Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C27EFDE8919811EDA73366D7F1222468.roa
File: C27EFDE8919811EDA73366D7F1222468.roa (raw, json)
Hash identifier: qhFmTcdNKvTu2oi1qvTGZr2yvY0+QpL3K7LV5RCJqo8=
Subject key identifier: 0A:BC:6F:60:7D:E5:CE:5F:3B:40:A8:13:EA:B4:2D:09:A5:5D:85:62
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0956
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C27EFDE8919811EDA73366D7F1222468.roa
Signing time: Wed 11 Jan 2023 10:14:40 +0000
ROA not before: Wed 11 Jan 2023 10:14:36 +0000
ROA not after: Thu 11 Jan 2024 10:14:36 +0000
asID: 133499
IP address blocks: 161.123.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2390 (0x956)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 11 10:14:36 2023 GMT
Not After : Jan 11 10:14:36 2024 GMT
Subject: CN=63be8c10-b7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:67:23:2e:1e:fa:6c:e4:ae:5b:4f:2e:04:
22:f8:4c:61:b0:dd:5f:da:22:5f:ba:68:7e:18:78:
8a:e7:80:73:a8:ce:7d:db:22:f3:28:ea:15:fc:5b:
27:bc:ea:27:af:f1:01:41:cb:ff:0a:15:32:91:16:
aa:0d:a5:ff:98:55:f7:e5:a9:8c:85:b9:c4:81:0e:
14:e1:63:fe:2c:2f:61:d9:4b:cc:94:df:d6:50:6d:
a3:b0:f7:ed:f0:83:07:2f:c4:db:33:a4:cd:8f:a2:
55:96:d9:d4:f5:db:60:59:6c:1e:82:a6:7d:49:0c:
cd:2d:66:ff:5e:4b:ca:3d:4e:df:29:99:33:1d:40:
de:60:23:fd:6e:e5:d4:ec:e5:e5:5c:ba:f6:08:58:
da:d6:2c:14:86:35:a9:fe:38:6c:09:57:59:ec:4b:
30:2f:8f:9e:bf:a0:32:90:75:c1:a4:f1:86:b2:26:
cb:92:9f:47:a1:46:7b:2a:05:32:2e:6f:ca:9f:b9:
a5:e0:f0:af:35:13:9f:58:3a:20:af:80:03:e4:f7:
02:6e:4a:a4:3d:fb:6e:b8:10:de:12:23:6e:83:84:
0d:4c:4a:4e:d4:9c:de:f3:e2:06:a6:36:51:98:f9:
43:44:17:57:f9:14:57:19:2f:e8:9f:f9:3a:6f:6f:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BC:6F:60:7D:E5:CE:5F:3B:40:A8:13:EA:B4:2D:09:A5:5D:85:62
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C27EFDE8919811EDA73366D7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.221.0/24
Signature Algorithm: sha256WithRSAEncryption
96:3b:54:af:b0:7b:a3:9d:90:5d:3e:f0:2f:a0:d0:e6:34:e5:
de:91:2a:99:1b:ce:24:c5:66:36:a6:09:86:45:6a:60:e5:d0:
81:7e:1a:09:7e:7e:b7:8f:18:6c:46:60:b1:de:28:f3:fa:38:
1b:35:5e:8c:db:66:2b:a5:c4:03:97:60:6e:6e:c7:a9:f6:cd:
7d:96:61:7c:c1:8c:95:16:78:cf:7a:74:85:1c:c3:77:ba:5b:
e8:02:2d:28:9e:98:c9:6d:87:97:22:8e:dc:2c:ba:33:ed:9e:
8a:d5:32:1b:44:5d:d8:92:b8:fe:36:29:fa:3b:dd:76:1a:8c:
be:c0:18:02:6e:02:38:4d:cf:80:1c:9c:d7:20:55:9e:59:63:
6e:ba:10:35:df:c4:4d:22:37:2f:c8:96:67:ef:fb:db:43:30:
fb:28:96:fe:52:af:ee:20:bd:9d:e7:6f:3e:6a:1d:b5:94:cf:
b1:3e:1c:6f:79:bb:ac:9d:ce:46:1f:0f:73:e7:5f:1f:5f:8d:
9f:28:d6:8e:28:5f:66:80:0c:b8:58:dc:22:91:1b:4f:ad:06:
5c:2d:b9:64:c5:c6:dc:ec:17:36:aa:65:0d:eb:c8:10:bc:19:
8b:b8:65:17:76:40:4a:03:b2:0d:75:50:fc:d5:3c:73:a8:07:
c6:6e:52:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 02:59:22 2024 by rpki-client on console-ams.rpki-client.org