Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/BB8D2A9C3D8211ED86A8CAB5F1222468.roa
File: BB8D2A9C3D8211ED86A8CAB5F1222468.roa (raw, json)
Hash identifier: SiIQEG1T0rngr5M0CaggFe7QzS0ANWDeicl2rkMVZv0=
Subject key identifier: 5B:74:35:C1:73:7F:D2:06:8D:7E:09:89:29:17:2F:98:D9:1A:A1:0F
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 088F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/BB8D2A9C3D8211ED86A8CAB5F1222468.roa
Signing time: Mon 26 Sep 2022 10:05:22 +0000
ROA not before: Mon 26 Sep 2022 10:05:18 +0000
ROA not after: Tue 26 Sep 2023 10:05:18 +0000
asID: 203999
IP address blocks: 161.123.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2191 (0x88f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 26 10:05:18 2022 GMT
Not After : Sep 26 10:05:18 2023 GMT
Subject: CN=63317962-7df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:cf:9d:ae:54:82:3d:7d:ef:10:68:af:ce:
20:f8:2a:21:46:8b:9e:d3:6b:bb:a7:a9:e1:8d:53:
fb:b2:98:9e:40:8e:74:98:db:c8:eb:0a:01:36:30:
d9:66:ca:14:23:6c:36:9a:c8:87:b4:27:2b:7a:52:
67:94:76:5e:2e:aa:c1:40:0d:e9:fb:a9:cd:53:a9:
cb:1a:cf:9f:7b:50:c4:d4:d0:76:ef:45:19:e0:71:
17:50:15:31:29:c2:da:f1:24:84:18:43:48:a4:b2:
d1:6f:6f:5e:7d:d1:de:8c:03:18:19:5c:ad:9d:68:
07:57:85:e3:69:43:2f:88:e9:92:db:22:03:3c:fd:
57:b5:3d:94:15:5c:73:e4:68:1a:9e:65:86:f6:66:
73:15:4d:70:46:20:c5:29:52:80:5e:44:fd:79:0e:
62:19:89:94:d5:48:43:dd:44:25:bb:1b:0d:40:79:
83:d2:af:d0:58:43:8c:bf:f8:ab:6a:13:0e:91:26:
5e:d3:37:8a:a0:a9:d8:b4:24:3f:de:10:70:90:c1:
7c:3e:04:9e:21:85:5e:b2:02:50:67:80:6d:59:22:
9d:74:0e:07:45:22:30:45:15:db:6d:c0:eb:1e:f4:
48:e9:46:19:28:ed:8b:f3:7e:48:8b:06:6c:cc:4c:
31:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:74:35:C1:73:7F:D2:06:8D:7E:09:89:29:17:2F:98:D9:1A:A1:0F
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/BB8D2A9C3D8211ED86A8CAB5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.210.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:5a:d1:c1:c9:b6:1f:07:f1:97:f5:e4:b9:00:cb:24:d0:c1:
fc:c2:b5:86:4d:61:9a:7a:e6:58:c8:39:4e:3c:ac:a1:2b:eb:
88:ac:c4:2d:fc:7a:d1:7d:fa:1f:14:e5:a8:fb:80:85:fb:37:
65:15:37:25:4f:e1:15:a2:23:a2:39:b5:ce:3e:aa:28:0b:a7:
d5:c9:12:d9:ee:3e:ca:2b:2a:f3:f1:d3:0e:68:11:88:a1:43:
b7:af:b3:c1:af:b8:42:56:58:ae:5f:75:74:df:ad:1b:ce:e0:
0b:dd:20:9b:23:de:11:c9:05:d6:44:7a:7c:c6:6a:25:2e:10:
26:91:ce:29:41:c2:24:e5:bf:0b:2c:19:64:ab:f0:8a:b5:a8:
17:78:b7:30:ed:3b:ee:9d:46:ba:45:fb:7f:fa:06:27:ec:a4:
2e:2c:76:23:3c:b3:1e:f6:c3:64:2e:95:f3:ef:2f:e3:1e:4c:
1a:81:1a:83:17:a3:e6:90:ab:dd:c7:cd:ad:53:ec:20:f9:08:
3c:b8:f2:d6:16:9c:3b:95:e7:ba:21:d6:4a:b8:9e:e4:43:ee:
f2:01:97:41:b1:7f:cd:af:fc:75:ae:e8:7f:0a:e7:4c:07:47:
e3:2a:83:dc:bb:b9:4f:67:4e:aa:ab:82:57:68:f4:61:21:c9:
d3:92:95:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 10:57:15 2023 by rpki-client on console-fra.rpki-client.org