c:01:6d:d5:15:50:09:38:9a:34:b1:10:90:bb:01:da:42:
40:af:ef:da:e3:87:9a:c9:62:dc:14:55:43:75:de:e5:54:92:
8a:49:5c:77:1e:dc:98:98:0a:6b:12:8e:1a:e1:2c:22:a2:09:
b7:90:95:61:ba:f8:88:07:71:b7:c1:30:f3:42:3b:48:c0:60:
d4:c9:6c:0a:df:3a:74:71:ea:8c:a3:62:fb:7d:07:e8:9f:74:
f0:6c:45:95:22:5d:58:16:61:35:46:2e:6c:b5:18:a5:69:b2:
d1:6e:3d:4c:ee:2a:87:fc:b2:7a:a1:4d:3e:9f:b8:c7:0b:13:
9a:53:a9:aa:a7:89:b8:3e:01:ff:81:c7:32:35:76:8e:ab:4e:
45:15:f9:9f:67:5e:a0:67:0d:09:6f:82:81:e8:aa:b1:6f:97:
4f:eb:05:26:83:bd:55:59:39:f8:3d:97:e7:63:37:65:30:20:
ab:99:7a:a1:42:e0:c8:d1:13:d9:d8:60:f0:f9:be:da:5f:4f:
65:b4:5e:54:c4:1d:46:8c:18:74:50:1c:4b:ec:43:53:fe:86:
fc:9c:63:58
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBYswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAyMDQxMzA5MzdaFw0yMzAyMDMxMzA5MzdaMBgxFjAU
BgNVBAMMDTYxZmQyNTk0LWQ5M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDE12+i1AX6TVktujgLAcw4S/yT/+vDsfIalopmyyp10SDNZggy0wmcclvj
vWThXnsGF1virNpYDKxndIdND5Q0JdNIzQavU8qkapM/T5/XAdjhD66j4vR9kL49
Id8gspamdNOpSzuwCLvmNJdb9mBQ2lvf6LY+KO+140zkLasicE40JwBqigm0hd6T
lc1wnj1BoAe6XLjHH4PTiG0AilH2chgi0qKbSrUbGZVEvz3Qcw2ctIARo+HCnEuF
w/02LVep4KUxnEQIfVWdQ9izk85XS0fhzAr/0iiMxCvbSCJtvmk9HN8guHt5iyKx
6PpY/tS7ncxMD0wch99rQ4qRGL6hAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUupvi
ormALY7CjNU0bapucNczv7cwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0I2MTcwNjAyODVCQjExRUNCRUVGQzU5QzVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChexswDQYJKoZIhvcNAQELBQAD
ggEBAJ0p1VAl9PI4jbxqA9xpHBhQ726QtzrPxD1KRe+OHlKgKDGEQxJ8AW3VFVAJ
OJo0sRCQuwHaQkCv79rjh5rJYtwUVUN13uVUkopJXHce3JiYCmsSjhrhLCKiCbeQ
lWG6+IgHcbfBMPNCO0jAYNTJbArfOnRx6oyjYvt9B+ifdPBsRZUiXVgWYTVGLmy1
GKVpstFuPUzuKof8snqhTT6fuMcLE5pTqaqnibg+Af+BxzI1do6rTkUV+Z9nXqBn
DQlvgoHoqrFvl0/rBSaDvVVZOfg9l+djN2UwIKuZeqFC4MjRE9nYYPD5vtpfT2W0
XlTEHUaMGHRQHEvsQ1P+hvycY1g=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org