Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C3A0560685BC11ECAD3705A05A40D577.roa
File: C3A0560685BC11ECAD3705A05A40D577.roa (raw, json)
Hash identifier: NnFNECk2JZPArwQU2rdBxcVYZHiNTgrtvc2dSV6xoy8=
Subject key identifier: 47:1F:83:DA:B5:DB:41:36:51:9A:18:54:6E:54:79:C3:AA:13:C2:8E
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 059D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C3A0560685BC11ECAD3705A05A40D577.roa
Signing time: Fri 04 Feb 2022 13:17:12 +0000
ROA not before: Fri 04 Feb 2022 13:17:09 +0000
ROA not after: Fri 03 Feb 2023 13:17:09 +0000
asID: 58202
IP address blocks: 161.123.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1437 (0x59d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 4 13:17:09 2022 GMT
Not After : Feb 3 13:17:09 2023 GMT
Subject: CN=61fd2758-0d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:bd:8d:1c:e2:1b:ac:52:7e:a9:6a:41:4f:
f5:8c:bb:d7:95:df:3d:25:a3:19:19:7a:ae:14:df:
1b:6e:75:18:ca:a5:5d:f4:dd:6c:3f:df:68:59:89:
82:bb:9c:44:90:c2:ac:a9:86:6d:8a:78:e6:d1:7e:
b8:e9:e8:cb:67:c8:c6:2f:26:23:79:93:de:b1:84:
ee:f3:ab:62:f1:c8:e6:8e:07:42:94:62:67:ad:84:
bd:8a:a4:35:38:d4:ef:92:fe:33:61:cc:06:2c:9b:
1b:e2:12:4e:62:65:ef:05:d6:cc:b4:c6:a7:e8:1c:
4c:96:04:a3:f5:dd:31:c6:3b:aa:3c:bf:40:02:1a:
25:89:94:da:50:92:54:46:23:02:1f:38:97:41:93:
c0:6c:63:66:3b:d2:98:b5:9a:31:38:fc:68:de:22:
0c:d4:42:97:79:61:e8:10:f5:ad:b4:df:df:ec:64:
47:65:b7:b1:01:23:73:bf:9d:42:e7:4e:76:b0:aa:
3c:5a:4b:ce:ac:ff:e7:ad:d4:05:f2:88:cb:5f:a8:
0f:aa:f0:67:53:e8:36:49:c3:32:01:41:8d:e6:6b:
d6:e9:10:c2:bf:cf:13:33:f1:21:69:03:ab:72:a0:
68:ae:00:fa:fa:7c:7e:da:e7:4b:b3:be:a1:fb:55:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1F:83:DA:B5:DB:41:36:51:9A:18:54:6E:54:79:C3:AA:13:C2:8E
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C3A0560685BC11ECAD3705A05A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.234.0/24
Signature Algorithm: sha256WithRSAEncryption
29:8b:fe:67:98:8c:19:99:8a:56:d5:07:19:42:47:f3:95:51:
f7:82:be:a3:ee:d6:98:b7:4b:55:27:71:df:f5:a8:3b:3f:f7:
18:eb:f2:1f:22:e9:cd:b2:c6:a4:b3:d6:83:05:23:15:cc:11:
59:2d:a0:98:7f:44:30:5e:53:47:0c:b2:8a:ff:19:b6:81:ee:
cb:2f:06:a3:74:33:d9:8a:a4:cc:a6:f8:e0:dc:28:dd:93:c6:
bc:3b:21:9f:de:1f:51:82:f1:fb:80:0a:cf:be:0a:d7:99:cf:
c0:cd:79:f7:fa:95:f5:e0:3e:5d:7a:eb:ec:f1:15:52:36:3e:
24:98:cc:0c:67:82:85:e2:a8:9d:1c:ca:50:72:6a:88:03:54:
72:1b:9b:21:b2:95:87:b1:94:66:f1:10:0b:06:b3:77:2a:2d:
95:0b:06:f7:80:6e:4e:ad:1e:8c:15:4a:02:ca:13:be:a5:f5:
87:ae:42:e6:28:9b:ff:b5:cf:7c:e2:a0:b3:86:52:39:20:2c:
47:bb:4b:e9:25:1b:0f:b8:8c:69:75:dc:04:50:55:6b:af:a6:
47:87:a5:77:9f:79:b4:c4:5e:ec:33:fe:a2:9f:17:fb:6d:cf:
d8:e8:3e:53:13:6e:bc:60:ad:0e:a3:60:91:69:b0:ca:95:fd:
a6:a5:f9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org