Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/BFFFF454F60811EC8402D07EF1222468.roa
File: BFFFF454F60811EC8402D07EF1222468.roa (raw, json)
Hash identifier: 2k6Sygy7qVJLFlkv1XMDpdiqxE3J2055kkPJ+Qh7Ah4=
Subject key identifier: 2F:34:27:9B:F7:FD:58:03:A2:45:CA:80:99:35:F8:B5:2D:F5:D9:C9
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 077E
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/BFFFF454F60811EC8402D07EF1222468.roa
Signing time: Mon 27 Jun 2022 11:03:18 +0000
ROA not before: Mon 27 Jun 2022 11:03:15 +0000
ROA not after: Tue 27 Jun 2023 11:03:15 +0000
asID: 203999
IP address blocks: 161.123.76.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1918 (0x77e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 27 11:03:15 2022 GMT
Not After : Jun 27 11:03:15 2023 GMT
Subject: CN=62b98e76-4b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:40:2f:ed:c4:cd:b9:85:80:08:40:81:b2:49:
8e:91:f0:c3:e0:4e:ca:bf:91:9d:2a:0e:d7:e7:a5:
7f:e9:1e:e6:ab:92:00:ef:00:1a:34:74:a6:71:d7:
22:c8:2d:d0:2d:4c:0b:1f:f1:2e:d4:6d:82:c9:c7:
22:d2:52:2a:99:57:e0:6c:da:84:48:3e:31:72:70:
ef:0c:9a:48:93:cf:27:d9:02:bd:a2:81:a8:bf:a9:
65:31:9a:1c:6f:c4:1d:72:73:80:9f:07:35:78:7e:
72:dd:0d:c9:d9:a1:85:f3:dc:4e:54:f9:ce:38:db:
9b:5e:ec:5d:9e:50:57:ec:95:68:44:77:40:c4:c6:
d2:d8:50:66:33:c2:da:24:c8:7d:cc:3e:00:54:37:
7b:b7:c4:58:de:29:b9:3b:de:90:a9:72:29:a9:f7:
6e:16:6e:f9:8e:96:82:8d:65:e0:88:c2:6c:01:e2:
ea:6e:70:55:eb:6a:a4:c5:02:56:df:38:7c:6f:68:
b0:bf:ec:73:c3:ac:7d:02:da:a5:3e:ff:c4:a3:14:
a1:32:0a:9f:55:6b:7d:bf:44:a6:f2:1e:c7:3d:d4:
58:1d:37:1a:d7:bb:3b:74:b8:fd:b7:d6:06:48:99:
6e:45:32:3e:f9:6e:e3:e6:6d:06:47:0a:83:fa:1c:
e1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:34:27:9B:F7:FD:58:03:A2:45:CA:80:99:35:F8:B5:2D:F5:D9:C9
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/BFFFF454F60811EC8402D07EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.76.0/22
Signature Algorithm: sha256WithRSAEncryption
05:89:f0:bb:06:0c:43:98:e0:8b:4c:7c:0b:2d:5f:ae:9c:79:
e7:09:42:ee:80:35:8d:52:73:46:c4:a5:cb:07:47:88:0d:73:
ae:1c:7f:8f:41:5f:1f:7b:dc:21:5d:a5:83:ed:3f:55:2c:dd:
7e:bd:37:e9:66:5c:92:55:45:3a:bb:c3:5c:8b:39:46:19:39:
9f:8e:b7:64:71:00:66:b1:e3:26:72:be:7f:22:18:b4:c5:00:
de:0f:64:a5:c2:57:9d:a4:e4:5f:5e:b2:3a:ae:31:7a:ce:dd:
b4:b0:1c:c4:24:c1:36:4c:08:02:48:4c:a2:95:b5:be:21:ca:
25:eb:85:c1:73:ea:b3:d9:6d:12:e7:d6:e0:10:53:40:43:38:
b6:00:88:38:a3:68:16:45:26:61:39:a3:40:fa:4f:fc:58:fe:
d8:74:9f:26:a7:4d:f7:c3:2b:bc:ad:48:c9:79:95:20:ca:f4:
b6:bd:2c:b8:9a:0a:90:79:54:a7:28:40:b9:26:6f:4b:7b:ac:
cb:69:d3:93:38:de:bb:2e:46:c4:20:a2:26:2f:29:bf:fb:1b:
8f:0f:77:65:04:74:cb:10:82:9f:c1:33:33:8e:f5:7c:3b:dd:
80:e9:65:ed:94:2f:9c:10:8c:2f:6c:d7:37:93:ee:4e:c3:ca:
3f:18:97:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org